Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf84129d-5373-3325-85f9-58b86b087904.roa
File: bf84129d-5373-3325-85f9-58b86b087904.roa (raw, json)
Hash identifier: uebiiEcC9hMELxfU19GRJsI4zL6Z3E15BaNdfnYiRtg=
Subject key identifier: 86:00:24:4E:30:84:72:82:5A:12:A7:82:0A:22:D5:B9:4E:FA:72:A2
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848C5805CB1D1E8503AF44E4FC0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf84129d-5373-3325-85f9-58b86b087904.roa
Signing time: Tue 04 Feb 2025 13:59:46 +0000
ROA not before: Tue 04 Feb 2025 13:59:46 +0000
ROA not after: Mon 05 May 2025 12:59:46 +0000
asID: 30036
IP address blocks: 2604:2e8d:4000::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:80:5c:b1:d1:e8:50:3a:f4:4e:4f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 4 13:59:46 2025 GMT
Not After : May 5 12:59:46 2025 GMT
Subject: CN=bda4326f-3df6-4e3f-96a2-f0b7c3c37dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b6:93:50:a3:a2:d1:f0:d3:38:b8:ad:05:94:
c9:a4:c3:b6:1e:27:41:90:d5:39:d7:fc:f2:6f:96:
57:fa:c3:76:49:ac:ef:d9:b6:64:3b:dd:2f:38:ec:
3d:42:34:97:bf:33:22:2a:4f:ab:45:72:dc:e9:55:
b4:95:eb:98:a6:73:d7:a0:fc:72:d3:3a:07:b2:40:
5c:d7:e4:47:f3:7f:ae:80:68:1b:5b:9e:04:01:bf:
7e:ec:fd:83:90:39:ed:c1:b4:9f:1e:66:c8:8c:af:
48:6a:61:8d:cd:3f:41:d9:a4:a5:3d:cd:99:a8:3a:
9f:44:fd:53:ad:fd:b9:14:3f:5e:55:87:09:f6:d4:
5e:88:a0:0f:b0:f0:51:ee:f9:ae:bb:bb:0b:0d:5d:
3b:28:2d:14:f5:65:a0:ab:8a:9e:f9:e5:ff:1c:53:
45:83:74:85:a2:60:b3:cc:d6:6c:0e:ec:4e:25:5f:
d8:ad:3d:99:6a:f0:fa:75:a5:5d:54:26:e4:92:b2:
fd:3f:c4:39:ee:75:9e:16:e6:d6:48:fc:4a:af:66:
48:6e:87:2c:fd:70:13:60:b3:14:79:ca:87:5b:39:
8e:8f:24:45:82:63:27:25:80:1e:a6:4f:76:11:64:
71:9f:c8:d4:ac:1a:ee:1f:90:b8:ff:dd:49:03:5b:
f9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:00:24:4E:30:84:72:82:5A:12:A7:82:0A:22:D5:B9:4E:FA:72:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf84129d-5373-3325-85f9-58b86b087904.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8d:4000::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:33:5e:eb:87:bb:01:78:47:1d:01:a7:77:52:97:e4:62:3e:
66:5b:a7:53:a9:0b:21:b9:a9:eb:07:38:7d:7e:4c:25:1d:26:
39:5f:93:02:2f:db:d0:6a:6c:dd:e2:24:6f:34:9a:92:a6:74:
5a:00:cf:d4:19:f5:3d:42:22:38:0c:95:c2:b1:1c:5a:65:a2:
5f:6a:b3:68:d9:54:b7:09:bf:92:0d:0a:15:74:6a:5e:3d:86:
60:5d:86:73:cb:41:e9:e7:71:09:ab:96:de:67:63:fc:dc:2a:
94:71:c7:36:1c:d1:77:c9:7e:a5:75:d7:d7:60:28:eb:f7:01:
d8:0e:fc:e0:77:b1:51:eb:ba:af:33:bb:13:39:6b:7c:81:82:
3d:3e:3c:b6:d9:e6:7b:ce:97:2e:f7:5e:c7:dc:b9:58:e0:c6:
af:8a:e1:1a:92:c1:34:d1:b9:f8:e6:00:8f:0b:6e:6e:31:80:
f8:e0:7a:12:2b:9e:8d:7d:26:d4:65:e8:9a:ff:fe:a5:36:b1:
45:ee:fa:c4:b4:da:48:30:4e:6f:79:3a:f8:da:49:d4:ae:79:
93:59:86:b8:49:b8:06:64:09:fd:c3:8c:94:52:17:d8:de:e5:
77:a8:84:46:84:9f:56:a2:87:26:b8:5a:8c:37:57:77:ba:ea:
fd:dc:0f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:28:50 2025 by rpki-client