Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cbb1fa14-5f45-3d88-bee9-8bc3a3bb1a25.roa
File: cbb1fa14-5f45-3d88-bee9-8bc3a3bb1a25.roa (raw, json)
Hash identifier: qA6/akwKapL6SbV7AIo4rSJ8eNLPueiRpJozEZeXzkM=
Subject key identifier: CA:CF:E6:B8:E2:93:A8:71:6D:47:51:9A:B2:1F:4E:97:A8:9D:59:3C
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848C558EBC9F5DF463B0F7FC000
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cbb1fa14-5f45-3d88-bee9-8bc3a3bb1a25.roa
Signing time: Tue 04 Feb 2025 12:40:18 +0000
ROA not before: Tue 04 Feb 2025 12:40:18 +0000
ROA not after: Mon 05 May 2025 11:40:18 +0000
asID: 30036
IP address blocks: 2604:2e8a:c00::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:58:eb:c9:f5:df:46:3b:0f:7f:c0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 4 12:40:18 2025 GMT
Not After : May 5 11:40:18 2025 GMT
Subject: CN=df4ec3b5-f5d6-4622-9d63-8392a998544f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d6:a2:36:2e:93:b5:0e:15:bf:68:26:ab:61:
63:fe:5c:69:d1:ac:66:0a:36:b3:52:e2:be:3f:cd:
ce:dd:d0:e4:31:c9:6b:80:56:31:de:2b:40:59:f6:
8f:76:fc:69:a4:1c:46:eb:cc:89:9d:7b:46:d4:c3:
a8:05:57:25:1d:35:1e:d4:16:af:73:f2:9c:98:c1:
f1:c8:09:ae:e8:4e:93:5b:33:64:7d:c7:ad:38:8e:
1e:63:6f:ec:77:4a:d5:95:e7:0b:ea:55:4e:c6:7e:
84:ee:0b:eb:20:80:36:ae:b1:86:1c:10:6d:7f:7d:
f5:51:65:df:bd:ba:82:d1:ee:94:67:3c:30:1f:0c:
b6:96:66:b8:ed:41:3c:6e:31:23:89:91:fc:c0:d7:
27:9c:b8:e0:fe:5e:af:b0:4e:d5:17:ce:38:91:bf:
7e:ea:33:b0:24:20:4d:a5:e2:97:5a:f6:3f:d3:f5:
29:aa:f8:af:86:12:08:0e:64:dc:da:97:a9:74:96:
80:dd:1a:6f:49:e8:62:06:32:cd:29:89:2b:27:d1:
da:3c:05:4f:86:35:7c:62:50:7f:6f:cb:4b:f8:1b:
3c:af:ec:4c:3e:99:9c:26:89:f4:a1:56:31:02:7e:
72:cf:6f:09:e7:04:66:84:a3:9f:58:e2:83:d2:2f:
d8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:CF:E6:B8:E2:93:A8:71:6D:47:51:9A:B2:1F:4E:97:A8:9D:59:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cbb1fa14-5f45-3d88-bee9-8bc3a3bb1a25.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8a:c00::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:6e:f0:58:e2:26:24:d7:e9:79:64:b6:4a:1d:f4:e9:5f:a9:
3c:d0:a6:cb:12:b4:e2:82:87:1f:a6:c2:e9:a0:98:0f:bb:4f:
f0:e2:43:bf:db:91:fe:ae:b7:11:86:19:a0:69:14:34:1d:8d:
eb:c8:86:30:6d:cf:58:98:42:aa:25:e1:21:f4:03:08:69:7f:
86:47:6f:84:7e:5a:d1:48:ff:dc:26:1f:c4:65:9c:b8:cf:08:
15:16:56:53:66:41:50:a3:94:6b:a4:4a:be:a6:fd:5a:c2:04:
2e:56:5f:45:7a:f5:e5:c4:cb:44:65:7a:e1:b1:69:bc:8f:36:
26:d9:0d:a5:1f:23:f7:d7:c4:f3:23:9e:c9:0d:29:40:31:2e:
ab:7a:e0:49:5c:9d:d9:4b:f4:d9:a1:26:1c:e3:f3:a8:2b:af:
e8:03:f5:d9:a0:7c:47:b1:67:55:98:70:26:48:a8:22:ab:54:
52:1f:22:e4:ad:68:48:fd:41:e2:8b:22:53:29:7c:38:6b:b9:
38:f7:f0:d3:e7:ee:31:b2:a1:79:ff:2b:1b:2f:93:08:39:1b:
4e:39:1c:af:55:04:51:09:8b:8c:64:60:d8:87:38:3d:13:ce:
b2:d1:59:7a:59:a0:5b:b8:25:41:32:c6:33:ae:50:44:80:4c:
74:cb:6d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:56:22 2025 by rpki-client