Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d03c064b-93ba-3f92-a0b0-8328edb0e6e0.roa
File: d03c064b-93ba-3f92-a0b0-8328edb0e6e0.roa (raw, json)
Hash identifier: FeznRt/RdboyFb+USNat/qcWhufyEbMxFvc/BDdsps8=
Subject key identifier: B0:82:D6:38:84:71:80:1C:5E:35:88:FD:D8:BD:EE:16:DC:30:1E:43
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848C577A5ECE831119E66B93080
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d03c064b-93ba-3f92-a0b0-8328edb0e6e0.roa
Signing time: Tue 04 Feb 2025 13:42:12 +0000
ROA not before: Tue 04 Feb 2025 13:42:12 +0000
ROA not after: Mon 05 May 2025 12:42:12 +0000
asID: 30036
IP address blocks: 2604:2e88:a400::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:77:a5:ec:e8:31:11:9e:66:b9:30:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 4 13:42:12 2025 GMT
Not After : May 5 12:42:12 2025 GMT
Subject: CN=242005f6-0c9b-4641-b942-336448423b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:58:05:9c:b1:09:9e:0d:9a:8c:b4:0c:5f:69:
6e:48:07:44:26:7b:b1:5e:11:da:55:bf:96:bc:e5:
01:27:6c:e5:09:70:fe:e7:f5:78:12:e8:56:f8:54:
f2:11:52:68:bd:26:0f:2c:34:f7:6d:28:83:37:ee:
16:3d:2b:92:55:a3:27:53:4f:b9:c9:ac:04:55:7b:
f0:65:68:cb:fa:69:70:47:01:ea:38:26:53:de:da:
74:b0:8b:e9:c4:da:4c:a6:d9:20:e6:34:6c:97:27:
20:57:d5:22:a4:eb:08:03:af:3e:bd:97:9e:46:e2:
db:f4:8b:6b:55:e6:b1:3b:d5:d0:ec:8f:84:41:98:
bf:32:b9:af:78:8c:38:f2:6d:8d:34:80:e1:bd:1e:
c4:80:99:bc:08:c0:75:94:97:d2:83:1e:07:60:09:
a5:85:b8:e8:4e:68:10:ba:1d:47:c5:6e:6e:7e:34:
c0:5b:a6:85:29:5f:6f:77:49:e9:0c:7c:ae:33:4a:
4e:f5:e4:6a:f7:4d:07:4e:fe:12:36:89:e8:a1:2f:
b6:62:1f:a7:84:ac:60:d0:f1:d7:7a:ca:fd:0d:14:
96:41:ee:da:83:42:99:e5:da:d4:90:17:cc:23:60:
9a:84:a6:c2:bd:03:ed:34:88:8a:39:1a:df:3b:d0:
74:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:82:D6:38:84:71:80:1C:5E:35:88:FD:D8:BD:EE:16:DC:30:1E:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d03c064b-93ba-3f92-a0b0-8328edb0e6e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e88:a400::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:73:a4:5f:2b:42:02:c5:5b:ef:87:5b:f9:8f:9d:ea:6b:c3:
41:46:6d:b1:dc:3d:d4:04:7f:7f:1e:69:a7:89:e5:1f:de:06:
6e:53:34:37:34:92:a5:dd:87:f1:64:1d:28:cb:21:c7:1d:46:
4b:9c:7a:36:51:9c:ba:79:c3:de:37:57:e4:8c:4e:44:58:0b:
19:d4:b6:86:91:9f:e5:91:3d:51:ef:25:ae:38:da:31:50:31:
12:86:f5:50:70:5b:eb:85:0a:ca:27:62:6a:95:ba:86:15:d6:
e5:41:f6:b5:b1:54:aa:28:06:c8:18:63:2a:03:7f:73:04:51:
d5:49:bf:02:13:9a:37:f7:e9:9d:3f:4e:31:5b:c5:11:2d:cb:
d3:44:04:24:90:8c:a3:e7:7a:22:e9:05:c1:57:02:f3:b7:8f:
54:b2:79:9c:51:9f:42:e5:2e:78:87:57:c3:b8:19:5b:05:fb:
26:6e:21:16:97:90:a2:04:7f:53:d7:4f:e4:ee:fc:d1:07:17:
3a:4d:07:4b:f8:79:f4:4e:59:ba:b1:88:db:59:48:ff:f6:85:
a7:71:97:9a:5f:cf:04:9b:45:62:09:52:2e:1c:9a:2a:54:e1:
5b:2e:a7:2b:60:b9:e9:5e:a3:f9:8c:9d:3d:7f:f4:30:5d:1e:
e7:1a:fe:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:58:44 2025 by rpki-client