Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/db85abb9-cd34-312f-a6a2-78db24e05c0b.roa
File: db85abb9-cd34-312f-a6a2-78db24e05c0b.roa (raw, json)
Hash identifier: Lqn6frmh4eNq8zqMQyDk4UPqXhaxL21MiqA/rgG4o+s=
Subject key identifier: C2:2E:C5:D5:31:09:50:D9:85:8F:E0:36:01:B7:FD:7A:ED:89:8D:C8
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848C577D905CEBCF0D481A80E80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/db85abb9-cd34-312f-a6a2-78db24e05c0b.roa
Signing time: Tue 04 Feb 2025 13:42:37 +0000
ROA not before: Tue 04 Feb 2025 13:42:37 +0000
ROA not after: Mon 05 May 2025 12:42:37 +0000
asID: 30036
IP address blocks: 2604:2e8a:8c00::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:77:d9:05:ce:bc:f0:d4:81:a8:0e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 4 13:42:37 2025 GMT
Not After : May 5 12:42:37 2025 GMT
Subject: CN=d339cd6e-3612-49d6-be83-394d50e70610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:df:8b:ff:ab:c2:79:42:3d:e3:48:2f:11:9b:
63:77:cf:f3:51:4f:8d:76:71:f0:36:25:08:8c:78:
31:64:5b:a0:b7:d3:95:50:d0:c9:45:f4:9f:c9:a6:
5f:03:bd:fb:11:2c:d3:46:1e:8d:7b:79:ca:55:95:
c3:93:65:f8:b5:07:b3:4c:c2:6e:4d:e0:4f:d3:ad:
78:20:ca:bd:04:16:e7:c6:19:23:88:db:d1:1b:96:
26:83:30:9e:66:71:a1:9e:bb:0b:d6:53:41:82:cb:
a1:f0:4f:28:4f:3a:d2:fb:de:0a:a7:dd:46:0b:59:
0c:1f:60:3f:00:1f:c0:ec:e6:c6:b4:d1:aa:be:16:
7e:ca:ef:98:24:0e:7c:12:ec:8a:f6:0d:80:a8:47:
92:07:7c:ed:79:03:f1:d1:0a:bf:79:d6:5f:21:76:
bb:be:5d:42:8a:99:7c:55:be:45:a9:86:33:7d:64:
bc:3e:da:5a:58:87:5a:cb:8b:a5:db:65:c8:d2:dd:
b3:b7:38:0b:fd:ec:d5:c4:a7:87:59:f0:23:a9:cf:
2b:5b:b3:8a:6d:db:bc:cb:7f:f7:2d:3f:5f:72:0c:
f6:58:c4:02:fd:93:8a:83:96:da:91:00:9d:8a:ae:
fa:bf:fe:41:c2:2d:bd:a2:11:87:e9:e8:30:1e:77:
cf:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:2E:C5:D5:31:09:50:D9:85:8F:E0:36:01:B7:FD:7A:ED:89:8D:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/db85abb9-cd34-312f-a6a2-78db24e05c0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8a:8c00::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:7f:d7:cd:96:4a:9a:59:fd:c0:36:e4:16:ad:71:ec:36:57:
d9:58:5c:99:2d:49:6d:54:d2:01:d6:43:d0:6b:24:dd:38:02:
da:f4:ab:35:43:07:bf:84:38:b3:3b:79:25:ce:bb:94:80:b3:
31:2a:7d:1f:d6:d3:85:36:80:60:31:1c:e5:86:60:3c:a4:64:
98:6b:30:82:05:ed:76:d4:6e:bb:e4:04:d4:74:6c:46:ac:bf:
ce:91:2c:53:3f:d4:a5:99:8c:7a:14:5c:eb:51:0c:84:a1:59:
d9:1a:0c:40:6b:39:14:02:94:b9:89:5f:12:07:51:f8:d3:a0:
26:c3:7a:e8:79:4c:e6:33:d9:11:08:bb:83:19:e2:14:ee:e3:
e4:ce:64:cd:f9:8b:29:4b:9b:e5:7b:a3:40:81:13:ff:c1:9b:
6d:32:81:a0:0e:87:a5:30:dd:de:f4:69:36:62:eb:71:46:cf:
56:de:fc:4f:9d:cb:9c:f4:3a:66:8a:b8:78:3a:99:d9:0f:d5:
7d:37:19:c8:97:a6:1c:b5:0e:cd:8d:b5:fb:95:26:09:1b:4b:
15:de:8c:38:24:8c:2c:62:24:8a:39:b8:01:ac:38:aa:0a:d1:
9c:09:82:1f:a3:3b:e8:7a:b9:fc:29:f3:e5:b5:f6:3d:d4:d0:
b0:40:30:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:53:46 2025 by rpki-client