Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/eb3fb414-d71f-3b7d-85d9-34e4dfa09e8a.roa
File: eb3fb414-d71f-3b7d-85d9-34e4dfa09e8a.roa (raw, json)
Hash identifier: irzRGNPm/nvauQtZSKxt33GIF5CZLLTlhBc4cV/Hi3s=
Subject key identifier: 58:4C:98:B0:FC:BB:9A:41:47:B0:BA:7A:35:55:8E:63:17:A0:CF:B4
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848C577AA85422A6415BA06D3A0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/eb3fb414-d71f-3b7d-85d9-34e4dfa09e8a.roa
Signing time: Tue 04 Feb 2025 13:42:15 +0000
ROA not before: Tue 04 Feb 2025 13:42:15 +0000
ROA not after: Mon 05 May 2025 12:42:15 +0000
asID: 30036
IP address blocks: 2604:2e89:1800::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:77:aa:85:42:2a:64:15:ba:06:d3:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 4 13:42:15 2025 GMT
Not After : May 5 12:42:15 2025 GMT
Subject: CN=ca8d8777-cb54-4a1e-b6c5-7f96a86a5f58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:74:42:d8:e4:da:cd:e0:91:be:bc:ff:31:27:
fe:c5:d0:38:ae:f0:4b:44:92:4b:3e:7a:65:3b:4c:
05:cf:c0:c1:c3:cb:f9:ec:ee:79:be:94:95:c3:30:
f7:ce:6b:b1:53:77:53:f6:02:54:0d:fe:95:69:d0:
b9:a1:66:cf:42:f3:d6:d7:df:e3:58:68:cf:39:55:
1c:ad:dd:5e:39:e9:c9:e0:3a:4c:3d:23:5d:1d:4e:
a5:79:15:98:61:6d:ba:55:35:55:eb:67:6a:60:af:
92:08:e5:bc:bd:c0:b8:c3:95:83:56:2e:7b:c7:10:
0b:be:97:1b:83:b9:18:27:82:7c:12:74:f8:f2:69:
c6:f1:8f:b5:94:7a:29:8b:96:48:b1:6f:3a:0c:0e:
5e:59:fb:98:60:3f:da:28:c6:86:ec:d3:aa:c9:1e:
30:b7:03:8e:98:4d:f3:09:27:43:ab:f3:43:1c:96:
e5:b4:a2:a7:a5:f6:5f:cc:bf:bc:5c:fa:82:b2:91:
3b:a9:09:21:34:09:32:6b:9e:ec:57:b4:ac:51:a4:
b5:9a:d5:b7:11:b3:09:58:10:78:47:4c:1f:d2:c0:
c0:08:31:2b:6f:14:8c:9b:59:3c:33:fc:bf:4d:bf:
8c:c0:5a:26:17:70:49:c7:9a:c6:07:ca:bf:39:da:
a3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:4C:98:B0:FC:BB:9A:41:47:B0:BA:7A:35:55:8E:63:17:A0:CF:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/eb3fb414-d71f-3b7d-85d9-34e4dfa09e8a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e89:1800::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:ef:7f:4f:f7:17:fd:1d:e4:e8:44:ad:5b:57:d7:95:cc:0c:
1f:b0:24:f5:7f:7f:f0:04:1b:cb:3f:0e:65:7c:ed:93:76:72:
a7:fa:46:1e:a4:0d:19:50:e2:ed:8c:59:19:00:0a:55:d2:72:
ee:8b:98:c8:18:cc:09:b9:11:9e:87:dc:bb:f7:9d:fd:bc:90:
81:a6:41:c1:38:f8:14:65:96:35:77:2f:44:14:04:71:0f:44:
1e:b8:a7:25:82:ee:39:64:58:88:0c:b5:b9:78:06:82:d1:66:
af:84:82:ac:b0:72:e0:76:74:03:bb:9e:96:ab:e9:b2:27:9b:
26:c4:9d:d8:80:24:30:4f:e1:eb:08:24:b0:58:58:0c:a0:d4:
c7:fe:44:bb:87:06:03:f9:4d:9b:12:2c:60:05:91:39:e8:be:
e1:95:45:de:0e:85:06:d7:bf:ce:fc:1f:ed:ad:c6:94:fd:d7:
ce:99:70:48:fa:b7:89:dd:70:53:f2:82:25:96:91:4a:bd:de:
e1:b2:08:07:98:aa:a3:6e:4f:d1:56:40:07:8d:0a:24:b9:20:
4d:83:35:ff:44:88:fa:96:b6:af:85:a7:b4:85:db:3d:ee:3a:
29:46:c0:eb:43:fa:67:71:d2:4e:91:3e:1d:58:48:31:c2:76:
a2:94:79:5b
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjFd6qFQipkFboG06AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDIwNDEzNDIxNVoXDTI1MDUwNTEyNDIxNVowLzEtMCsGA1UEAxMk
Y2E4ZDg3NzctY2I1NC00YTFlLWI2YzUtN2Y5NmE4NmE1ZjU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnRC2OTazeCRvrz/MSf+xdA4rvBLRJJLPnpl
O0wFz8DBw8v57O55vpSVwzD3zmuxU3dT9gJUDf6VadC5oWbPQvPW19/jWGjPOVUc
rd1eOenJ4DpMPSNdHU6leRWYYW26VTVV62dqYK+SCOW8vcC4w5WDVi57xxALvpcb
g7kYJ4J8EnT48mnG8Y+1lHopi5ZIsW86DA5eWfuYYD/aKMaG7NOqyR4wtwOOmE3z
CSdDq/NDHJbltKKnpfZfzL+8XPqCspE7qQkhNAkya57sV7SsUaS1mtW3EbMJWBB4
R0wf0sDACDErbxSMm1k8M/y/Tb+MwFomF3BJx5rGB8q/OdqjZQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFFhMmLD8u5pBR7C6ejVVjmMXoM+0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZWIzZmI0MTQtZDcxZi0z
YjdkLTg1ZDktMzRlNGRmYTA5ZThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiRgw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAH+9/T/cX/R3k6EStW1fXlcwMH7Ak9X9/8AQbyz8OZXztk3Zyp/pG
HqQNGVDi7YxZGQAKVdJy7ouYyBjMCbkRnofcu/ed/byQgaZBwTj4FGWWNXcvRBQE
cQ9EHrinJYLuOWRYiAy1uXgGgtFmr4SCrLBy4HZ0A7uelqvpsiebJsSd2IAkME/h
6wgksFhYDKDUx/5Eu4cGA/lNmxIsYAWROei+4ZVF3g6FBte/zvwf7a3GlP3Xzplw
SPq3id1wU/KCJZaRSr3e4bIIB5iqo25P0VZAB40KJLkgTYM1/0SI+pa2r4WntIXb
Pe46KUbA60P6Z3HSTpE+HVhIMcJ2opR5Ww==
-----END CERTIFICATE-----
Generated at Tue Apr 8 23:51:22 2025 by rpki-client