Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/eb421c60-c420-3d40-afd5-0ea39a29fa53.roa
File: eb421c60-c420-3d40-afd5-0ea39a29fa53.roa (raw, json)
Hash identifier: cNTbOE4z0wUB3I08E0cW0YeGsTHMYSC5nb5960Bnq6s=
Subject key identifier: A1:66:48:7A:DC:14:A6:2B:C1:18:10:29:2E:64:83:22:B1:F6:BB:A0
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848C26499C4BA24859BBCEF7D00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/eb421c60-c420-3d40-afd5-0ea39a29fa53.roa
Signing time: Mon 03 Feb 2025 11:16:24 +0000
ROA not before: Mon 03 Feb 2025 11:16:24 +0000
ROA not after: Sun 04 May 2025 10:16:24 +0000
asID: 30036
IP address blocks: 2604:2e89:c00::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c2:64:99:c4:ba:24:85:9b:bc:ef:7d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 3 11:16:24 2025 GMT
Not After : May 4 10:16:24 2025 GMT
Subject: CN=9dd186f3-dd50-4d69-aa40-db95edc0823f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:15:e3:93:0a:0d:66:da:14:9c:24:c8:2a:04:
21:38:bc:12:0b:f2:44:8f:77:25:9e:07:f4:08:16:
6f:5a:6c:c7:b4:15:0b:8f:98:ff:c4:5b:c6:f5:f6:
02:73:31:68:72:da:39:53:83:69:f4:dd:2a:45:aa:
c7:3d:fd:50:3c:c4:6f:91:49:69:90:96:14:5e:fa:
39:4e:e5:77:f6:63:b4:d4:57:e6:c6:54:e6:ce:b1:
ab:f1:41:c1:78:22:61:48:0e:1c:b9:e0:44:3f:9d:
85:7c:ea:88:7c:e4:d3:02:21:38:6a:cc:dd:0c:a4:
6c:78:da:db:d6:4e:29:ca:0f:2b:4e:32:81:6b:e6:
12:fa:1a:ab:cc:5d:12:25:0d:7f:03:02:72:5a:0f:
6f:1b:62:de:96:70:2d:9e:55:fc:e3:1b:49:f1:19:
ae:63:71:01:a6:64:e5:73:1b:39:84:ef:9b:69:2e:
ee:05:7e:4b:87:e8:75:52:38:c8:aa:b6:37:f8:fd:
c0:72:52:a0:49:f9:2a:e2:bc:5c:86:7f:e1:fd:73:
94:17:6b:e5:eb:99:11:d4:c8:53:0c:ee:7c:f6:28:
5d:8d:94:12:69:f1:e1:6d:48:72:47:50:c0:67:f1:
5c:58:1b:68:65:91:7d:b4:de:c9:37:f1:79:40:22:
d3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:66:48:7A:DC:14:A6:2B:C1:18:10:29:2E:64:83:22:B1:F6:BB:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/eb421c60-c420-3d40-afd5-0ea39a29fa53.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e89:c00::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:7f:73:29:6d:c1:28:7e:14:8c:41:8d:0d:6e:79:c1:af:46:
96:19:b2:ef:76:55:d8:b2:42:e8:76:bd:17:2b:d5:e7:3b:b2:
1e:cc:49:04:d4:7b:38:21:9a:3f:16:ed:1a:03:9c:32:dd:e0:
f9:29:82:90:f2:f0:cb:3c:0d:61:6e:55:00:fa:ce:e6:6d:ca:
09:9c:3d:e9:af:23:a2:6d:b8:4f:99:ee:5d:f9:f3:f9:19:68:
66:a1:8e:6d:af:ab:d4:1e:93:62:d0:22:e3:7a:0d:f7:b0:11:
73:81:49:f4:8f:d2:4b:98:8e:2f:d6:2f:98:20:2f:7a:4d:d6:
9b:ec:d8:0b:a4:9e:b2:a0:32:31:e6:b5:60:83:06:ae:ae:0b:
d8:4e:85:6a:bf:2a:d1:77:c1:ed:7c:bf:5d:48:87:f9:ff:65:
68:44:19:e2:28:3d:c1:06:cf:81:7f:d8:66:5c:a9:b3:5a:5a:
f3:2c:06:94:6a:a0:a7:a3:90:92:9c:79:e6:c1:16:fd:26:b5:
47:bd:1d:75:d3:b9:fa:08:93:83:b3:75:0c:8e:cc:75:ca:fc:
fa:9a:16:de:76:a5:4e:fe:f4:59:a4:e8:42:c6:63:5b:ef:dd:
11:29:bc:04:e0:09:62:bd:61:c0:92:d7:7e:f2:dc:47:39:3f:
62:b2:4d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:09:03 2025 by rpki-client