Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ee8a8701-9d7a-3c94-815c-00e50c9615ad.roa
File: ee8a8701-9d7a-3c94-815c-00e50c9615ad.roa (raw, json)
Hash identifier: CYHiZL/Y6OAzPjw+Uoh0RS5ruVjAsr50MR10A0OAY3M=
Subject key identifier: B3:51:A4:04:02:20:10:93:E1:0E:0C:49:F2:33:39:42:86:5A:5A:F6
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848C558F31C00763E158D226700
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ee8a8701-9d7a-3c94-815c-00e50c9615ad.roa
Signing time: Tue 04 Feb 2025 12:40:21 +0000
ROA not before: Tue 04 Feb 2025 12:40:21 +0000
ROA not after: Mon 05 May 2025 11:40:21 +0000
asID: 30036
IP address blocks: 2604:2e8a:1800::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:58:f3:1c:00:76:3e:15:8d:22:67:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 4 12:40:21 2025 GMT
Not After : May 5 11:40:21 2025 GMT
Subject: CN=e384d227-e7e2-4620-9342-6861748dcfd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:03:0a:89:fa:6d:86:fc:8b:74:62:78:83:e7:
a8:1c:c2:e5:0f:39:2a:b1:c4:a6:1e:21:53:3c:c7:
62:d5:36:c4:86:42:c6:d2:e6:c7:6d:b5:8a:8a:c5:
87:32:e5:02:5e:6b:cf:91:1e:13:41:7d:45:d4:68:
b8:31:bc:52:d9:bf:eb:c6:c7:c6:74:14:06:73:87:
f5:85:f0:3c:ce:2c:bb:4d:a8:c1:1d:93:a7:53:3c:
71:20:fc:8f:e5:4b:e7:0c:6c:d5:e7:d6:7e:0a:b8:
72:6c:5f:ed:96:74:c9:fd:f2:32:2b:7d:f4:6b:cf:
e3:78:07:23:d8:16:2e:71:66:dc:b5:fe:42:6a:30:
63:d8:c5:59:c9:37:2b:3a:fd:21:08:9e:9c:9e:20:
48:b8:64:1b:06:64:73:ff:c8:91:12:a0:a2:dd:d0:
ea:fb:02:9f:d6:6e:ab:9a:2a:1f:df:bc:21:da:56:
db:87:fb:1e:ef:cf:bd:0d:aa:9f:90:de:86:02:d7:
52:8f:3b:e7:9c:fe:2b:66:aa:cc:df:9b:19:f6:a7:
db:99:4c:12:98:e2:29:06:5d:69:ed:83:7f:d2:e0:
7c:a0:91:2c:0b:04:d2:34:4c:2c:d3:28:71:18:db:
a5:ee:26:d4:e4:4f:f2:f9:80:0d:d9:47:4f:6c:95:
8d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:51:A4:04:02:20:10:93:E1:0E:0C:49:F2:33:39:42:86:5A:5A:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ee8a8701-9d7a-3c94-815c-00e50c9615ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8a:1800::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:d1:c5:38:0a:42:11:06:b4:a4:3d:13:8f:87:a2:16:13:c4:
bd:76:24:7f:1a:4e:2a:56:99:a6:63:72:3a:b5:9d:2e:e1:4c:
84:d2:74:af:2c:c3:ca:88:a7:7e:c3:a2:de:96:df:ae:92:69:
60:2e:3f:37:16:ae:e1:38:eb:56:40:5f:a7:18:e4:11:fc:2e:
c8:40:6a:28:03:e6:6a:0c:fb:ec:cc:92:b0:0a:f6:29:34:b8:
18:16:06:7b:97:54:94:d6:d7:b0:e9:06:1e:24:36:35:82:5f:
79:b6:24:d8:e5:18:3e:f2:dd:d7:c2:54:73:85:38:98:84:3e:
25:f7:ab:20:e5:49:02:4a:79:6a:dd:2b:7d:e1:7a:96:75:51:
fa:f9:0a:0c:12:fa:31:6e:d5:51:ea:37:3d:3e:20:20:1a:4c:
e6:0c:9d:91:a5:21:99:b6:51:2a:5e:6b:52:6c:c6:85:8e:70:
e2:0d:b4:b1:4e:39:6a:6e:91:6f:a6:5b:b9:01:50:bf:d1:f6:
f5:62:69:a9:d1:c5:db:ef:7a:fd:cb:a3:e6:3f:80:5c:87:9e:
e7:dd:af:0a:03:63:d2:52:1e:03:12:33:bc:90:a7:26:d8:e8:
bf:c4:14:a2:2e:81:7a:4a:f9:ad:24:ed:82:51:13:89:8e:e6:
af:f6:ef:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:06:22 2025 by rpki-client