Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f597dc93-c66b-3570-afe6-71622af75858.roa
File: f597dc93-c66b-3570-afe6-71622af75858.roa (raw, json)
Hash identifier: nCnAQXB/pkQn6qfYgH+iCnlPhYvwqBIiKIZKGUIfiLg=
Subject key identifier: BE:AE:F5:19:11:89:51:D0:D8:FB:9A:97:FE:44:2D:48:FD:88:30:B2
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848C558DB7CDAE40D550B467F00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f597dc93-c66b-3570-afe6-71622af75858.roa
Signing time: Tue 04 Feb 2025 12:40:10 +0000
ROA not before: Tue 04 Feb 2025 12:40:10 +0000
ROA not after: Mon 05 May 2025 11:40:10 +0000
asID: 30036
IP address blocks: 2604:2e89:dc00::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:58:db:7c:da:e4:0d:55:0b:46:7f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 4 12:40:10 2025 GMT
Not After : May 5 11:40:10 2025 GMT
Subject: CN=ee14efc2-7ae4-4790-bc9f-8974cf7fda0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:bd:90:db:41:a8:29:54:cb:47:aa:cc:bf:2f:
7b:66:64:4c:af:b1:73:dc:e8:b5:08:26:d8:de:66:
2e:8f:cc:03:57:3b:c7:8b:fd:99:cf:c1:b3:1a:c1:
25:72:09:ba:8d:a6:00:95:2c:3b:25:36:03:a5:99:
be:9b:2c:96:37:35:b9:75:19:ec:fb:68:43:13:ec:
a8:af:d3:b0:59:84:c1:1e:36:df:4c:3c:7b:23:7f:
91:83:31:4a:90:d9:0c:2b:50:10:f3:10:a2:03:50:
a0:41:aa:e1:f6:da:a5:b3:a3:41:b6:c8:4c:22:d4:
51:6e:87:85:9c:cd:d8:1b:2f:ae:46:a5:43:c6:b7:
97:b5:bb:63:93:24:80:70:b5:63:30:6f:4a:3b:31:
fa:c2:18:b9:f2:2c:25:0d:f2:10:c1:2f:3b:71:fd:
a6:4a:5d:59:63:47:d1:de:4a:7e:0c:2d:9e:8d:e5:
2b:46:a1:f2:9d:92:79:35:b7:64:1d:ca:12:74:2c:
37:ba:94:a8:3f:38:d2:9e:f4:04:79:15:49:2d:fe:
9d:4e:82:08:68:ed:04:ca:37:f5:3a:6b:ba:3a:5c:
7a:b3:f5:82:db:f1:7c:8c:2e:36:fb:63:96:39:6c:
85:e1:45:fc:89:b2:97:73:0d:5b:18:85:41:72:f3:
62:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:AE:F5:19:11:89:51:D0:D8:FB:9A:97:FE:44:2D:48:FD:88:30:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f597dc93-c66b-3570-afe6-71622af75858.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e89:dc00::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:ac:f0:d4:3d:f8:1a:4e:fa:4b:0f:02:d9:d4:35:ea:7d:cc:
c0:8f:d0:02:1e:74:2d:87:fb:0b:04:e0:10:c1:88:73:fe:14:
b4:3b:0d:6d:aa:8b:e0:38:6a:c8:f6:99:91:dc:99:77:58:ef:
bf:cb:d8:e6:72:46:da:40:20:b8:6c:ce:1e:c7:fa:10:06:08:
ce:65:bf:39:2d:29:a8:c5:29:75:80:b1:90:1d:a1:a8:4e:8f:
67:43:a1:05:f2:9e:b7:b5:e1:7f:e6:65:c5:c4:ec:60:2d:33:
3d:32:c0:32:bd:5a:c7:9e:82:83:9d:9f:52:e0:d4:bf:45:83:
08:46:e2:9f:c3:ca:f4:7d:49:12:f5:57:48:f8:1e:71:2d:38:
8c:3c:ff:13:1a:a4:19:24:70:07:6e:88:44:5f:93:57:32:89:
b4:ac:ed:88:a5:49:ce:71:da:0e:70:71:d4:06:5f:22:5c:15:
26:fd:18:b2:3f:7c:71:65:df:8b:ee:7f:f3:cb:eb:48:47:b6:
25:66:63:32:d7:b1:42:7f:0c:d8:d4:d4:f1:88:b5:41:fa:d8:
65:e1:80:17:a2:f3:4b:13:65:b0:82:43:d9:2b:b7:36:9f:b3:
f0:ca:69:0e:13:0b:c2:f4:12:bf:a9:d2:d1:30:f9:69:45:07:
ca:cc:2e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:55:01 2025 by rpki-client