Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ffbf4010-c3e7-3c05-a49c-0512ccb40ae7.roa
File: ffbf4010-c3e7-3c05-a49c-0512ccb40ae7.roa (raw, json)
Hash identifier: K+K+Fhyt0X4g6JwpMNZGugjv+3FRIRuQh7qNuac+jbc=
Subject key identifier: 7A:F4:28:F4:DD:C5:C0:7D:72:3D:AE:8E:63:14:AD:A3:74:08:92:A6
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848C55FD5CBA1EE10408F0A0A00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ffbf4010-c3e7-3c05-a49c-0512ccb40ae7.roa
Signing time: Tue 04 Feb 2025 12:54:14 +0000
ROA not before: Tue 04 Feb 2025 12:54:14 +0000
ROA not after: Mon 05 May 2025 11:54:14 +0000
asID: 30036
IP address blocks: 2604:2e8a:4400::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:5f:d5:cb:a1:ee:10:40:8f:0a:0a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 4 12:54:14 2025 GMT
Not After : May 5 11:54:14 2025 GMT
Subject: CN=14fcb97f-07e6-4c5f-a9b1-5ac632101b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:36:10:69:3f:62:70:ef:7a:42:0c:78:73:f5:
e1:29:15:64:78:6c:07:c8:b6:e6:0b:34:14:1a:41:
43:ef:39:01:fb:3c:49:2c:39:b4:d0:23:b6:98:c7:
6f:2a:8f:aa:30:6b:a2:26:d0:12:0d:de:f9:6a:c6:
5d:75:cf:9e:3d:57:0e:65:92:8e:7a:b7:a4:4f:70:
8f:12:5d:40:46:f4:9d:14:d4:4e:d4:c6:03:65:3b:
cb:0a:e3:12:c2:54:41:78:45:a5:ee:dd:a9:db:ff:
a1:94:7a:0c:93:58:42:e8:72:d4:7a:af:2d:7b:6c:
b4:e9:da:7f:5c:53:03:70:65:d6:8d:32:04:08:e9:
97:ed:f0:09:fd:41:a0:aa:6d:9c:66:d9:bc:48:3d:
09:4c:c8:96:97:c3:7c:1a:67:6b:e8:b5:de:8f:59:
19:f3:4c:98:5c:98:82:46:e5:c3:0e:d9:46:7e:cb:
5c:35:4e:e0:b5:8d:5a:7d:30:b5:5a:cc:68:8f:ab:
8e:ac:ec:d9:71:77:ba:08:cd:03:40:df:fb:4f:98:
e4:0d:bd:bd:e8:dd:c6:9a:92:f2:7e:a1:06:e6:f9:
3a:04:04:89:66:f9:1a:f5:24:33:1e:2b:ef:51:78:
1b:5a:89:20:2b:95:54:da:ec:8d:2a:b3:32:cf:1c:
48:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F4:28:F4:DD:C5:C0:7D:72:3D:AE:8E:63:14:AD:A3:74:08:92:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ffbf4010-c3e7-3c05-a49c-0512ccb40ae7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8a:4400::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:dc:6e:00:83:4d:9e:44:29:ba:86:e4:b0:14:34:da:f7:c1:
bc:2a:aa:b0:64:ee:d4:dc:02:2b:c1:b2:a5:3d:dc:5d:7a:7b:
f7:ba:66:83:36:0a:74:1b:99:8f:bb:9e:cd:fc:42:97:44:22:
1e:73:9f:6a:a1:62:1a:a9:f1:fc:69:c7:89:9c:da:e8:6e:5e:
ae:b3:ea:3f:99:62:64:b8:85:98:ba:95:c2:04:e0:6c:2e:e2:
98:56:6b:2d:21:85:72:35:1c:95:4e:c9:d5:5d:4d:60:a5:a6:
7c:17:67:be:fe:fc:d1:10:1c:d0:7b:54:c5:43:af:ea:2a:36:
49:e5:76:ed:a4:e0:00:97:19:ce:e9:79:95:6b:4f:61:bb:4e:
82:6c:1f:8a:22:c6:13:03:be:81:c5:a3:ba:78:2c:c5:a7:1f:
9b:ef:d7:fd:8f:c0:ea:0a:d9:21:a2:5d:84:ce:02:1b:51:2b:
49:9a:6f:80:f7:96:12:5e:7c:1e:04:12:47:93:30:34:e8:d3:
fd:4e:72:56:d5:05:f9:b5:ca:58:7d:23:f8:a1:4c:97:25:12:
ef:ad:b6:33:1d:96:90:3c:36:0d:4d:cf:59:46:98:a6:c1:96:
67:2e:3d:7c:3c:bb:36:f1:fc:6e:92:a9:20:95:76:ab:bc:20:
ba:4f:93:95
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjFX9XLoe4QQI8KCgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDIwNDEyNTQxNFoXDTI1MDUwNTExNTQxNFowLzEtMCsGA1UEAxMk
MTRmY2I5N2YtMDdlNi00YzVmLWE5YjEtNWFjNjMyMTAxYjg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTYQaT9icO96Qgx4c/XhKRVkeGwHyLbmCzQU
GkFD7zkB+zxJLDm00CO2mMdvKo+qMGuiJtASDd75asZddc+ePVcOZZKOerekT3CP
El1ARvSdFNRO1MYDZTvLCuMSwlRBeEWl7t2p2/+hlHoMk1hC6HLUeq8te2y06dp/
XFMDcGXWjTIECOmX7fAJ/UGgqm2cZtm8SD0JTMiWl8N8Gmdr6LXej1kZ80yYXJiC
RuXDDtlGfstcNU7gtY1afTC1Wsxoj6uOrOzZcXe6CM0DQN/7T5jkDb296N3GmpLy
fqEG5vk6BASJZvka9SQzHivvUXgbWokgK5VU2uyNKrMyzxxIUwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFHr0KPTdxcB9cj2ujmMUraN0CJKmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZmZiZjQwMTAtYzNlNy0z
YzA1LWE0OWMtMDUxMmNjYjQwYWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuikQw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAe9xuAINNnkQpuobksBQ02vfBvCqqsGTu1NwCK8GypT3cXXp797pm
gzYKdBuZj7uezfxCl0QiHnOfaqFiGqnx/GnHiZza6G5errPqP5liZLiFmLqVwgTg
bC7imFZrLSGFcjUclU7J1V1NYKWmfBdnvv780RAc0HtUxUOv6io2SeV27aTgAJcZ
zul5lWtPYbtOgmwfiiLGEwO+gcWjungsxacfm+/X/Y/A6grZIaJdhM4CG1ErSZpv
gPeWEl58HgQSR5MwNOjT/U5yVtUF+bXKWH0j+KFMlyUS7622Mx2WkDw2DU3PWUaY
psGWZy49fDy7NvH8bpKpIJV2q7wguk+TlQ==
-----END CERTIFICATE-----
Generated at Tue Apr 8 23:38:57 2025 by rpki-client