Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/0c7bc871-2408-35fc-9a32-fa7a57b444bc.roa
File: 0c7bc871-2408-35fc-9a32-fa7a57b444bc.roa (raw, json)
Hash identifier: 0yJILoQzHoygFtQt7M+D2hUIDZwElSEIhF1YLgqD3ZM=
Subject key identifier: A0:39:E3:BB:79:89:60:AF:CA:6C:CD:73:31:C1:D8:91:DD:FE:52:BF
Certificate issuer: /CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Certificate serial: 010D0C9F432858485CD03048A76BA10909252B00
Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/0c7bc871-2408-35fc-9a32-fa7a57b444bc.roa
Signing time: Sun 29 Dec 2024 02:00:39 +0000
ROA not before: Sun 29 Dec 2024 02:00:39 +0000
ROA not after: Sat 29 Mar 2025 01:00:39 +0000
asID: 0
IP address blocks: 2601:a011::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5c:d0:30:48:a7:6b:a1:09:09:25:2b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Validity
Not Before: Dec 29 02:00:39 2024 GMT
Not After : Mar 29 01:00:39 2025 GMT
Subject: CN=9207276b-1b27-4b4b-a29d-21d36f0f3123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:32:94:fc:68:1e:fb:4b:a3:19:45:57:ac:9c:
50:66:4c:27:d6:c4:d9:6f:b9:1f:8a:21:b1:fd:8b:
d0:77:e1:fe:26:8f:16:13:0c:2b:7f:0e:63:1d:6a:
bd:7f:a7:84:22:71:3b:ea:fb:4b:78:78:f1:80:5b:
df:9c:23:2b:5d:34:c2:80:d2:24:76:5b:c8:fd:63:
6d:a6:f1:1f:a1:e8:17:d9:7e:f3:29:04:7b:12:82:
21:34:ec:a4:9e:0d:b7:e4:00:c4:e6:03:3e:41:93:
d4:94:51:49:12:f7:6e:55:ad:33:08:9c:0b:ff:03:
70:cb:5f:8e:a1:d4:7d:b8:c1:f4:fc:b3:49:8b:21:
80:c9:4b:4f:7d:81:f0:3e:a7:45:6a:00:3f:02:bc:
99:1d:30:8f:00:5b:f0:06:a8:17:a1:61:12:fc:3c:
1e:8c:d9:aa:3e:dd:43:3b:9e:95:1a:59:13:60:b1:
84:73:4f:33:b9:0f:97:f2:1c:37:2a:12:ff:ba:d0:
81:ee:99:b0:85:85:8c:13:63:b3:e4:5b:87:d3:30:
ab:3c:2f:8e:b9:ea:f6:5e:4c:65:da:bc:a0:e0:71:
88:b1:9b:dc:a2:c5:f7:48:67:ac:02:8c:85:dd:e7:
67:fa:74:3b:be:4b:f7:ae:3c:d2:22:ad:cc:44:9e:
87:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:39:E3:BB:79:89:60:AF:CA:6C:CD:73:31:C1:D8:91:DD:FE:52:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/0c7bc871-2408-35fc-9a32-fa7a57b444bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl
X509v3 Authority Key Identifier:
keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
sbgp-ipAddrBlock: critical
IPv6:
2601:a011::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:e7:c9:bc:b3:a2:b6:86:4b:48:39:b8:77:e4:9d:91:f8:19:
e3:a3:d6:af:ae:c9:c0:a5:4c:52:97:94:8d:db:16:7f:dd:5c:
5e:cc:9d:ba:3f:5b:05:fd:c4:28:41:2b:c9:39:bb:01:ed:e8:
38:a2:16:1f:ff:25:f6:68:64:93:aa:51:c0:be:6c:10:70:fd:
be:59:65:70:51:ac:2e:13:f7:58:17:70:ba:51:6e:2d:8c:40:
92:4d:69:53:e0:46:15:f6:15:ae:cf:c6:a4:d3:6d:f1:d5:6f:
24:4b:ef:74:b0:8b:c6:8b:1e:87:2e:bf:7e:63:f7:8f:b0:9a:
a7:c9:62:8c:15:f9:72:ac:81:ab:80:8d:3f:04:ce:11:c8:25:
da:59:04:05:85:dd:c1:38:e0:01:1c:e9:0a:3f:88:60:c6:aa:
24:53:ad:3a:c6:b7:7d:65:0b:65:43:bc:8a:2b:80:cc:61:e3:
4f:17:8b:99:94:27:91:a8:3d:78:fc:7d:9e:c4:41:27:d0:1e:
9d:eb:3a:7a:48:43:59:50:3f:f9:11:ba:d1:4a:00:ef:fd:6c:
52:fe:e1:b5:c0:58:91:87:e4:4e:6e:13:3f:8e:ec:16:bc:94:
67:f4:e5:bc:6c:30:89:43:ab:79:43:4e:46:dd:0e:96:51:3d:
c6:47:79:eb
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEhc0DBIp2uhCQklKwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzhhM2Q4MzYtMWRmOC00MzAzLWE5NDQtMTdjZDUzZDdk
MDRlMB4XDTI0MTIyOTAyMDAzOVoXDTI1MDMyOTAxMDAzOVowLzEtMCsGA1UEAxMk
OTIwNzI3NmItMWIyNy00YjRiLWEyOWQtMjFkMzZmMGYzMTIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDKU/Gge+0ujGUVXrJxQZkwn1sTZb7kfiiGx
/YvQd+H+Jo8WEwwrfw5jHWq9f6eEInE76vtLeHjxgFvfnCMrXTTCgNIkdlvI/WNt
pvEfoegX2X7zKQR7EoIhNOykng235ADE5gM+QZPUlFFJEvduVa0zCJwL/wNwy1+O
odR9uMH0/LNJiyGAyUtPfYHwPqdFagA/AryZHTCPAFvwBqgXoWES/DwejNmqPt1D
O56VGlkTYLGEc08zuQ+X8hw3KhL/utCB7pmwhYWME2Oz5FuH0zCrPC+Ouer2Xkxl
2ryg4HGIsZvcosX3SGesAoyF3edn+nQ7vkv3rjzSIq3MRJ6HrQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFKA547t5iWCvymzNczHB2JHd/lK/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83OGEz
ZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2NkNTNkN2QwNGUvMGM3YmM4NzEtMjQwOC0z
NWZjLTlhMzItZmE3YTU3YjQ0NGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzhhM2Q4MzYtMWRmOC00MzAzLWE5
NDQtMTdjZDUzZDdkMDRlLzc4YTNkODM2LTFkZjgtNDMwMy1hOTQ0LTE3Y2Q1M2Q3
ZDA0ZS5jcmwwHwYDVR0jBBgwFoAUidATrNoVhLbEp0K1cTIdD10OotIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy83OGEzZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2Nk
NTNkN2QwNGUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgGgETBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCU58m8s6K2hktIObh35J2R+Bnjo9avrsnApUxSl5SN2xZ/3VxezJ26
P1sF/cQoQSvJObsB7eg4ohYf/yX2aGSTqlHAvmwQcP2+WWVwUawuE/dYF3C6UW4t
jECSTWlT4EYV9hWuz8ak023x1W8kS+90sIvGix6HLr9+Y/ePsJqnyWKMFflyrIGr
gI0/BM4RyCXaWQQFhd3BOOABHOkKP4hgxqokU606xrd9ZQtlQ7yKK4DMYeNPF4uZ
lCeRqD14/H2exEEn0B6d6zp6SENZUD/5EbrRSgDv/WxS/uG1wFiRh+RObhM/juwW
vJRn9OW8bDCJQ6t5Q05G3Q6WUT3GR3nr
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:30:09 2025 by rpki-client