Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7f3ec5a1-724a-3f26-856d-c3e21ae47eb3.roa
File: 7f3ec5a1-724a-3f26-856d-c3e21ae47eb3.roa (raw, json)
Hash identifier: ye/AOI9H4gjG3pSOuldpvRO08t0b3dRA9zz/NB3HZ5c=
Subject key identifier: B5:E9:72:3C:0A:EC:12:70:6B:05:B7:B5:0E:86:9A:82:A4:DD:55:A2
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1222D07E9691547B413950
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7f3ec5a1-724a-3f26-856d-c3e21ae47eb3.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33659
IP address blocks: 2603:208d:4000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:22:d0:7e:96:91:54:7b:41:39:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=e46f8d7e-9105-49e4-ba1f-cf151d13b3c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cc:b9:6c:ff:92:d9:28:68:89:4d:c3:37:40:
67:a0:b8:ce:ba:95:10:36:8c:f8:e0:7a:8d:d0:05:
92:70:94:69:16:d8:e3:45:b6:13:f5:c5:99:38:9c:
a0:31:52:c1:f6:3f:29:34:85:11:d4:33:90:8a:55:
d0:9c:7e:00:f1:7d:7c:4c:81:33:63:9d:4c:ba:10:
c7:a1:23:70:6d:e1:0f:f0:ae:6d:a2:34:f5:bb:b8:
f0:f0:80:b6:97:d4:ae:aa:82:fb:2d:74:99:a9:a7:
7d:21:a6:e0:04:b4:f4:d8:b1:2f:f0:a3:d0:4b:c3:
5c:20:84:b4:da:db:1f:e7:30:e8:57:7b:16:00:09:
06:ae:94:f0:27:e2:4f:fc:9b:4b:cf:4c:eb:0d:5c:
7d:49:7c:ed:a4:a4:8a:51:36:11:16:a7:5c:7e:af:
6c:7c:bb:c9:5f:f8:4c:43:84:38:55:ea:5f:96:f3:
7b:d3:61:9c:4c:f6:3d:86:33:44:b4:d3:bc:d5:19:
bd:f5:2a:f7:1d:7f:5a:f3:b7:26:18:c8:b8:f3:97:
ef:bb:7a:a3:f8:d4:9d:e7:06:9b:86:d5:88:49:bb:
37:2d:09:79:11:87:ad:6e:b1:99:7d:0c:5f:7c:2e:
39:0c:00:85:3e:48:6d:23:e0:e8:a9:a1:22:a9:c1:
25:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E9:72:3C:0A:EC:12:70:6B:05:B7:B5:0E:86:9A:82:A4:DD:55:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7f3ec5a1-724a-3f26-856d-c3e21ae47eb3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:208d:4000::/34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:00:a4:84:82:45:ae:b8:65:10:06:2e:ac:b8:a2:4b:db:6a:
21:bf:17:ab:ab:6e:33:19:40:84:f3:4d:ff:4b:d7:df:ea:e4:
be:9d:e2:84:05:ab:79:89:80:6a:3e:96:ad:79:eb:72:89:57:
d4:a3:e3:ae:2f:8d:5d:0c:6b:7c:7c:f3:22:00:53:31:4e:28:
7c:f7:71:fb:89:da:3e:4e:05:ba:89:53:c7:28:2d:68:4a:45:
ac:a1:4c:df:ba:54:ad:78:3e:36:30:78:ef:3b:e8:2c:2e:3a:
49:e1:f6:7a:4c:26:69:28:55:75:bf:7b:92:44:f1:f6:41:7e:
0e:7b:d9:fc:9b:8c:43:cf:0f:34:b6:f5:0d:fc:6f:20:cc:a6:
06:4b:de:7e:75:f0:8b:48:11:07:39:15:71:66:ba:89:27:cd:
69:dc:d5:79:18:70:ce:66:13:0e:74:33:a3:0f:e4:aa:a7:52:
3a:69:b3:43:e5:4c:ca:0e:91:a1:6a:ef:37:a6:0a:57:99:ed:
49:b7:f6:02:fa:a7:64:8f:6f:ed:cc:a4:43:4d:a1:ec:0f:9f:
40:d8:29:f2:8e:23:cb:4e:e6:5b:ba:3c:10:30:2c:bf:78:f9:
41:a1:e6:3d:01:ce:6f:ae:c6:bf:f3:15:9f:39:f6:af:57:2c:
46:39:ff:dd
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEhMEiLQfpaRVHtBOVAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
ZTQ2ZjhkN2UtOTEwNS00OWU0LWJhMWYtY2YxNTFkMTNiM2M1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsy5bP+S2ShoiU3DN0BnoLjOupUQNoz44HqN
0AWScJRpFtjjRbYT9cWZOJygMVLB9j8pNIUR1DOQilXQnH4A8X18TIEzY51MuhDH
oSNwbeEP8K5tojT1u7jw8IC2l9SuqoL7LXSZqad9IabgBLT02LEv8KPQS8NcIIS0
2tsf5zDoV3sWAAkGrpTwJ+JP/JtLz0zrDVx9SXztpKSKUTYRFqdcfq9sfLvJX/hM
Q4Q4VepflvN702GcTPY9hjNEtNO81Rm99Sr3HX9a87cmGMi485fvu3qj+NSd5wab
htWISbs3LQl5EYetbrGZfQxffC45DACFPkhtI+DoqaEiqcEl+QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFLXpcjwK7BJwawW3tQ6GmoKk3VWiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2YzZWM1YTEtNzI0YS0z
ZjI2LTg1NmQtYzNlMjFhZTQ3ZWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgMgjUAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEASQCkhIJFrrhlEAYurLiiS9tqIb8Xq6tuMxlAhPNN/0vX3+rkvp3i
hAWreYmAaj6WrXnrcolX1KPjri+NXQxrfHzzIgBTMU4ofPdx+4naPk4FuolTxygt
aEpFrKFM37pUrXg+NjB47zvoLC46SeH2ekwmaShVdb97kkTx9kF+DnvZ/JuMQ88P
NLb1DfxvIMymBkvefnXwi0gRBzkVcWa6iSfNadzVeRhwzmYTDnQzow/kqqdSOmmz
Q+VMyg6RoWrvN6YKV5ntSbf2AvqnZI9v7cykQ02h7A+fQNgp8o4jy07mW7o8EDAs
v3j5QaHmPQHOb67Gv/MVnzn2r1csRjn/3Q==
-----END CERTIFICATE-----
Generated at Tue Apr 29 14:10:36 2025 by rpki-client