Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9aae0c58-3ea4-3aeb-a078-f8868eddb885.roa
File: 9aae0c58-3ea4-3aeb-a078-f8868eddb885.roa (raw, json)
Hash identifier: ztxaoiciCTc6ilPPUDE/slmx9TL5kX4On167oh4a5uw=
Subject key identifier: E6:B7:4D:BA:D1:A1:0F:69:BC:53:6B:96:0C:3A:7A:E7:85:8B:D9:C8
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1271596C9F61BA359D7780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9aae0c58-3ea4-3aeb-a078-f8868eddb885.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 2603:300f:200::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:71:59:6c:9f:61:ba:35:9d:77:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=07ff7a2e-5fac-4394-b43d-1f00e00d198d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8f:e8:18:3c:fe:8c:aa:dc:c1:0b:45:d8:b3:
04:05:f4:3b:c3:39:e9:82:02:ed:19:40:c3:7a:c0:
fc:6d:1b:3c:dd:d8:7b:a2:48:aa:0c:03:d3:cc:94:
7e:6e:97:39:cf:d3:9b:36:0e:08:3c:37:ad:da:f3:
fc:e8:dd:d4:63:39:b5:cc:39:c4:c3:ab:78:80:f1:
03:25:fd:f3:b9:01:f7:b5:e4:e2:23:97:99:36:88:
ee:33:92:1d:ab:cb:29:61:e3:9d:d2:a9:e4:2f:a8:
c3:74:92:82:8b:60:f1:59:07:12:e6:b0:08:12:a6:
59:0f:61:4c:57:28:90:66:5c:70:ea:24:fd:e3:d8:
2a:75:26:4a:f9:25:81:7a:d6:93:c0:ab:6a:46:0c:
ed:bd:ef:dc:31:1c:84:f4:7a:8c:76:4a:6f:29:2d:
62:eb:5e:3c:fc:fd:06:76:ad:90:24:eb:c9:d5:49:
c7:26:17:d0:82:ed:5d:41:3e:e4:bb:68:b9:43:f4:
8e:51:ae:f8:c7:43:92:cf:d2:71:b6:3b:e3:8d:65:
a7:95:79:08:f4:eb:b6:a7:03:50:18:81:f5:51:24:
17:8e:ec:dc:b5:98:73:dd:f4:12:7c:f9:b7:b7:13:
cd:89:d8:85:d3:72:2d:cf:06:95:cb:cc:5e:8d:20:
00:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B7:4D:BA:D1:A1:0F:69:BC:53:6B:96:0C:3A:7A:E7:85:8B:D9:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9aae0c58-3ea4-3aeb-a078-f8868eddb885.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:300f:200::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d2:df:c4:92:82:d7:b7:0c:2b:f0:d8:d3:4b:71:38:7f:4d:51:
a8:9b:f5:7c:c6:f1:5e:fe:57:9d:b2:b8:12:36:e8:a3:53:e3:
95:26:97:5b:fc:4a:04:49:6e:30:9c:b2:a6:c3:44:e7:7b:32:
a6:50:3f:30:57:47:8b:36:78:e8:79:be:02:b1:17:ef:e8:ed:
89:6f:1f:66:a1:2d:a1:fe:56:57:b1:19:cd:a0:a3:53:bc:57:
51:a1:e6:47:d7:3a:54:d1:be:09:0c:8c:d9:d4:15:87:00:48:
c6:3f:d0:8a:a2:92:62:23:64:b3:46:00:32:c2:3c:5e:31:4f:
10:22:b5:af:19:18:67:77:77:b5:55:0b:3f:b5:2e:95:ca:ec:
4d:7b:df:1b:a0:99:d2:15:31:0e:cf:c2:3d:b4:a2:ed:a3:81:
71:6a:16:ae:61:44:b4:cf:4c:b3:af:98:d7:1b:14:ff:11:7c:
58:40:64:a5:6f:f6:f3:a4:e2:25:4e:6e:64:81:47:c8:3d:71:
02:c1:20:fe:57:63:ba:ba:e2:44:bc:9c:34:9c:1d:cf:e9:14:
5a:a5:0f:11:29:f7:b0:fa:1f:b0:76:5d:0f:93:44:fb:b4:eb:
73:e0:80:24:f9:ef:46:57:34:a1:78:64:d2:b6:6c:e9:cd:bd:
8d:4b:ea:ab
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEhMEnFZbJ9hujWdd4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
MDdmZjdhMmUtNWZhYy00Mzk0LWI0M2QtMWYwMGUwMGQxOThkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtY/oGDz+jKrcwQtF2LMEBfQ7wznpggLtGUDD
esD8bRs83dh7okiqDAPTzJR+bpc5z9ObNg4IPDet2vP86N3UYzm1zDnEw6t4gPED
Jf3zuQH3teTiI5eZNojuM5Idq8spYeOd0qnkL6jDdJKCi2DxWQcS5rAIEqZZD2FM
VyiQZlxw6iT949gqdSZK+SWBetaTwKtqRgztve/cMRyE9HqMdkpvKS1i6148/P0G
dq2QJOvJ1UnHJhfQgu1dQT7ku2i5Q/SOUa74x0OSz9JxtjvjjWWnlXkI9Ou2pwNQ
GIH1USQXjuzctZhz3fQSfPm3txPNidiF03ItzwaVy8xejSAAXwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFOa3TbrRoQ9pvFNrlgw6eueFi9nIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWFhZTBjNTgtM2VhNC0z
YWViLWEwNzgtZjg4NjhlZGRiODg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwDwIw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEA0t/EkoLXtwwr8NjTS3E4f01RqJv1fMbxXv5XnbK4Ejboo1PjlSaX
W/xKBEluMJyypsNE53syplA/MFdHizZ46Hm+ArEX7+jtiW8fZqEtof5WV7EZzaCj
U7xXUaHmR9c6VNG+CQyM2dQVhwBIxj/QiqKSYiNks0YAMsI8XjFPECK1rxkYZ3d3
tVULP7UulcrsTXvfG6CZ0hUxDs/CPbSi7aOBcWoWrmFEtM9Ms6+Y1xsU/xF8WEBk
pW/286TiJU5uZIFHyD1xAsEg/ldjurriRLycNJwdz+kUWqUPESn3sPofsHZdD5NE
+7Trc+CAJPnvRlc0oXhk0rZs6c29jUvqqw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:55:18 2025 by rpki-client