Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3e9d03b-a544-3392-859f-80239a2eb030.roa
File: a3e9d03b-a544-3392-859f-80239a2eb030.roa (raw, json)
Hash identifier: KG/z4RHNr0FfenHaQyHBHLATJ5XLF4AKiy9FIBHtooc=
Subject key identifier: EA:DE:BB:B1:47:5D:2B:21:EA:AA:86:0A:04:BE:EF:4E:3A:75:96:A9
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584811700A79BBCE54C1B6DE9940
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3e9d03b-a544-3392-859f-80239a2eb030.roa
Signing time: Mon 02 Dec 2024 02:00:40 +0000
ROA not before: Mon 02 Dec 2024 02:00:40 +0000
ROA not after: Sun 02 Mar 2025 02:00:40 +0000
asID: 7016
IP address blocks: 2603:3007:1f00::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:11:70:0a:79:bb:ce:54:c1:b6:de:99:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 2 02:00:40 2024 GMT
Not After : Mar 2 02:00:40 2025 GMT
Subject: CN=da609ea9-73f8-47b0-b8db-904ac35979ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f9:a8:2e:8e:6c:78:4b:df:a6:d7:55:77:2f:
33:78:df:3c:88:70:de:f6:72:76:59:f7:77:06:c0:
b7:39:8f:26:4c:f5:39:28:80:53:86:bd:96:59:2a:
a4:3d:88:c2:08:0d:7f:b3:3a:5d:77:cd:00:fd:26:
3c:95:c3:78:93:35:ec:a1:66:bf:e4:b1:ce:fe:07:
a6:a4:7d:23:75:9a:26:08:54:08:40:9c:5f:15:88:
c3:a5:d5:51:bd:08:a2:0e:da:b5:a1:77:13:a9:03:
da:dd:19:b8:5a:a3:5f:11:99:50:9f:ba:fa:c7:7c:
ba:d2:a2:84:97:6b:da:78:07:d8:2d:90:90:30:c5:
39:38:0b:62:e2:f3:30:8d:cd:7e:85:a9:50:79:6f:
5a:df:00:e1:9f:19:c4:c0:1b:d0:f0:a4:d5:00:4b:
5a:1e:b4:96:b4:d0:24:b7:c8:13:86:ca:4b:62:be:
9c:11:ae:d7:e9:02:16:f7:38:0f:78:b4:23:13:20:
cd:82:20:73:e1:56:6d:47:e4:45:06:36:00:aa:c5:
be:2d:81:b2:31:08:95:b1:e2:84:5d:7e:17:d6:06:
ef:a0:a0:f4:d7:f8:22:4d:63:60:ce:d7:38:ef:e5:
ac:e1:f7:55:4a:31:a4:eb:11:9c:b1:ec:02:73:60:
4a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:DE:BB:B1:47:5D:2B:21:EA:AA:86:0A:04:BE:EF:4E:3A:75:96:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3e9d03b-a544-3392-859f-80239a2eb030.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:3007:1f00::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:01:fe:3e:4e:5f:ec:5b:4d:73:6c:4a:f5:a9:76:39:3a:3b:
d3:31:d8:94:a6:85:32:c1:2f:b8:ba:f3:c1:56:10:46:e9:61:
a1:e0:39:04:ff:a5:7c:2c:5d:cb:24:57:e1:f3:f4:25:a7:56:
16:7d:a7:83:65:45:c1:ad:cb:58:d8:17:18:60:89:12:ea:56:
34:53:f8:98:d3:6c:4e:13:01:e2:07:67:46:86:40:55:c9:72:
71:06:45:8b:8c:8b:7d:e9:e9:d8:33:f8:69:76:2f:42:05:32:
fd:79:69:2b:6f:8f:14:a4:cf:76:a2:54:f6:0a:f8:36:35:7e:
fb:06:82:0d:50:96:ed:fe:0c:75:98:d4:95:ba:1a:5d:9a:c1:
dc:81:64:ab:71:f6:57:9c:17:9f:92:d9:c9:c0:f3:14:3e:8b:
e5:8d:aa:4d:e7:cf:74:1d:45:34:af:dd:b2:6d:48:f9:0b:e9:
e2:e9:59:09:12:9a:47:63:4b:93:27:f3:98:ec:66:ca:16:66:
a6:05:84:fe:44:09:0c:d3:67:76:5a:78:9e:45:3a:08:e7:a1:
34:2e:6e:ad:be:6d:af:31:f2:3e:9b:31:dc:09:5a:f4:4b:04:
6f:64:35:a7:41:f6:d3:82:66:71:da:0d:a1:95:00:5e:e4:a8:
78:11:83:2b
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEgRcAp5u85UwbbemUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMjAyMDA0MFoXDTI1MDMwMjAyMDA0MFowLzEtMCsGA1UEAxMk
ZGE2MDllYTktNzNmOC00N2IwLWI4ZGItOTA0YWMzNTk3OWZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/moLo5seEvfptdVdy8zeN88iHDe9nJ2Wfd3
BsC3OY8mTPU5KIBThr2WWSqkPYjCCA1/szpdd80A/SY8lcN4kzXsoWa/5LHO/gem
pH0jdZomCFQIQJxfFYjDpdVRvQiiDtq1oXcTqQPa3Rm4WqNfEZlQn7r6x3y60qKE
l2vaeAfYLZCQMMU5OAti4vMwjc1+halQeW9a3wDhnxnEwBvQ8KTVAEtaHrSWtNAk
t8gThspLYr6cEa7X6QIW9zgPeLQjEyDNgiBz4VZtR+RFBjYAqsW+LYGyMQiVseKE
XX4X1gbvoKD01/giTWNgztc47+Ws4fdVSjGk6xGcsewCc2BKDwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFOreu7FHXSsh6qqGCgS+7046dZapMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTNlOWQwM2ItYTU0NC0z
MzkyLTg1OWYtODAyMzlhMmViMDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwBx8w
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAWQH+Pk5f7FtNc2xK9al2OTo70zHYlKaFMsEvuLrzwVYQRulhoeA5
BP+lfCxdyyRX4fP0JadWFn2ng2VFwa3LWNgXGGCJEupWNFP4mNNsThMB4gdnRoZA
VclycQZFi4yLfenp2DP4aXYvQgUy/XlpK2+PFKTPdqJU9gr4NjV++waCDVCW7f4M
dZjUlboaXZrB3IFkq3H2V5wXn5LZycDzFD6L5Y2qTefPdB1FNK/dsm1I+Qvp4ulZ
CRKaR2NLkyfzmOxmyhZmpgWE/kQJDNNndlp4nkU6COehNC5urb5trzHyPpsx3Ala
9EsEb2Q1p0H204JmcdoNoZUAXuSoeBGDKw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 04:49:10 2025 by rpki-client