Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ec9ffc9d-490c-3d05-af3e-95a7c56b63e2.roa
File: ec9ffc9d-490c-3d05-af3e-95a7c56b63e2.roa (raw, json)
Hash identifier: BpoKGVCiF5V3y9HCVxp106XFiMJ/F/DUVE8q+GB3mWg=
Subject key identifier: 24:53:79:15:78:48:92:8E:B9:A9:D4:EA:D1:22:0F:1B:BA:D4:B4:48
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848B1F6348F5EC19A51C5EB8240
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ec9ffc9d-490c-3d05-af3e-95a7c56b63e2.roa
Signing time: Tue 28 Jan 2025 14:00:52 +0000
ROA not before: Tue 28 Jan 2025 14:00:52 +0000
ROA not after: Mon 28 Apr 2025 13:00:52 +0000
asID: 7922
IP address blocks: 2001:558:5000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b1:f6:34:8f:5e:c1:9a:51:c5:eb:82:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 28 14:00:52 2025 GMT
Not After : Apr 28 13:00:52 2025 GMT
Subject: CN=d9700a6e-15a8-40a1-ba23-c0df5c7c49e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5a:db:c1:f5:f9:82:52:6e:5c:f3:fd:a0:4e:
b4:1d:4d:13:85:c0:a9:97:fe:e1:62:63:70:96:86:
e8:26:8c:40:7d:56:b7:f9:17:e0:82:cd:6d:db:b0:
db:d1:b4:0e:f7:86:1e:9f:c7:55:2a:9c:be:51:29:
8a:36:dd:fb:04:51:72:b6:0a:bd:35:fc:22:07:eb:
00:08:4b:8a:5d:68:af:31:59:af:7c:c9:15:6d:8f:
2e:13:90:55:26:1c:84:45:13:ce:1b:7a:f4:28:b5:
61:9b:b1:20:2f:32:e2:80:90:c1:c0:31:7c:1f:d3:
d0:e8:68:4b:54:43:a6:bf:a4:01:c5:3e:91:73:40:
f6:dd:02:c5:8e:75:bf:a1:5f:52:22:65:57:aa:01:
f8:6c:54:41:2c:7e:a1:5e:6f:52:09:2c:11:9f:d4:
a1:6a:11:b7:96:a8:1d:97:93:fc:81:67:55:4f:b5:
87:a0:ec:d0:28:ee:bf:b0:00:71:2a:ac:42:5f:31:
37:a2:62:ae:f7:4e:5c:aa:33:69:e2:9e:e4:12:6f:
91:7b:87:56:da:e5:88:af:5f:e1:01:81:53:45:23:
e9:2a:50:82:23:74:6a:64:33:b1:10:3c:0f:ad:17:
97:fa:ac:4f:74:6d:a6:e5:5e:a7:9c:ab:17:fa:4f:
92:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:53:79:15:78:48:92:8E:B9:A9:D4:EA:D1:22:0F:1B:BA:D4:B4:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ec9ffc9d-490c-3d05-af3e-95a7c56b63e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:558:5000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:40:3f:f7:a4:00:8b:20:3a:2a:fe:e5:28:be:9f:82:da:1e:
ea:a2:9a:bf:07:24:84:0a:0e:22:2c:10:8b:51:cc:74:c5:64:
97:4f:9a:9e:22:37:8d:6a:d5:42:8b:9f:87:77:84:a3:86:a2:
77:72:ae:21:3b:d1:e2:60:2e:83:93:4b:d1:b3:32:54:32:73:
e7:48:74:66:66:24:0f:c5:c0:e8:a9:91:c4:56:35:82:30:12:
d3:f9:f9:6e:40:68:66:a1:63:0f:36:2a:24:1f:7e:ef:16:71:
5e:a6:4a:f9:b0:72:fa:64:9b:80:9b:2f:d4:1f:9f:4b:34:ae:
9f:cc:c7:c4:7c:74:9b:58:42:5d:58:70:dd:f3:2c:6d:3c:8a:
d6:d8:3d:98:1c:7a:4c:46:b6:8f:d4:7c:ae:69:aa:05:c5:72:
14:cd:25:d4:b7:7f:85:c8:98:5c:fc:37:dd:d2:6d:fc:5d:17:
ae:04:82:2e:02:61:9e:f7:57:54:c1:10:e8:93:82:5c:f1:0d:
e6:7e:5f:c9:fe:e8:7f:ea:59:65:37:af:7e:6d:10:d2:d7:c2:
72:3d:b9:b9:04:ef:eb:42:77:42:51:cb:e4:44:a5:c8:e0:17:
7e:7c:59:99:b8:f0:98:f2:1b:02:ad:23:42:fa:eb:3d:54:8a:
4a:15:46:20
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEix9jSPXsGaUcXrgkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk
ZDk3MDBhNmUtMTVhOC00MGExLWJhMjMtYzBkZjVjN2M0OWU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlrbwfX5glJuXPP9oE60HU0ThcCpl/7hYmNw
loboJoxAfVa3+Rfggs1t27Db0bQO94Yen8dVKpy+USmKNt37BFFytgq9NfwiB+sA
CEuKXWivMVmvfMkVbY8uE5BVJhyERRPOG3r0KLVhm7EgLzLigJDBwDF8H9PQ6GhL
VEOmv6QBxT6Rc0D23QLFjnW/oV9SImVXqgH4bFRBLH6hXm9SCSwRn9ShahG3lqgd
l5P8gWdVT7WHoOzQKO6/sABxKqxCXzE3omKu905cqjNp4p7kEm+Re4dW2uWIr1/h
AYFTRSPpKlCCI3RqZDOxEDwPrReX+qxPdG2m5V6nnKsX+k+SywIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCRTeRV4SJKOuanU6tEiDxu61LRIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZWM5ZmZjOWQtNDkwYy0z
ZDA1LWFmM2UtOTVhN2M1NmI2M2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWFAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKVAP/ekAIsgOir+5Si+n4LaHuqimr8HJIQKDiIsEItRzHTFZJdP
mp4iN41q1UKLn4d3hKOGondyriE70eJgLoOTS9GzMlQyc+dIdGZmJA/FwOipkcRW
NYIwEtP5+W5AaGahYw82KiQffu8WcV6mSvmwcvpkm4CbL9Qfn0s0rp/Mx8R8dJtY
Ql1YcN3zLG08itbYPZgcekxGto/UfK5pqgXFchTNJdS3f4XImFz8N93SbfxdF64E
gi4CYZ73V1TBEOiTglzxDeZ+X8n+6H/qWWU3r35tENLXwnI9ubkE7+tCd0JRy+RE
pcjgF358WZm48JjyGwKtI0L66z1UikoVRiA=
-----END CERTIFICATE-----
Generated at Fri Apr 25 18:28:27 2025 by rpki-client