Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/1ff99750-2852-34a4-8b88-c6334be24b2c.roa
File: 1ff99750-2852-34a4-8b88-c6334be24b2c.roa (raw, json)
Hash identifier: BLHLo7m9wgI6D+K73xiLKmWKW4JJCe/N7t2ctOAG1PY=
Subject key identifier: 82:5E:6B:6E:DC:3A:97:3C:1F:41:D8:00:1A:CB:45:6C:8A:2A:0B:A6
Certificate issuer: /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial: 010D0C9F432858488815E8E4D86873E28D3F9E80
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/1ff99750-2852-34a4-8b88-c6334be24b2c.roa
Signing time: Mon 13 Jan 2025 14:00:52 +0000
ROA not before: Mon 13 Jan 2025 14:00:52 +0000
ROA not after: Sun 13 Apr 2025 13:00:52 +0000
asID: 32133
IP address blocks: 2604:4000:2800::/37 maxlen: 37
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:88:15:e8:e4:d8:68:73:e2:8d:3f:9e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Validity
Not Before: Jan 13 14:00:52 2025 GMT
Not After : Apr 13 13:00:52 2025 GMT
Subject: CN=f8e5362d-e4a3-48c9-8c04-3a68d1b10f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:33:26:a5:ea:82:06:5b:65:18:a2:c8:ed:41:
f5:cb:b1:6d:1c:40:5c:52:39:70:29:3a:ca:a8:9e:
33:21:e5:d1:d5:52:d8:a1:6a:b7:e0:6e:29:22:70:
c9:48:74:7b:04:5e:1e:84:18:ec:07:c1:22:0a:6b:
46:19:d7:81:28:2d:de:27:b6:e8:70:a3:d6:3b:ff:
c1:4f:37:a0:d1:24:7d:37:55:a7:c1:fe:a1:37:2e:
88:21:2b:96:91:10:40:d2:79:38:f2:13:ac:a1:83:
41:8a:2c:ca:24:73:1b:59:e8:d8:65:5c:cd:9c:ea:
c4:ce:68:2a:21:6e:1b:9a:7d:b3:7d:f7:bb:13:74:
79:fa:4f:28:f4:77:a4:8d:ef:06:6c:06:82:50:ef:
dc:aa:59:06:53:43:25:36:44:35:e4:cb:e1:a0:f1:
6c:1c:04:75:65:45:10:09:db:fd:47:ff:2f:41:5e:
58:06:e3:7d:7d:94:de:7c:10:5e:74:9a:1f:2d:a2:
0a:91:00:c7:a7:a0:b1:c2:96:bf:64:65:5b:e2:f4:
1a:32:a6:67:ec:f1:b5:cd:39:84:5c:92:07:8c:0a:
7e:36:90:21:3d:35:56:bd:65:b4:f5:88:5b:5c:25:
33:e7:c7:2a:89:52:b4:55:19:1b:f1:08:87:a3:d0:
31:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:5E:6B:6E:DC:3A:97:3C:1F:41:D8:00:1A:CB:45:6C:8A:2A:0B:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/1ff99750-2852-34a4-8b88-c6334be24b2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl
X509v3 Authority Key Identifier:
keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:4000:2800::/37
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:14:6d:bf:11:bc:c9:46:0a:89:87:f5:e6:31:28:8e:78:fe:
ca:1b:4b:01:84:33:f0:76:32:83:5e:67:85:ae:63:f2:bd:a6:
12:a7:b8:24:79:e0:e5:1b:9a:26:c6:81:a7:e4:fe:fe:28:a3:
31:78:46:3c:53:47:6c:0e:0e:f4:f4:9c:e6:8b:68:78:63:61:
4e:b8:90:99:b6:ba:f0:74:a0:63:ff:09:bc:19:6c:43:d6:d7:
05:f6:24:63:bc:12:1a:b3:c6:c2:51:da:b9:c9:5a:ce:ce:2a:
07:2d:e5:58:0d:b6:81:4f:ca:03:7f:ff:3f:f5:73:7c:c5:3c:
c5:a3:49:5d:b3:81:f3:1f:65:d7:ff:b9:59:fd:be:3f:47:fc:
14:00:53:64:22:72:ad:fe:41:98:0e:53:ff:9d:e3:dc:9c:02:
74:3c:94:41:bd:56:d5:da:72:4b:06:4f:a7:a2:a2:25:42:0b:
98:60:c3:4c:4f:ab:f0:36:bc:92:bb:33:b3:2d:12:91:b2:66:
97:18:1c:40:ac:6b:e9:4d:7e:d0:d6:be:4e:36:ec:f4:36:f4:
d6:48:c8:82:19:45:87:87:40:25:3d:ce:02:ad:16:63:95:96:
68:34:e6:02:3f:a8:53:a6:1f:00:00:f4:1e:af:4e:2b:f5:77:
8f:9c:a6:31
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEiIFejk2Ghz4o0/noAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzA3OTM2ODMtYWEwNy00OTM1LWEyYzItZWM0MjNlYTdk
ZDBiMB4XDTI1MDExMzE0MDA1MloXDTI1MDQxMzEzMDA1MlowLzEtMCsGA1UEAxMk
ZjhlNTM2MmQtZTRhMy00OGM5LThjMDQtM2E2OGQxYjEwZjI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzMmpeqCBltlGKLI7UH1y7FtHEBcUjlwKTrK
qJ4zIeXR1VLYoWq34G4pInDJSHR7BF4ehBjsB8EiCmtGGdeBKC3eJ7bocKPWO//B
Tzeg0SR9N1Wnwf6hNy6IISuWkRBA0nk48hOsoYNBiizKJHMbWejYZVzNnOrEzmgq
IW4bmn2zffe7E3R5+k8o9Hekje8GbAaCUO/cqlkGU0MlNkQ15MvhoPFsHAR1ZUUQ
Cdv9R/8vQV5YBuN9fZTefBBedJofLaIKkQDHp6Cxwpa/ZGVb4vQaMqZn7PG1zTmE
XJIHjAp+NpAhPTVWvWW09YhbXCUz58cqiVK0VRkb8QiHo9AxKwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFIJea27cOpc8H0HYABrLRWyKKgumMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMDc5
MzY4My1hYTA3LTQ5MzUtYTJjMi1lYzQyM2VhN2RkMGIvMWZmOTk3NTAtMjg1Mi0z
NGE0LThiODgtYzYzMzRiZTI0YjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzA3OTM2ODMtYWEwNy00OTM1LWEy
YzItZWM0MjNlYTdkZDBiL2MwNzkzNjgzLWFhMDctNDkzNS1hMmMyLWVjNDIzZWE3
ZGQwYi5jcmwwHwYDVR0jBBgwFoAUOdwqnqE5xltso0hvdvSX3QTCyKowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMDc5MzY4My1hYTA3LTQ5MzUtYTJjMi1lYzQy
M2VhN2RkMGIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYDJgRAACgw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEArRRtvxG8yUYKiYf15jEojnj+yhtLAYQz8HYyg15nha5j8r2mEqe4
JHng5RuaJsaBp+T+/iijMXhGPFNHbA4O9PSc5otoeGNhTriQmba68HSgY/8JvBls
Q9bXBfYkY7wSGrPGwlHauclazs4qBy3lWA22gU/KA3//P/VzfMU8xaNJXbOB8x9l
1/+5Wf2+P0f8FABTZCJyrf5BmA5T/53j3JwCdDyUQb1W1dpySwZPp6KiJUILmGDD
TE+r8Da8krszsy0SkbJmlxgcQKxr6U1+0Na+Tjbs9Db01kjIghlFh4dAJT3OAq0W
Y5WWaDTmAj+oU6YfAAD0Hq9OK/V3j5ymMQ==
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:45:49 2025 by rpki-client