Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/9fa98f84-5902-38d4-b16f-becadb732860.roa
File: 9fa98f84-5902-38d4-b16f-becadb732860.roa (raw, json)
Hash identifier: yRD4aYuYIiwtzYk69IPK7m5CpBbb2qUR+ZOl9Qdrgh8=
Subject key identifier: F6:3B:E9:AC:E6:3E:EC:13:12:A5:D7:DC:B7:9F:23:CC:4B:96:94:FC
Certificate issuer: /CN=f7a32cdf-af4a-47d5-86dc-e9cdcf68c259
Certificate serial: 010D0C9F432858486AC5A0A7A2D860C682A15180
Authority key identifier: 9E:CD:96:39:7A:17:63:72:CF:A0:47:47:1E:35:13:B8:73:76:16:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/9fa98f84-5902-38d4-b16f-becadb732860.roa
Signing time: Fri 03 Jan 2025 02:00:40 +0000
ROA not before: Fri 03 Jan 2025 02:00:40 +0000
ROA not after: Thu 03 Apr 2025 01:00:40 +0000
asID: 14866
IP address blocks: 2604:4280::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6a:c5:a0:a7:a2:d8:60:c6:82:a1:51:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7a32cdf-af4a-47d5-86dc-e9cdcf68c259
Validity
Not Before: Jan 3 02:00:40 2025 GMT
Not After : Apr 3 01:00:40 2025 GMT
Subject: CN=2757d55d-1bdc-4f0b-a135-b6735bc9b5b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:19:a1:46:ea:40:80:01:15:c9:95:dd:16:78:
95:b1:29:51:4b:c3:f2:60:c3:f8:89:8d:93:c2:dd:
d8:d8:8b:a6:f7:82:df:df:56:97:bd:be:1b:88:4b:
90:32:2d:38:d4:fc:e5:91:c7:63:73:01:43:a0:f5:
87:50:33:ac:31:79:e3:f6:01:b4:fe:24:a8:11:c0:
b2:19:fd:1c:5e:e7:e8:66:23:81:48:74:1f:33:23:
4d:2f:90:7d:a2:48:87:4a:6c:98:ee:f9:f9:24:63:
21:a7:24:99:55:5c:43:c7:74:de:d6:6e:07:11:70:
d8:15:68:84:1a:60:70:cb:f4:35:c7:68:2b:8a:c4:
97:b6:12:e0:af:45:76:f1:4c:f6:bf:b2:23:a9:d1:
0a:d3:e5:55:8b:96:dc:10:47:33:89:2e:ba:4a:d1:
76:50:8d:9c:7c:9a:a5:df:0b:80:0b:10:98:a8:84:
43:ba:f6:60:86:53:ec:79:6c:a2:fb:92:6b:9d:53:
82:06:f5:98:02:dc:a3:5f:52:03:c2:15:57:93:c5:
6a:12:4c:8c:23:d9:69:79:c0:64:19:87:27:fc:a3:
b1:85:7c:5d:ba:81:0e:fc:20:0c:08:39:7f:82:7f:
14:96:e6:8e:e5:4d:5f:38:ef:04:71:3b:d9:74:cf:
b4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:3B:E9:AC:E6:3E:EC:13:12:A5:D7:DC:B7:9F:23:CC:4B:96:94:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/9fa98f84-5902-38d4-b16f-becadb732860.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.crl
X509v3 Authority Key Identifier:
keyid:9E:CD:96:39:7A:17:63:72:CF:A0:47:47:1E:35:13:B8:73:76:16:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:4280::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b6:ec:a2:02:8e:bf:b2:88:3b:f6:2b:43:53:52:b5:78:8e:ee:
b4:1d:1e:32:2e:2c:c5:d5:da:35:27:bf:8f:d0:6e:d1:d7:a8:
39:f3:8d:df:f2:54:31:65:52:f3:39:43:65:33:96:70:ca:92:
59:be:a4:86:4b:5e:f1:b4:ca:3f:3d:64:f3:1a:44:26:e4:3e:
a7:11:e0:3c:65:b5:f5:7f:7a:c1:52:39:c9:5b:20:c0:9c:a4:
9f:d2:57:00:0b:9e:b6:32:b5:ef:9e:5c:88:37:26:a8:81:09:
1d:39:88:8b:c8:59:13:2f:06:8b:4e:13:1a:51:44:ec:ec:50:
24:0a:ff:a2:d2:dd:a6:ba:ae:78:56:68:69:70:ce:df:45:96:
1f:0c:8c:b1:f0:b0:06:4c:4a:a8:55:37:f1:3c:2a:c3:d9:ed:
8c:34:15:d8:03:d9:f1:88:93:a4:9a:db:7e:35:c9:6c:b9:00:
54:eb:dc:4c:68:63:e0:22:fe:f5:f9:85:05:1d:97:78:e5:29:
ed:3e:1a:b1:e3:60:8f:0b:21:4f:3d:73:ee:04:72:49:b3:57:
da:7a:b1:b8:1a:25:50:d7:9d:ca:d8:b1:73:1e:12:a1:40:dc:
84:a7:5f:6b:75:e5:42:01:7b:fa:ee:89:a2:38:3b:61:e0:f5:
83:1a:23:97
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEhqxaCnothgxoKhUYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjdhMzJjZGYtYWY0YS00N2Q1LTg2ZGMtZTljZGNmNjhj
MjU5MB4XDTI1MDEwMzAyMDA0MFoXDTI1MDQwMzAxMDA0MFowLzEtMCsGA1UEAxMk
Mjc1N2Q1NWQtMWJkYy00ZjBiLWExMzUtYjY3MzViYzliNWIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxmhRupAgAEVyZXdFniVsSlRS8PyYMP4iY2T
wt3Y2Ium94Lf31aXvb4biEuQMi041PzlkcdjcwFDoPWHUDOsMXnj9gG0/iSoEcCy
Gf0cXufoZiOBSHQfMyNNL5B9okiHSmyY7vn5JGMhpySZVVxDx3Te1m4HEXDYFWiE
GmBwy/Q1x2grisSXthLgr0V28Uz2v7IjqdEK0+VVi5bcEEcziS66StF2UI2cfJql
3wuACxCYqIRDuvZghlPseWyi+5JrnVOCBvWYAtyjX1IDwhVXk8VqEkyMI9lpecBk
GYcn/KOxhXxduoEO/CAMCDl/gn8UluaO5U1fOO8EcTvZdM+0DQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFPY76azmPuwTEqXX3LefI8xLlpT8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mN2Ez
MmNkZi1hZjRhLTQ3ZDUtODZkYy1lOWNkY2Y2OGMyNTkvOWZhOThmODQtNTkwMi0z
OGQ0LWIxNmYtYmVjYWRiNzMyODYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZjdhMzJjZGYtYWY0YS00N2Q1LTg2
ZGMtZTljZGNmNjhjMjU5L2Y3YTMyY2RmLWFmNGEtNDdkNS04NmRjLWU5Y2RjZjY4
YzI1OS5jcmwwHwYDVR0jBBgwFoAUns2WOXoXY3LPoEdHHjUTuHN2FuIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9mN2EzMmNkZi1hZjRhLTQ3ZDUtODZkYy1lOWNk
Y2Y2OGMyNTkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRCgDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQC27KICjr+yiDv2K0NTUrV4ju60HR4yLizF1do1J7+P0G7R16g5843f
8lQxZVLzOUNlM5ZwypJZvqSGS17xtMo/PWTzGkQm5D6nEeA8ZbX1f3rBUjnJWyDA
nKSf0lcAC562MrXvnlyINyaogQkdOYiLyFkTLwaLThMaUUTs7FAkCv+i0t2muq54
VmhpcM7fRZYfDIyx8LAGTEqoVTfxPCrD2e2MNBXYA9nxiJOkmtt+NclsuQBU69xM
aGPgIv71+YUFHZd45SntPhqx42CPCyFPPXPuBHJJs1faerG4GiVQ153K2LFzHhKh
QNyEp19rdeVCAXv67omiODth4PWDGiOX
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:31:18 2025 by rpki-client