Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/5fa88a4f-d46f-3b7c-b32c-5ad7078b3c5b.roa
File: 5fa88a4f-d46f-3b7c-b32c-5ad7078b3c5b.roa (raw, json)
Hash identifier: F/slE9MsiCSi4IReG0FWsEEcqnTfreflKMlK5ZwcGYM=
Subject key identifier: 40:E9:16:D3:EB:F7:4A:64:79:B7:26:98:02:8C:B7:AD:B0:D3:E2:F5
Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial: 010D0C9F4328584883E5C40A09E40E756C467F80
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/5fa88a4f-d46f-3b7c-b32c-5ad7078b3c5b.roa
Signing time: Sun 12 Jan 2025 02:00:38 +0000
ROA not before: Sun 12 Jan 2025 02:00:38 +0000
ROA not after: Sat 12 Apr 2025 01:00:38 +0000
asID: 62651
IP address blocks: 2604:ea80:3000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:83:e5:c4:0a:09:e4:0e:75:6c:46:7f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Validity
Not Before: Jan 12 02:00:38 2025 GMT
Not After : Apr 12 01:00:38 2025 GMT
Subject: CN=a8efab0a-8e56-489b-a62f-79dda971684f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5f:e4:c3:5e:a6:4c:22:57:29:4d:b1:b6:fa:
47:af:18:ee:7b:a6:1a:2d:d3:0e:dd:cd:85:d0:01:
23:70:13:72:6e:61:0e:1a:c0:31:9d:ae:80:16:33:
8b:97:2f:8a:b4:78:9e:cc:17:44:80:55:8f:ad:8e:
80:57:1c:ec:af:b0:78:20:59:03:e5:9a:d4:2f:19:
de:dd:e3:6d:dc:a6:e0:87:59:24:b5:28:83:2d:34:
b5:e2:4e:48:5c:43:bb:65:77:f5:1a:32:1f:85:52:
31:b5:23:52:82:a4:5f:05:db:f2:34:13:90:65:1b:
7c:81:6d:8e:36:3e:5e:c4:78:99:c1:87:d4:0e:b5:
29:1d:7e:5d:d5:af:f9:50:5f:7a:d2:9a:ed:e1:d0:
08:12:55:13:78:8f:bf:7f:a9:99:d6:3b:84:b8:43:
57:d1:06:3f:1a:47:10:5a:3a:37:92:38:a8:c7:cf:
40:63:d7:1e:27:84:bc:06:ed:04:09:f4:c8:60:67:
6e:26:f5:ac:bb:ac:c5:2f:eb:05:55:4c:e7:24:6e:
f9:4f:0e:e9:58:81:fe:32:20:44:9b:2e:b5:77:7b:
e6:ec:63:54:e9:91:f8:83:6b:74:36:eb:75:f2:b6:
6f:25:f7:60:16:49:8a:5b:20:e0:cf:78:00:90:8c:
50:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E9:16:D3:EB:F7:4A:64:79:B7:26:98:02:8C:B7:AD:B0:D3:E2:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/5fa88a4f-d46f-3b7c-b32c-5ad7078b3c5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
X509v3 Authority Key Identifier:
keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:ea80:3000::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:1c:4c:1c:e9:79:f9:28:84:70:89:b8:aa:44:9f:c0:52:a0:
30:e6:85:47:f0:47:54:ae:b4:24:c4:32:5e:73:51:11:5a:3c:
b9:31:8f:b2:e9:3c:d8:80:ca:af:01:f6:81:e8:2e:02:af:43:
11:65:26:d8:0e:bb:9c:7b:ad:df:63:27:09:4e:48:a9:8d:27:
fe:fe:57:e4:b6:6e:79:78:61:ed:2b:23:7c:77:c0:61:94:45:
c7:44:e9:93:e6:a0:26:b8:ae:a5:52:dd:ab:db:05:2d:0a:aa:
9d:13:92:bc:26:21:66:da:4f:c0:13:56:47:66:cf:0f:26:b8:
53:f4:14:20:26:a8:f9:3e:84:f8:ba:8f:6b:6d:cf:77:b1:18:
9e:6b:0e:d7:af:e7:7f:3b:a6:47:91:a0:5f:9f:2b:1e:93:8b:
74:40:a8:de:ec:86:6f:71:c6:75:d7:75:09:b9:aa:81:da:8d:
eb:f5:89:8d:b8:01:4e:06:f9:e3:46:f0:d8:82:89:4e:bc:e5:
78:52:7c:0e:19:a5:24:7b:6f:37:d9:4e:d9:1a:36:c9:95:af:
ea:51:8b:08:1e:e2:76:a5:51:87:8a:ed:6d:2b:37:85:da:08:
58:98:23:c9:7d:bc:9a:05:81:56:1f:63:cc:73:60:29:b8:2c:
5c:27:ca:91
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEiD5cQKCeQOdWxGf4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz
NmJhMB4XDTI1MDExMjAyMDAzOFoXDTI1MDQxMjAxMDAzOFowLzEtMCsGA1UEAxMk
YThlZmFiMGEtOGU1Ni00ODliLWE2MmYtNzlkZGE5NzE2ODRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwF/kw16mTCJXKU2xtvpHrxjue6YaLdMO3c2F
0AEjcBNybmEOGsAxna6AFjOLly+KtHiezBdEgFWPrY6AVxzsr7B4IFkD5ZrULxne
3eNt3Kbgh1kktSiDLTS14k5IXEO7ZXf1GjIfhVIxtSNSgqRfBdvyNBOQZRt8gW2O
Nj5exHiZwYfUDrUpHX5d1a/5UF960prt4dAIElUTeI+/f6mZ1juEuENX0QY/GkcQ
Wjo3kjiox89AY9ceJ4S8Bu0ECfTIYGduJvWsu6zFL+sFVUznJG75Tw7pWIH+MiBE
my61d3vm7GNU6ZH4g2t0Nut18rZvJfdgFkmKWyDgz3gAkIxQOwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFEDpFtPr90pkebcmmAKMt62w0+L1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy
NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvNWZhODhhNGYtZDQ2Zi0z
YjdjLWIzMmMtNWFkNzA3OGIzYzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj
MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl
MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3
OGU4ZTM2YmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTqgDAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEALRxMHOl5+SiEcIm4qkSfwFKgMOaFR/BHVK60JMQyXnNREVo8uTGP
suk82IDKrwH2geguAq9DEWUm2A67nHut32MnCU5IqY0n/v5X5LZueXhh7SsjfHfA
YZRFx0Tpk+agJriupVLdq9sFLQqqnROSvCYhZtpPwBNWR2bPDya4U/QUICao+T6E
+LqPa23Pd7EYnmsO16/nfzumR5GgX58rHpOLdECo3uyGb3HGddd1CbmqgdqN6/WJ
jbgBTgb540bw2IKJTrzleFJ8DhmlJHtvN9lO2Ro2yZWv6lGLCB7idqVRh4rtbSs3
hdoIWJgjyX28mgWBVh9jzHNgKbgsXCfKkQ==
-----END CERTIFICATE-----
Generated at Sat May 10 20:32:11 2025 by rpki-client