Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/0d36b90c-3ee5-3b4d-8a88-4a58b7068da7.roa
File: 0d36b90c-3ee5-3b4d-8a88-4a58b7068da7.roa (raw, json)
Hash identifier: pdo+6k+9agsIw4yM5w54vkXVflm6CF15NX9zy7P8qnI=
Subject key identifier: A2:0F:15:23:CC:3C:36:31:CC:89:5A:26:5D:C3:A5:86:3E:23:D1:16
Certificate issuer: /CN=89dfa952-929a-4c50-a372-96882b2b33e2
Certificate serial: 010D0C9F432858486C2B201B2C763A13CE19EAC0
Authority key identifier: 39:AB:0C:9E:E4:5D:F8:25:0A:DF:8C:85:5D:D8:EC:B1:27:27:62:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/0d36b90c-3ee5-3b4d-8a88-4a58b7068da7.roa
Signing time: Fri 03 Jan 2025 14:00:51 +0000
ROA not before: Fri 03 Jan 2025 14:00:51 +0000
ROA not after: Thu 03 Apr 2025 13:00:51 +0000
asID: 19782
IP address blocks: 2607:ac80::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:2b:20:1b:2c:76:3a:13:ce:19:ea:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89dfa952-929a-4c50-a372-96882b2b33e2
Validity
Not Before: Jan 3 14:00:51 2025 GMT
Not After : Apr 3 13:00:51 2025 GMT
Subject: CN=f90f1a8f-8786-4568-bb88-613a542f7b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:32:7b:ba:6f:71:c7:c7:76:8e:d2:38:0f:de:
e7:86:62:dd:a6:74:49:c3:d5:02:8b:e7:5c:22:2c:
7e:c1:5c:4a:b8:39:58:aa:1a:07:02:f6:17:fe:a2:
7b:bd:34:34:25:b4:c4:49:9f:86:00:14:70:c7:14:
f0:e9:33:f8:10:87:df:89:40:7d:a8:94:cb:66:2d:
cb:81:43:45:96:09:07:e1:5d:fc:50:a2:0d:21:08:
01:f0:74:3c:5d:55:a0:15:c7:dd:0c:ff:30:f7:38:
d7:b4:4b:98:96:ac:1a:95:30:7a:21:ff:d9:5b:79:
bd:79:c3:ce:30:13:9f:7c:6f:11:69:cb:b0:c0:08:
d8:38:20:6b:25:60:5e:8c:f2:36:d2:93:78:54:61:
e4:0f:ef:31:60:01:7b:a4:fd:78:68:73:26:a7:bc:
0f:c5:26:e4:bc:a0:3d:23:76:69:9e:d0:35:17:dd:
7f:0b:66:92:9c:65:35:04:ce:ec:2a:08:fb:c6:c1:
55:16:74:17:3a:77:62:bb:2a:a1:0b:2a:53:ab:7a:
61:3d:df:d8:f2:2f:fa:c4:2c:0a:11:cf:65:aa:c1:
c3:c2:a8:80:f6:78:f5:3f:04:69:fe:e9:1f:b0:c9:
63:44:e5:99:84:98:fd:c5:30:49:6d:b0:89:5f:b3:
64:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:0F:15:23:CC:3C:36:31:CC:89:5A:26:5D:C3:A5:86:3E:23:D1:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/0d36b90c-3ee5-3b4d-8a88-4a58b7068da7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.crl
X509v3 Authority Key Identifier:
keyid:39:AB:0C:9E:E4:5D:F8:25:0A:DF:8C:85:5D:D8:EC:B1:27:27:62:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:ac80::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:88:a6:41:11:ed:36:57:1a:34:03:94:0f:7a:81:f4:54:74:
be:5e:4c:d5:85:53:36:85:cc:2e:da:ed:0e:c3:33:8a:3f:58:
d6:97:04:d1:12:41:b9:e9:32:48:39:cc:94:a2:f4:05:65:cf:
fe:a0:47:f6:4a:09:fb:3f:d0:6d:5a:e2:b2:c6:0f:9f:b5:18:
fd:ae:16:ea:f8:11:3a:84:b1:48:ae:51:56:a4:ea:2a:48:ed:
5b:e7:56:71:6c:37:e8:47:0f:bb:ad:dc:f6:31:26:d2:23:61:
4e:29:6b:f2:7c:68:64:0f:d4:53:73:8a:0d:29:1b:d0:33:53:
26:e8:c3:a4:09:6e:e7:70:7d:0b:99:11:42:97:2c:64:df:46:
83:4c:63:e8:ec:53:c1:cd:15:6c:94:0f:8e:aa:47:ce:2f:ce:
9d:e0:64:46:89:79:c3:67:ed:99:92:bc:72:c2:6f:1d:42:d5:
d5:29:7e:98:4b:02:14:bf:dd:4e:73:79:9e:39:3f:84:0d:d0:
80:0a:d1:83:03:c8:23:94:83:ad:0a:c2:29:f6:44:1b:99:26:
3a:00:ee:d5:f0:41:00:ef:f4:24:21:a2:c8:6b:71:24:58:42:
3a:d9:00:21:ad:38:4e:90:34:03:49:f8:8d:8c:38:c1:03:38:
39:dd:50:7f
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEhsKyAbLHY6E84Z6sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODlkZmE5NTItOTI5YS00YzUwLWEzNzItOTY4ODJiMmIz
M2UyMB4XDTI1MDEwMzE0MDA1MVoXDTI1MDQwMzEzMDA1MVowLzEtMCsGA1UEAxMk
ZjkwZjFhOGYtODc4Ni00NTY4LWJiODgtNjEzYTU0MmY3YjBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozJ7um9xx8d2jtI4D97nhmLdpnRJw9UCi+dc
Iix+wVxKuDlYqhoHAvYX/qJ7vTQ0JbTESZ+GABRwxxTw6TP4EIffiUB9qJTLZi3L
gUNFlgkH4V38UKINIQgB8HQ8XVWgFcfdDP8w9zjXtEuYlqwalTB6If/ZW3m9ecPO
MBOffG8RacuwwAjYOCBrJWBejPI20pN4VGHkD+8xYAF7pP14aHMmp7wPxSbkvKA9
I3ZpntA1F91/C2aSnGU1BM7sKgj7xsFVFnQXOndiuyqhCypTq3phPd/Y8i/6xCwK
Ec9lqsHDwqiA9nj1PwRp/ukfsMljROWZhJj9xTBJbbCJX7NkNwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFKIPFSPMPDYxzIlaJl3DpYY+I9EWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84OWRm
YTk1Mi05MjlhLTRjNTAtYTM3Mi05Njg4MmIyYjMzZTIvMGQzNmI5MGMtM2VlNS0z
YjRkLThhODgtNGE1OGI3MDY4ZGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODlkZmE5NTItOTI5YS00YzUwLWEz
NzItOTY4ODJiMmIzM2UyLzg5ZGZhOTUyLTkyOWEtNGM1MC1hMzcyLTk2ODgyYjJi
MzNlMi5jcmwwHwYDVR0jBBgwFoAUOasMnuRd+CUK34yFXdjssScnYpMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS84OWRmYTk1Mi05MjlhLTRjNTAtYTM3Mi05Njg4
MmIyYjMzZTIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgesgDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBniKZBEe02Vxo0A5QPeoH0VHS+XkzVhVM2hcwu2u0OwzOKP1jWlwTR
EkG56TJIOcyUovQFZc/+oEf2Sgn7P9BtWuKyxg+ftRj9rhbq+BE6hLFIrlFWpOoq
SO1b51ZxbDfoRw+7rdz2MSbSI2FOKWvyfGhkD9RTc4oNKRvQM1Mm6MOkCW7ncH0L
mRFClyxk30aDTGPo7FPBzRVslA+OqkfOL86d4GRGiXnDZ+2Zkrxywm8dQtXVKX6Y
SwIUv91Oc3meOT+EDdCACtGDA8gjlIOtCsIp9kQbmSY6AO7V8EEA7/QkIaLIa3Ek
WEI62QAhrThOkDQDSfiNjDjBAzg53VB/
-----END CERTIFICATE-----
Generated at Sun Apr 27 23:48:38 2025 by rpki-client