Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/f8908e78-f05a-376c-96cc-e41fc7925ad0.roa
File: f8908e78-f05a-376c-96cc-e41fc7925ad0.roa (raw, json)
Hash identifier: G0GztDmWk5USHk3gv4QVnUkQXaeAhEZe/Tf+bopzBeg=
Subject key identifier: 92:0C:9C:29:8C:6A:E0:E6:1E:0A:27:1F:B7:C6:3C:26:04:50:45:A8
Certificate issuer: /CN=a23bc07d-54c6-415f-9dc1-c1a209f2d080
Certificate serial: 010D0C9F4328584940394DBA069DE78033E6BB00
Authority key identifier: 33:0D:D1:53:FE:35:12:07:DD:57:8A:29:1B:6B:E6:17:DB:1C:58:F4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/f8908e78-f05a-376c-96cc-e41fc7925ad0.roa
Signing time: Thu 20 Mar 2025 13:00:53 +0000
ROA not before: Thu 20 Mar 2025 13:00:53 +0000
ROA not after: Wed 18 Jun 2025 13:00:53 +0000
asID: 64289
IP address blocks: 2602:2ea::/45 maxlen: 45
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:40:39:4d:ba:06:9d:e7:80:33:e6:bb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a23bc07d-54c6-415f-9dc1-c1a209f2d080
Validity
Not Before: Mar 20 13:00:53 2025 GMT
Not After : Jun 18 13:00:53 2025 GMT
Subject: CN=3253f850-fb6f-4eea-b604-9645911405e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e1:fd:2b:3e:61:8b:fa:58:39:e0:bb:9b:51:
2f:e6:05:80:e3:3d:c1:bf:0d:62:4e:7c:27:52:05:
71:e8:41:7f:71:b0:1b:d1:3a:7e:29:e2:86:e7:52:
53:61:01:e5:36:d9:28:b7:9b:66:ee:1e:35:60:43:
bd:83:f0:ff:36:69:91:87:31:73:96:0c:3c:b6:af:
f0:ee:91:ab:20:ed:c4:b2:62:27:5c:a9:83:93:08:
0a:2b:41:2a:5e:6b:2b:bc:ed:56:79:1b:d2:bb:fb:
f8:38:bc:b4:eb:8d:54:01:da:b0:8f:90:a5:9e:4d:
d0:18:c4:5e:ad:14:52:85:63:f8:d7:9c:01:1a:9f:
ee:95:13:1a:cc:6e:d4:79:32:27:6a:01:a5:e6:75:
ad:38:32:24:c1:01:50:da:51:d3:ef:29:f9:c5:50:
1d:1b:a9:74:29:fd:97:17:42:1b:2f:a7:10:d6:6f:
ef:52:e3:9c:fd:ce:76:08:d1:17:08:11:42:13:1f:
0f:3c:99:bb:7c:d4:30:02:da:be:ab:a3:b6:a2:c3:
82:43:e9:68:aa:dd:21:e9:fe:88:e1:26:79:c8:b8:
fa:86:a2:dd:73:15:e1:44:43:fa:4b:d7:3c:e1:8f:
12:35:cc:c7:25:60:1c:a3:0f:81:1b:13:e4:1c:e7:
71:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:0C:9C:29:8C:6A:E0:E6:1E:0A:27:1F:B7:C6:3C:26:04:50:45:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/f8908e78-f05a-376c-96cc-e41fc7925ad0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/a23bc07d-54c6-415f-9dc1-c1a209f2d080.crl
X509v3 Authority Key Identifier:
keyid:33:0D:D1:53:FE:35:12:07:DD:57:8A:29:1B:6B:E6:17:DB:1C:58:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:2ea::/45
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:5f:e8:11:e9:44:21:ab:4c:1b:54:a7:b4:f7:2c:85:7e:7e:
79:d7:82:23:b7:b0:47:1e:1d:b7:3f:1f:20:ea:fc:88:20:b0:
45:29:b7:f8:77:50:3d:2a:4d:7e:70:05:44:1a:65:1c:de:3c:
87:16:0f:9a:b2:ef:a6:6b:13:eb:2b:ab:77:ad:2b:1a:12:8e:
e3:fc:06:f8:bd:36:ba:a4:e1:6d:59:c1:f2:22:86:eb:53:50:
84:c1:f6:61:eb:e6:80:99:14:24:ff:0c:6e:6b:7b:e6:66:d6:
7b:2b:f1:fe:25:11:2c:50:e4:33:ed:71:23:4e:49:ca:3d:2e:
c0:73:7c:5f:f8:70:de:30:83:8b:f9:36:b6:2a:f0:3f:3f:3e:
22:d9:d7:de:05:3d:d7:a3:63:1e:28:a4:56:48:fc:e7:81:ec:
a1:ed:69:4b:f6:bd:90:c1:60:5f:d0:0f:af:5b:56:ac:6c:80:
c3:7d:f0:43:53:fd:a3:72:a8:9f:44:b6:ca:0a:cc:f4:d4:d3:
19:42:ee:5b:72:1c:a2:98:9d:0c:12:fd:46:75:83:73:6c:27:
17:78:3a:16:ca:a6:b6:36:7b:8d:19:08:bf:de:1b:ae:52:b2:
6c:98:a2:52:8f:a4:ef:51:44:b6:52:33:b3:08:ec:85:69:81:
1c:b5:7e:78
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElAOU26Bp3ngDPmuwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTIzYmMwN2QtNTRjNi00MTVmLTlkYzEtYzFhMjA5ZjJk
MDgwMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk
MzI1M2Y4NTAtZmI2Zi00ZWVhLWI2MDQtOTY0NTkxMTQwNWUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuH9Kz5hi/pYOeC7m1Ev5gWA4z3Bvw1iTnwn
UgVx6EF/cbAb0Tp+KeKG51JTYQHlNtkot5tm7h41YEO9g/D/NmmRhzFzlgw8tq/w
7pGrIO3EsmInXKmDkwgKK0EqXmsrvO1WeRvSu/v4OLy0641UAdqwj5Clnk3QGMRe
rRRShWP415wBGp/ulRMazG7UeTInagGl5nWtODIkwQFQ2lHT7yn5xVAdG6l0Kf2X
F0IbL6cQ1m/vUuOc/c52CNEXCBFCEx8PPJm7fNQwAtq+q6O2osOCQ+loqt0h6f6I
4SZ5yLj6hqLdcxXhREP6S9c84Y8SNczHJWAcow+BGxPkHOdxuwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJIMnCmMauDmHgonH7fGPCYEUEWoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMjNi
YzA3ZC01NGM2LTQxNWYtOWRjMS1jMWEyMDlmMmQwODAvZjg5MDhlNzgtZjA1YS0z
NzZjLTk2Y2MtZTQxZmM3OTI1YWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTIzYmMwN2QtNTRjNi00MTVmLTlk
YzEtYzFhMjA5ZjJkMDgwL2EyM2JjMDdkLTU0YzYtNDE1Zi05ZGMxLWMxYTIwOWYy
ZDA4MC5jcmwwHwYDVR0jBBgwFoAUMw3RU/41EgfdV4opG2vmF9scWPQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMjNiYzA3ZC01NGM2LTQxNWYtOWRjMS1jMWEy
MDlmMmQwODAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgIC6gAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADpf6BHpRCGrTBtUp7T3LIV+fnnXgiO3sEceHbc/HyDq/IggsEUp
t/h3UD0qTX5wBUQaZRzePIcWD5qy76ZrE+srq3etKxoSjuP8Bvi9Nrqk4W1ZwfIi
hutTUITB9mHr5oCZFCT/DG5re+Zm1nsr8f4lESxQ5DPtcSNOSco9LsBzfF/4cN4w
g4v5NrYq8D8/PiLZ194FPdejYx4opFZI/OeB7KHtaUv2vZDBYF/QD69bVqxsgMN9
8ENT/aNyqJ9EtsoKzPTU0xlC7ltyHKKYnQwS/UZ1g3NsJxd4OhbKprY2e40ZCL/e
G65SsmyYolKPpO9RRLZSM7MI7IVpgRy1fng=
-----END CERTIFICATE-----
Generated at Sat Apr 5 20:13:06 2025 by rpki-client