Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/8ed43c12-a8e4-370a-bd7a-c47e2fdf11ce.roa
File: 8ed43c12-a8e4-370a-bd7a-c47e2fdf11ce.roa (raw, json)
Hash identifier: LzKn8beRN05nCdOkjtp4mhwBl0JbcSMtl5fqMHrpuXw=
Subject key identifier: 08:37:B3:3A:7B:3B:76:63:9F:0C:5E:DE:75:FF:B7:62:EB:8D:C7:0D
Certificate issuer: /CN=d23910be-77e9-4381-87eb-cb12cfc9b676
Certificate serial: 010D0C9F432858491ED6DD340FB191B8DF9B88A0
Authority key identifier: F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/8ed43c12-a8e4-370a-bd7a-c47e2fdf11ce.roa
Signing time: Sat 08 Mar 2025 14:00:52 +0000
ROA not before: Sat 08 Mar 2025 14:00:52 +0000
ROA not after: Fri 06 Jun 2025 13:00:52 +0000
asID: 16509
IP address blocks: 2620:df:4000::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1e:d6:dd:34:0f:b1:91:b8:df:9b:88:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23910be-77e9-4381-87eb-cb12cfc9b676
Validity
Not Before: Mar 8 14:00:52 2025 GMT
Not After : Jun 6 13:00:52 2025 GMT
Subject: CN=e8e9099c-726c-450d-82f5-3ecd5d534517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9b:a7:6a:52:58:5e:ed:46:a6:45:46:81:c2:
f4:6f:78:be:05:e9:62:c1:e5:51:e8:49:c8:87:4e:
f2:a6:8b:59:b1:4d:54:0c:f2:fc:36:c7:79:62:01:
67:94:d9:95:d7:38:88:7d:65:1d:84:63:23:fe:3c:
d9:5a:da:00:76:d5:8e:a7:08:71:ff:b4:0b:41:cb:
c5:81:2d:62:ed:11:f3:db:ba:f3:a8:55:24:24:80:
e0:31:69:01:fb:31:a3:f1:07:d2:f8:e7:88:a5:39:
ea:a6:4e:62:86:04:44:8d:2b:f8:6e:46:a1:40:73:
44:61:aa:01:9c:d7:fd:c5:d9:32:fb:a6:55:88:9c:
61:8f:5e:cc:cb:47:24:00:eb:6f:c6:51:b3:87:f5:
b0:ec:07:4b:56:77:d1:89:b1:20:2b:21:c3:78:fa:
4e:10:8a:12:10:e3:03:0b:07:ae:20:bd:1c:92:8c:
ac:1a:c3:98:e6:eb:91:35:15:0d:fe:b9:9b:c4:bd:
fd:05:f5:4e:a9:eb:53:56:39:14:29:7d:30:3e:47:
23:88:bc:25:58:a3:66:be:aa:ef:2b:56:70:a9:41:
f9:15:70:82:cc:c0:94:46:11:c3:57:fb:5d:4b:42:
b4:f2:ad:6e:d9:a7:ee:0c:ae:2b:d6:6d:31:3f:1e:
5d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:37:B3:3A:7B:3B:76:63:9F:0C:5E:DE:75:FF:B7:62:EB:8D:C7:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/8ed43c12-a8e4-370a-bd7a-c47e2fdf11ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.crl
X509v3 Authority Key Identifier:
keyid:F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:df:4000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:6b:f8:e9:c3:e3:4e:a8:a1:09:77:c3:e5:fa:47:1f:b2:2c:
87:81:41:a7:4e:db:41:45:fe:e5:b5:88:b3:46:ed:f3:98:c3:
6d:6f:ca:3d:39:26:52:d6:41:f6:33:53:6f:70:ee:ab:ca:70:
65:a2:53:f2:15:e9:18:5f:5d:42:11:5f:1d:e2:35:74:93:c1:
40:e3:f6:72:e5:59:5b:da:ff:58:6c:f6:cc:6b:cd:e3:cc:77:
84:00:9f:fa:c4:f4:48:40:99:5f:02:a7:81:e3:38:ac:cb:89:
99:63:3d:e9:97:98:dd:f9:86:2b:85:c0:06:27:0a:34:62:85:
5e:7a:d5:a2:6e:ba:5a:97:60:04:d1:00:07:ef:76:80:a8:32:
b4:28:b5:44:c6:dd:43:7c:79:e9:00:e7:24:56:93:73:e5:56:
4a:bb:37:e1:8c:0f:d8:0a:b3:04:a2:f0:44:bf:ec:79:a3:8b:
32:4d:9b:74:4b:b9:91:54:87:4e:ba:53:5c:dc:19:61:f8:72:
c6:08:fb:d7:c1:45:3e:d0:db:a1:fe:fd:13:97:62:74:f6:ff:
cf:94:53:29:00:01:a6:5c:93:fe:63:c7:58:45:99:c9:8a:42:
ad:8f:89:85:52:74:36:92:d0:43:bb:67:c4:e1:07:14:88:a5:
a1:74:2d:34
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEke1t00D7GRuN+biKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDIzOTEwYmUtNzdlOS00MzgxLTg3ZWItY2IxMmNmYzli
Njc2MB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk
ZThlOTA5OWMtNzI2Yy00NTBkLTgyZjUtM2VjZDVkNTM0NTE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3punalJYXu1GpkVGgcL0b3i+BeliweVR6EnI
h07ypotZsU1UDPL8Nsd5YgFnlNmV1ziIfWUdhGMj/jzZWtoAdtWOpwhx/7QLQcvF
gS1i7RHz27rzqFUkJIDgMWkB+zGj8QfS+OeIpTnqpk5ihgREjSv4bkahQHNEYaoB
nNf9xdky+6ZViJxhj17My0ckAOtvxlGzh/Ww7AdLVnfRibEgKyHDePpOEIoSEOMD
CweuIL0ckoysGsOY5uuRNRUN/rmbxL39BfVOqetTVjkUKX0wPkcjiLwlWKNmvqrv
K1ZwqUH5FXCCzMCURhHDV/tdS0K08q1u2afuDK4r1m0xPx5dZQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAg3szp7O3Zjnwxe3nX/t2LrjccNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kMjM5
MTBiZS03N2U5LTQzODEtODdlYi1jYjEyY2ZjOWI2NzYvOGVkNDNjMTItYThlNC0z
NzBhLWJkN2EtYzQ3ZTJmZGYxMWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDIzOTEwYmUtNzdlOS00MzgxLTg3
ZWItY2IxMmNmYzliNjc2L2QyMzkxMGJlLTc3ZTktNDM4MS04N2ViLWNiMTJjZmM5
YjY3Ni5jcmwwHwYDVR0jBBgwFoAU8u8UTSWnxBh7mYJba+AKrUJIapgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kMjM5MTBiZS03N2U5LTQzODEtODdlYi1jYjEy
Y2ZjOWI2NzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiAA30AA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAABr+OnD406ooQl3w+X6Rx+yLIeBQadO20FF/uW1iLNG7fOYw21v
yj05JlLWQfYzU29w7qvKcGWiU/IV6RhfXUIRXx3iNXSTwUDj9nLlWVva/1hs9sxr
zePMd4QAn/rE9EhAmV8Cp4HjOKzLiZljPemXmN35hiuFwAYnCjRihV561aJuulqX
YATRAAfvdoCoMrQotUTG3UN8eekA5yRWk3PlVkq7N+GMD9gKswSi8ES/7HmjizJN
m3RLuZFUh066U1zcGWH4csYI+9fBRT7Q26H+/ROXYnT2/8+UUykAAaZck/5jx1hF
mcmKQq2PiYVSdDaS0EO7Z8ThBxSIpaF0LTQ=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:12:15 2025 by rpki-client