Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/38038dcb-67bd-3a83-a87a-911214d393a4.roa
File: 38038dcb-67bd-3a83-a87a-911214d393a4.roa (raw, json)
Hash identifier: qeMiTnAJS3s8IZlF8OEap5ngIQJg+fREkTYkQXl8tsc=
Subject key identifier: 6A:05:3C:F8:58:75:48:B5:AD:76:E1:0C:6A:B4:2D:12:7F:6B:3C:C1
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584912470A03C84997B23875F560
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/38038dcb-67bd-3a83-a87a-911214d393a4.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 397237
IP address blocks: 2001:502:ad09::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:47:0a:03:c8:49:97:b2:38:75:f5:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=6607628c-3a57-423c-8165-b7da199031af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:dd:2e:e2:02:4f:c4:c0:a1:84:89:1f:66:1e:
af:a8:cd:99:ad:2e:e7:8a:0e:e6:76:fb:69:fc:b6:
7b:4c:59:2d:1a:7c:88:75:84:fe:a0:a1:39:fa:c8:
8b:dc:e1:52:4d:97:24:ae:f7:42:4d:f7:e6:33:43:
52:d1:12:25:88:c5:0c:e1:2f:6d:05:75:b9:9a:c6:
f9:37:cc:0c:c6:56:eb:a7:89:c4:10:d1:54:df:7f:
fe:0a:e5:1e:de:5f:6e:ec:f3:52:e1:70:d3:8e:2e:
79:24:f8:3f:f8:d1:02:0b:be:2d:29:52:0a:83:91:
4c:e8:c9:65:2a:b9:7e:83:89:55:d8:7f:48:01:90:
3d:22:9c:b0:04:58:5d:44:82:92:81:24:78:6c:ad:
af:41:72:e4:af:db:21:7c:6c:d7:f2:db:5b:c2:73:
0d:0f:07:e2:8e:6f:dd:93:d9:6f:77:55:a7:2a:74:
fa:06:63:c0:a6:df:5c:bc:24:e8:52:ca:f9:56:53:
fc:c3:b7:c9:66:23:2c:9a:be:50:c8:c2:56:5c:3e:
b4:7b:6d:c4:75:3c:65:73:8e:a2:4c:bd:89:62:9c:
33:8a:18:26:76:c1:70:a7:23:42:6a:f4:ab:d3:dc:
2c:f0:29:e5:34:07:f0:07:84:49:79:23:46:3d:11:
7c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:05:3C:F8:58:75:48:B5:AD:76:E1:0C:6A:B4:2D:12:7F:6B:3C:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/38038dcb-67bd-3a83-a87a-911214d393a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:ad09::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:44:3d:81:c6:56:81:5c:ae:94:f5:5a:9b:c0:35:61:b4:55:
85:34:21:bc:b8:73:c1:df:72:ef:06:b4:89:68:88:4f:1c:b2:
da:a6:59:e9:28:4b:28:ef:3e:0b:60:50:03:54:92:14:55:42:
8d:60:1a:19:ab:a3:53:f3:40:c9:21:9c:4a:16:5f:b3:b0:8a:
4a:9c:22:9f:54:12:85:3d:7d:78:4b:d6:c8:5f:6f:65:8c:b9:
b9:0c:9c:62:e9:b0:33:5d:51:75:aa:10:d2:cd:53:91:8f:88:
fe:7a:88:c3:9e:b5:e0:bc:bc:df:22:c1:02:df:2a:6d:ce:91:
61:ca:43:ea:c9:5e:6f:2e:77:ac:2d:69:3f:b4:d2:07:cc:d5:
13:88:bb:49:a0:be:80:7d:fe:b9:fd:31:81:80:d5:27:87:87:
79:90:f5:0a:a7:8a:37:c5:a7:be:6b:6f:cc:09:9d:33:fa:73:
4f:5e:5f:f6:99:bb:0f:2a:70:78:d9:bb:42:48:16:5d:cc:33:
80:64:ef:e3:d2:ef:c2:ec:0b:32:c1:f6:7f:14:17:63:5b:97:
a4:e8:ed:d7:9a:52:08:b4:b0:6e:f4:34:55:d2:8b:f8:89:de:
f3:80:b6:92:76:7b:8d:35:9c:98:02:43:a9:61:cd:55:4b:f4:
7f:ba:7b:6e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkSRwoDyEmXsjh19WAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk
NjYwNzYyOGMtM2E1Ny00MjNjLTgxNjUtYjdkYTE5OTAzMWFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAot0u4gJPxMChhIkfZh6vqM2ZrS7nig7mdvtp
/LZ7TFktGnyIdYT+oKE5+siL3OFSTZckrvdCTffmM0NS0RIliMUM4S9tBXW5msb5
N8wMxlbrp4nEENFU33/+CuUe3l9u7PNS4XDTji55JPg/+NECC74tKVIKg5FM6Mll
Krl+g4lV2H9IAZA9IpywBFhdRIKSgSR4bK2vQXLkr9shfGzX8ttbwnMNDwfijm/d
k9lvd1WnKnT6BmPApt9cvCToUsr5VlP8w7fJZiMsmr5QyMJWXD60e23EdTxlc46i
TL2JYpwzihgmdsFwpyNCavSr09ws8CnlNAfwB4RJeSNGPRF8AwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGoFPPhYdUi1rXbhDGq0LRJ/azzBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMzgwMzhkY2ItNjdiZC0z
YTgzLWE4N2EtOTExMjE0ZDM5M2E0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAq0J
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIhEPYHGVoFcrpT1WpvANWG0VYU0Iby4c8Hfcu8GtIloiE8cstqm
WekoSyjvPgtgUANUkhRVQo1gGhmro1PzQMkhnEoWX7OwikqcIp9UEoU9fXhL1shf
b2WMubkMnGLpsDNdUXWqENLNU5GPiP56iMOeteC8vN8iwQLfKm3OkWHKQ+rJXm8u
d6wtaT+00gfM1ROIu0mgvoB9/rn9MYGA1SeHh3mQ9QqnijfFp75rb8wJnTP6c09e
X/aZuw8qcHjZu0JIFl3MM4Bk7+PS78LsCzLB9n8UF2Nbl6To7deaUgi0sG70NFXS
i/iJ3vOAtpJ2e401nJgCQ6lhzVVL9H+6e24=
-----END CERTIFICATE-----
Generated at Sun Apr 6 03:55:16 2025 by rpki-client