Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7a99494d-ba70-3ccc-b1c6-2ac0a85094ef.roa
File: 7a99494d-ba70-3ccc-b1c6-2ac0a85094ef.roa (raw, json)
Hash identifier: p+kU0rV7Ndy168jb7wSVftXykc2vgiofTAJy5ZrarI4=
Subject key identifier: 61:2B:2B:CF:B4:DF:4D:4C:99:A9:D6:54:1C:C4:40:9D:F6:5E:B8:ED
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584912470D787F3A90A2ABCC99A0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7a99494d-ba70-3ccc-b1c6-2ac0a85094ef.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 397233
IP address blocks: 2001:502:f3ff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:47:0d:78:7f:3a:90:a2:ab:cc:99:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=64c27dcb-c9fe-47d5-ac18-b4e9d66eacc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:cf:ea:b6:7b:ce:d1:1b:22:5e:02:00:c0:61:
82:79:41:04:cb:11:cd:5c:c3:24:6a:42:fa:d0:03:
59:24:ae:d3:d6:4d:f7:59:d6:06:e0:8c:85:9b:5c:
42:47:43:a3:ae:49:cd:e2:ad:79:fd:33:48:e6:90:
cc:13:1e:4d:7f:02:ab:29:0b:ff:ee:a2:6d:2f:7c:
24:2d:c4:c7:ba:f1:c5:e0:68:2e:e4:db:45:22:9e:
45:72:7b:2b:e7:23:f7:b2:9e:95:46:97:2c:9c:dd:
71:5f:d9:aa:b1:5a:0e:a5:e3:2c:87:66:9c:8b:41:
6f:63:2b:12:86:79:8d:b5:c2:6c:9c:f1:ab:46:ac:
4e:71:9a:c9:ce:3b:ef:28:b1:1e:63:d9:2c:20:07:
7c:b4:27:2f:5f:b4:a3:1b:f5:70:92:7e:79:0b:d3:
c8:57:95:2f:e4:37:a5:83:6c:76:b2:b7:b0:b4:b6:
10:9c:94:f3:4d:c2:ee:13:88:e7:83:cd:5e:8c:7a:
b7:da:03:20:27:f5:62:c1:b5:e4:0c:d1:94:61:04:
59:e0:6b:56:52:23:74:35:fc:ab:b6:07:f9:a4:db:
0d:59:fd:ad:20:c4:9b:31:a3:63:ac:23:31:d7:48:
7f:c9:91:10:db:b1:8c:70:c0:42:8b:42:70:df:30:
71:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:2B:2B:CF:B4:DF:4D:4C:99:A9:D6:54:1C:C4:40:9D:F6:5E:B8:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7a99494d-ba70-3ccc-b1c6-2ac0a85094ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:f3ff::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:d1:17:2a:7c:8a:72:d5:8f:af:c3:7c:64:c9:54:4d:ad:73:
5e:52:51:c9:39:be:57:12:87:8c:4f:27:5d:73:c2:66:ce:a9:
38:dd:81:f2:7b:2f:f3:3f:12:71:0c:e3:1d:6a:1b:2d:0b:48:
5f:60:2f:48:64:48:5c:a5:3a:57:6e:2d:fb:76:74:de:97:3a:
25:52:51:3e:9e:95:6f:3c:29:9c:dd:eb:38:e2:c6:07:55:4a:
60:26:2d:6e:4d:68:cb:d7:b9:c9:19:47:62:65:76:1f:1e:3d:
4e:81:61:27:a3:95:b1:96:09:94:ae:5e:ea:d7:e7:54:b7:26:
3b:ef:f9:f0:a6:26:72:6d:8a:22:82:99:fc:9b:fc:aa:7c:b1:
a2:1d:10:86:a3:3a:29:df:35:56:0b:de:4e:7d:82:b5:95:c8:
e1:65:3a:69:12:f5:65:8c:87:8c:c1:86:a2:e7:d7:b0:82:d0:
06:6d:b8:6d:19:b8:bf:5d:cf:8e:97:56:a9:ea:73:a4:74:c8:
74:8d:8f:bc:2c:e5:75:8f:51:ab:e6:c7:56:2d:78:75:af:c6:
b6:3b:02:21:ef:75:13:50:a8:82:77:15:45:e3:da:c8:cd:b3:
72:7b:21:6a:02:4f:f3:eb:b2:3a:6e:29:4e:56:9f:a1:5b:5f:
c7:e5:47:12
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkSRw14fzqQoqvMmaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk
NjRjMjdkY2ItYzlmZS00N2Q1LWFjMTgtYjRlOWQ2NmVhY2M5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7M/qtnvO0RsiXgIAwGGCeUEEyxHNXMMkakL6
0ANZJK7T1k33WdYG4IyFm1xCR0OjrknN4q15/TNI5pDMEx5NfwKrKQv/7qJtL3wk
LcTHuvHF4Ggu5NtFIp5Fcnsr5yP3sp6VRpcsnN1xX9mqsVoOpeMsh2aci0FvYysS
hnmNtcJsnPGrRqxOcZrJzjvvKLEeY9ksIAd8tCcvX7SjG/Vwkn55C9PIV5Uv5Del
g2x2srewtLYQnJTzTcLuE4jng81ejHq32gMgJ/ViwbXkDNGUYQRZ4GtWUiN0Nfyr
tgf5pNsNWf2tIMSbMaNjrCMx10h/yZEQ27GMcMBCi0Jw3zBxSwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGErK8+0301MmanWVBzEQJ32XrjtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvN2E5OTQ5NGQtYmE3MC0z
Y2NjLWIxYzYtMmFjMGE4NTA5NGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAvP/
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEfRFyp8inLVj6/DfGTJVE2tc15SUck5vlcSh4xPJ11zwmbOqTjd
gfJ7L/M/EnEM4x1qGy0LSF9gL0hkSFylOlduLft2dN6XOiVSUT6elW88KZzd6zji
xgdVSmAmLW5NaMvXuckZR2Jldh8ePU6BYSejlbGWCZSuXurX51S3Jjvv+fCmJnJt
iiKCmfyb/Kp8saIdEIajOinfNVYL3k59grWVyOFlOmkS9WWMh4zBhqLn17CC0AZt
uG0ZuL9dz46XVqnqc6R0yHSNj7ws5XWPUavmx1YteHWvxrY7AiHvdRNQqIJ3FUXj
2sjNs3J7IWoCT/PrsjpuKU5Wn6FbX8flRxI=
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:09:49 2025 by rpki-client