Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5/d16e6f67-b483-36a3-82f1-7c774d2bca7e.roa
File: d16e6f67-b483-36a3-82f1-7c774d2bca7e.roa (raw, json)
Hash identifier: VzFu+YwM4ECBUCtX4bxe2zfuAp5gqVxqMuLKHlld3xg=
Subject key identifier: DD:F5:C7:02:1D:59:06:B8:B5:1B:40:15:91:A1:53:F7:0E:7E:9C:3B
Certificate issuer: /CN=da5c184e-0f46-42cb-a77d-3f3d837657a5
Certificate serial: 010D0C9F432858493062822CB5FEC9141D355380
Authority key identifier: D2:81:12:89:FB:FA:14:2F:97:56:72:9D:7F:1F:02:AE:0F:29:29:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5/d16e6f67-b483-36a3-82f1-7c774d2bca7e.roa
Signing time: Fri 14 Mar 2025 20:51:06 +0000
ROA not before: Fri 14 Mar 2025 20:51:06 +0000
ROA not after: Thu 12 Jun 2025 20:51:06 +0000
asID: 16509
IP address blocks: 2604:f340:101::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:30:62:82:2c:b5:fe:c9:14:1d:35:53:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da5c184e-0f46-42cb-a77d-3f3d837657a5
Validity
Not Before: Mar 14 20:51:06 2025 GMT
Not After : Jun 12 20:51:06 2025 GMT
Subject: CN=c63837a4-0e48-4f90-9e2a-24e83bb12f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a5:c9:ca:d2:18:f6:82:f5:c3:3b:6f:19:c5:
48:29:bc:10:f0:47:5d:47:84:2f:97:b5:ad:8b:a9:
49:9f:59:31:f1:fc:23:f5:2b:54:01:28:6f:cc:18:
ef:6d:d8:aa:61:4a:71:69:98:e5:52:e9:96:a3:d0:
2c:3b:9b:97:2a:17:55:18:c0:c9:1e:77:f4:04:6b:
a3:76:22:ca:f4:01:a2:11:15:68:cd:c7:32:3a:c0:
58:0b:f3:b9:00:1c:70:0c:82:d9:ad:2e:30:73:54:
9d:97:02:eb:cd:f4:0e:ab:2b:19:e4:a5:d2:c8:eb:
4f:39:ac:ad:b5:30:cc:58:ee:b4:42:d2:5f:dc:1d:
88:d4:56:ba:7f:a4:05:a8:bb:24:88:b6:3f:60:ca:
b6:a2:6a:28:8c:3f:1a:9a:ae:c0:16:ea:c0:ab:52:
6d:2f:f2:86:11:32:d9:8a:d6:0e:c0:aa:d5:0e:9d:
5c:b5:11:5f:72:f5:4d:84:80:e2:5d:4f:c3:5f:e7:
a1:67:de:73:a5:d3:0b:be:f1:8b:24:e5:eb:dc:b1:
63:f3:b0:45:aa:e6:e8:3f:e6:24:1d:00:57:33:50:
28:e5:02:76:d3:e3:0a:8c:ec:06:dc:71:b1:38:a6:
3d:d4:7e:8f:26:bd:3a:a8:95:b0:df:88:71:8b:8a:
fe:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F5:C7:02:1D:59:06:B8:B5:1B:40:15:91:A1:53:F7:0E:7E:9C:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5/d16e6f67-b483-36a3-82f1-7c774d2bca7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5/da5c184e-0f46-42cb-a77d-3f3d837657a5.crl
X509v3 Authority Key Identifier:
keyid:D2:81:12:89:FB:FA:14:2F:97:56:72:9D:7F:1F:02:AE:0F:29:29:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:f340:101::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:47:0a:1b:7f:d7:68:dc:b4:a3:5a:25:8c:99:42:c0:1a:9d:
39:71:f4:19:f8:b3:7f:3c:dc:e4:47:e0:a6:68:86:c9:f0:aa:
56:37:34:d6:29:1c:e5:f8:79:38:7b:24:42:00:fc:2d:00:a9:
ab:9a:5a:80:c8:0c:9f:a0:f3:b8:da:3b:bb:9b:5f:fa:49:43:
80:74:b2:6a:7a:03:02:9d:ad:36:4b:da:58:30:09:09:19:66:
02:3b:98:34:d0:99:1a:66:b0:b2:3e:06:b0:a8:b6:f9:5c:27:
4f:8d:4a:3c:02:78:95:70:51:aa:06:07:21:91:32:c3:02:d0:
4e:2f:d8:fb:8b:ed:20:5c:96:73:87:84:80:ec:f3:9c:45:3e:
13:42:10:f0:84:39:64:1d:ae:5f:88:c4:1c:06:79:65:d3:23:
5a:bd:da:3b:66:1b:eb:d7:82:60:c5:f4:d3:ce:c1:3b:8a:bc:
ce:78:01:c5:8c:bc:75:60:8d:57:6b:e0:8d:60:d1:9f:4d:d2:
71:55:ab:7e:2b:5b:dc:6e:b8:f2:b4:0b:c6:8d:55:84:3e:f0:
c2:cd:48:1a:84:37:e2:fd:9b:75:cd:8e:45:7b:43:2a:d7:38:
c4:7d:f0:30:51:e2:e4:83:60:3e:06:18:e1:ca:23:bc:27:90:
7b:27:6a:3a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkwYoIstf7JFB01U4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGE1YzE4NGUtMGY0Ni00MmNiLWE3N2QtM2YzZDgzNzY1
N2E1MB4XDTI1MDMxNDIwNTEwNloXDTI1MDYxMjIwNTEwNlowLzEtMCsGA1UEAxMk
YzYzODM3YTQtMGU0OC00ZjkwLTllMmEtMjRlODNiYjEyZjg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaXJytIY9oL1wztvGcVIKbwQ8EddR4Qvl7Wt
i6lJn1kx8fwj9StUAShvzBjvbdiqYUpxaZjlUumWo9AsO5uXKhdVGMDJHnf0BGuj
diLK9AGiERVozccyOsBYC/O5ABxwDILZrS4wc1SdlwLrzfQOqysZ5KXSyOtPOayt
tTDMWO60QtJf3B2I1Fa6f6QFqLskiLY/YMq2omoojD8amq7AFurAq1JtL/KGETLZ
itYOwKrVDp1ctRFfcvVNhIDiXU/DX+ehZ95zpdMLvvGLJOXr3LFj87BFquboP+Yk
HQBXM1Ao5QJ20+MKjOwG3HGxOKY91H6PJr06qJWw34hxi4r+qwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFN31xwIdWQa4tRtAFZGhU/cOfpw7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kYTVj
MTg0ZS0wZjQ2LTQyY2ItYTc3ZC0zZjNkODM3NjU3YTUvZDE2ZTZmNjctYjQ4My0z
NmEzLTgyZjEtN2M3NzRkMmJjYTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZGE1YzE4NGUtMGY0Ni00MmNiLWE3
N2QtM2YzZDgzNzY1N2E1L2RhNWMxODRlLTBmNDYtNDJjYi1hNzdkLTNmM2Q4Mzc2
NTdhNS5jcmwwHwYDVR0jBBgwFoAU0oESifv6FC+XVnKdfx8Crg8pKY0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9kYTVjMTg0ZS0wZjQ2LTQyY2ItYTc3ZC0zZjNk
ODM3NjU3YTUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTzQAEB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHJHCht/12jctKNaJYyZQsAanTlx9Bn4s3883ORH4KZohsnwqlY3
NNYpHOX4eTh7JEIA/C0AqauaWoDIDJ+g87jaO7ubX/pJQ4B0smp6AwKdrTZL2lgw
CQkZZgI7mDTQmRpmsLI+BrCotvlcJ0+NSjwCeJVwUaoGByGRMsMC0E4v2PuL7SBc
lnOHhIDs85xFPhNCEPCEOWQdrl+IxBwGeWXTI1q92jtmG+vXgmDF9NPOwTuKvM54
AcWMvHVgjVdr4I1g0Z9N0nFVq34rW9xuuPK0C8aNVYQ+8MLNSBqEN+L9m3XNjkV7
QyrXOMR98DBR4uSDYD4GGOHKI7wnkHsnajo=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:15:04 2025 by rpki-client