Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/00ed7e32-352c-3c1c-8238-9165a78eb68c.roa
File: 00ed7e32-352c-3c1c-8238-9165a78eb68c.roa (raw, json)
Hash identifier: C2I4EBZI1vvbjEszFUXKk0ITA1Hh7OB+lyvM/WL6cjE=
Subject key identifier: 3A:2B:CF:97:45:41:DE:F2:5F:BB:C5:DE:65:7D:8C:8E:99:2F:EC:0F
Certificate issuer: /CN=1ae9796a-5f3d-4f47-b117-42360a213e37
Certificate serial: 010D0C9F432858490CB16F90EF7C8034A30FB800
Authority key identifier: 4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/00ed7e32-352c-3c1c-8238-9165a78eb68c.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 1004
IP address blocks: 2602:fba3:402::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:6f:90:ef:7c:80:34:a3:0f:b8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ae9796a-5f3d-4f47-b117-42360a213e37
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=2187aa02-654c-46f0-9c29-42baf9f24956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bf:1f:3d:a7:6c:2c:d6:ba:d3:f6:63:9d:45:
6d:61:78:87:1b:39:ef:86:cf:0e:69:26:8b:44:11:
44:66:18:c7:1f:eb:ba:c7:e4:cd:6a:70:6b:ea:8c:
e0:83:2d:05:49:cc:af:05:ee:dc:0a:67:d4:cd:32:
11:42:81:03:9d:26:1c:12:dc:f7:48:3d:06:a6:8f:
b5:89:af:2a:db:1d:41:f0:c9:7a:78:6a:b2:86:14:
10:67:70:0c:f6:ba:c3:6e:aa:95:5b:25:04:59:40:
0d:50:cc:cc:c8:39:e4:a0:93:34:68:fd:d6:4c:19:
88:8a:b6:8f:d6:20:41:85:4f:5e:81:d1:01:2b:e9:
7a:dd:80:da:f3:b6:93:dd:9d:8c:80:89:2f:9d:d4:
bf:9c:cc:3e:24:31:54:4a:0b:db:f6:9e:16:be:58:
f3:a5:0a:2a:6e:57:7e:60:12:17:45:0b:e3:12:fe:
17:52:73:55:38:85:6f:e3:72:7e:24:2a:e2:24:70:
91:1b:1a:1a:c4:2b:5c:77:0f:7c:33:59:28:b1:1a:
65:0a:64:75:91:ea:c6:b2:c3:00:90:06:81:46:15:
ec:88:b0:bf:93:8e:ab:80:eb:01:a1:e7:a1:f4:03:
16:c6:3e:13:1f:00:62:39:20:64:a7:9c:63:47:a7:
6b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:2B:CF:97:45:41:DE:F2:5F:BB:C5:DE:65:7D:8C:8E:99:2F:EC:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/00ed7e32-352c-3c1c-8238-9165a78eb68c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl
X509v3 Authority Key Identifier:
keyid:4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fba3:402::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:2b:77:d3:35:12:e8:dc:07:02:8f:1f:0c:81:31:a1:54:6b:
dc:82:0b:a3:7c:58:46:8f:d1:be:1f:e8:77:d1:01:fa:aa:41:
74:b8:72:79:b6:90:73:7c:b7:87:ab:2d:81:f0:a8:01:38:85:
20:cb:78:51:36:53:03:e3:a3:7b:e6:43:ca:61:b2:28:20:8b:
28:b0:a9:a5:26:56:76:13:3a:40:8e:73:38:c7:bb:f8:ec:bc:
98:38:0a:dd:8e:64:31:98:7f:63:70:b7:32:e1:ef:1b:26:72:
91:d5:ef:b5:70:c9:2d:f3:e0:90:80:d6:13:01:b3:8b:33:1c:
bd:94:c0:86:0a:53:e4:60:fd:e9:f1:a8:c5:ad:4e:a2:35:37:
e1:22:b7:db:3c:fc:b3:5d:23:15:9e:44:0f:fc:cb:ad:7a:fc:
d8:b4:10:a2:45:bb:1b:83:f3:3c:e4:a9:e7:36:b4:d6:81:7b:
25:ba:21:10:5d:4d:62:32:01:72:fd:42:f2:d1:f5:d2:36:dc:
64:22:28:77:2b:f9:cf:f4:c5:7b:29:7d:85:dc:4b:b8:88:b5:
d1:e5:3c:76:77:ad:03:fe:23:b9:b1:ae:0a:ed:7d:92:6f:58:
67:fe:dd:50:44:94:00:d6:f6:0f:fb:e8:05:0a:a7:4a:6b:ec:
82:ca:35:55
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkMsW+Q73yANKMPuAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWFlOTc5NmEtNWYzZC00ZjQ3LWIxMTctNDIzNjBhMjEz
ZTM3MB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk
MjE4N2FhMDItNjU0Yy00NmYwLTljMjktNDJiYWY5ZjI0OTU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAor8fPadsLNa60/ZjnUVtYXiHGznvhs8OaSaL
RBFEZhjHH+u6x+TNanBr6ozggy0FScyvBe7cCmfUzTIRQoEDnSYcEtz3SD0Gpo+1
ia8q2x1B8Ml6eGqyhhQQZ3AM9rrDbqqVWyUEWUANUMzMyDnkoJM0aP3WTBmIiraP
1iBBhU9egdEBK+l63YDa87aT3Z2MgIkvndS/nMw+JDFUSgvb9p4WvljzpQoqbld+
YBIXRQvjEv4XUnNVOIVv43J+JCriJHCRGxoaxCtcdw98M1kosRplCmR1kerGssMA
kAaBRhXsiLC/k46rgOsBoeeh9AMWxj4THwBiOSBkp5xjR6drzwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDorz5dFQd7yX7vF3mV9jI6ZL+wPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xYWU5
Nzk2YS01ZjNkLTRmNDctYjExNy00MjM2MGEyMTNlMzcvMDBlZDdlMzItMzUyYy0z
YzFjLTgyMzgtOTE2NWE3OGViNjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWFlOTc5NmEtNWYzZC00ZjQ3LWIx
MTctNDIzNjBhMjEzZTM3LzFhZTk3OTZhLTVmM2QtNGY0Ny1iMTE3LTQyMzYwYTIx
M2UzNy5jcmwwHwYDVR0jBBgwFoAUTss6/l8FHqwG3VnOR6besyl/QdwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8xYWU5Nzk2YS01ZjNkLTRmNDctYjExNy00MjM2
MGEyMTNlMzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL7owQC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABArd9M1EujcBwKPHwyBMaFUa9yCC6N8WEaP0b4f6HfRAfqqQXS4
cnm2kHN8t4erLYHwqAE4hSDLeFE2UwPjo3vmQ8phsiggiyiwqaUmVnYTOkCOczjH
u/jsvJg4Ct2OZDGYf2NwtzLh7xsmcpHV77VwyS3z4JCA1hMBs4szHL2UwIYKU+Rg
/enxqMWtTqI1N+Eit9s8/LNdIxWeRA/8y616/Ni0EKJFuxuD8zzkqec2tNaBeyW6
IRBdTWIyAXL9QvLR9dI23GQiKHcr+c/0xXspfYXcS7iItdHlPHZ3rQP+I7mxrgrt
fZJvWGf+3VBElADW9g/76AUKp0pr7ILKNVU=
-----END CERTIFICATE-----
Generated at Wed Apr 9 01:07:51 2025 by rpki-client