Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/873612b2-2503-3467-b4f8-b4c71df87a34.roa
File: 873612b2-2503-3467-b4f8-b4c71df87a34.roa (raw, json)
Hash identifier: 0LLRJVUCsL3vBwMUX818Uzi7ujiZewtdBbNdlMz0DpY=
Subject key identifier: 35:D8:B1:0C:0A:B9:32:BB:1F:E9:D0:7B:21:F1:98:47:3E:4C:D7:C9
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F432858494BADB62CFBD9079F597A7400
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/873612b2-2503-3467-b4f8-b4c71df87a34.roa
Signing time: Mon 24 Mar 2025 15:29:27 +0000
ROA not before: Mon 24 Mar 2025 15:29:27 +0000
ROA not after: Sun 22 Jun 2025 15:29:27 +0000
asID: 30036
IP address blocks: 2604:2d80:a400::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:ad:b6:2c:fb:d9:07:9f:59:7a:74:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Mar 24 15:29:27 2025 GMT
Not After : Jun 22 15:29:27 2025 GMT
Subject: CN=fccf848d-7519-4b31-abd5-fc78b0a3a4be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ff:36:22:44:82:55:66:e8:62:39:ab:0a:bb:71:
3f:54:e6:32:bc:cc:a9:12:c9:35:d5:a5:c6:40:4f:
94:db:f8:74:9e:85:7b:83:e3:5d:67:cc:4a:9f:2b:
b2:e4:f2:9f:63:ac:fe:5c:e1:75:89:5c:72:64:f0:
97:65:8e:4a:66:fa:64:84:a2:a7:9c:7b:76:d0:3d:
b9:5e:c9:eb:34:be:d2:47:22:93:d9:47:b4:8f:c7:
d0:18:f2:82:69:b1:5d:02:d2:b8:21:99:2b:fc:06:
63:9d:ac:59:42:a3:44:81:f8:34:34:3a:16:9b:59:
3c:a5:fa:2b:d5:36:db:5d:93:7e:15:4c:32:b5:2b:
8c:43:2e:a3:08:a1:6d:7c:4c:1c:ab:07:c2:3e:92:
83:d4:6e:22:0f:1a:1d:6e:9d:45:fd:1c:68:d5:10:
d4:9a:fb:0b:2a:a0:95:bd:30:a2:4a:02:8a:7c:f7:
6f:70:8d:4e:fa:57:5a:d8:39:07:58:4e:c0:d6:2f:
7a:69:f7:aa:f3:44:20:17:c0:e8:00:ab:70:7f:9d:
72:1b:8c:cf:d4:e6:12:1b:75:7d:f3:ba:73:34:f8:
6e:22:84:d2:94:bd:3e:e2:00:f7:5b:3c:b0:90:77:
e4:e1:7d:b1:ad:e6:b1:0d:be:29:82:d3:89:38:05:
6f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D8:B1:0C:0A:B9:32:BB:1F:E9:D0:7B:21:F1:98:47:3E:4C:D7:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/873612b2-2503-3467-b4f8-b4c71df87a34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d80:a400::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:66:bb:c9:3d:17:a0:c5:b8:1c:84:3d:96:4b:bf:40:de:ec:
ab:bd:9a:79:2f:34:e4:5b:4b:dc:4a:5f:33:9b:e6:6c:84:94:
66:f8:24:43:4f:d4:ea:35:1f:ed:22:88:c7:33:a7:17:f3:4f:
5d:43:17:18:81:d2:bc:81:a5:9f:f4:7a:2f:f6:f9:d8:45:a3:
1a:1a:d3:09:38:b8:c9:4d:53:2d:53:31:4e:ee:23:c0:4d:19:
0c:73:50:9c:00:47:fc:3d:40:fe:9a:60:0f:5f:fe:0b:3d:ea:
b1:54:84:1e:18:73:17:5d:fb:d8:26:77:ea:61:67:9a:4f:df:
b7:23:6f:c8:74:4b:11:64:b1:95:e3:ae:58:d6:a8:a1:ef:05:
ec:3b:01:19:03:3e:36:ae:ab:30:6e:3d:c4:26:46:ce:d1:13:
78:35:37:cc:99:21:6e:6a:1b:4b:e8:5e:1c:3d:57:79:88:e8:
d9:cc:d1:49:33:62:7d:c8:7b:af:83:ab:47:11:b6:fa:ce:20:
37:85:b5:70:be:f5:d7:02:9e:c8:a8:ce:23:52:74:bc:cd:2a:
40:9f:5e:27:47:98:bd:fc:fb:a4:7d:0c:d4:9d:3a:f2:f1:a3:
76:aa:25:0e:0b:08:bb:c3:c5:19:7b:84:35:3a:b8:b6:51:04:
ed:a9:83:7e
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWElLrbYs+9kHn1l6dAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDMyNDE1MjkyN1oXDTI1MDYyMjE1MjkyN1owLzEtMCsGA1UEAxMk
ZmNjZjg0OGQtNzUxOS00YjMxLWFiZDUtZmM3OGIwYTNhNGJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/zYiRIJVZuhiOasKu3E/VOYyvMypEsk11aXG
QE+U2/h0noV7g+NdZ8xKnyuy5PKfY6z+XOF1iVxyZPCXZY5KZvpkhKKnnHt20D25
XsnrNL7SRyKT2Ue0j8fQGPKCabFdAtK4IZkr/AZjnaxZQqNEgfg0NDoWm1k8pfor
1TbbXZN+FUwytSuMQy6jCKFtfEwcqwfCPpKD1G4iDxodbp1F/Rxo1RDUmvsLKqCV
vTCiSgKKfPdvcI1O+lda2DkHWE7A1i96afeq80QgF8DoAKtwf51yG4zP1OYSG3V9
87pzNPhuIoTSlL0+4gD3WzywkHfk4X2xreaxDb4pgtOJOAVv/QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFDXYsQwKuTK7H+nQeyHxmEc+TNfJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODczNjEyYjItMjUwMy0z
NDY3LWI0ZjgtYjRjNzFkZjg3YTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQtgKQw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAMma7yT0XoMW4HIQ9lku/QN7sq72aeS805FtL3EpfM5vmbISUZvgk
Q0/U6jUf7SKIxzOnF/NPXUMXGIHSvIGln/R6L/b52EWjGhrTCTi4yU1TLVMxTu4j
wE0ZDHNQnABH/D1A/ppgD1/+Cz3qsVSEHhhzF1372CZ36mFnmk/ftyNvyHRLEWSx
leOuWNaooe8F7DsBGQM+Nq6rMG49xCZGztETeDU3zJkhbmobS+heHD1XeYjo2czR
STNifch7r4OrRxG2+s4gN4W1cL711wKeyKjOI1J0vM0qQJ9eJ0eYvfz7pH0M1J06
8vGjdqolDgsIu8PFGXuENTq4tlEE7amDfg==
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:28:06 2025 by rpki-client