Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a228e266-954a-3bcb-9a5b-521e8e8bb852.roa
File: a228e266-954a-3bcb-9a5b-521e8e8bb852.roa (raw, json)
Hash identifier: 5pwzAxO8RssKRaji0jHneYTlKwR8pBxS8FURue1SrAc=
Subject key identifier: 8C:98:49:1B:25:55:65:33:05:D9:CF:F2:E6:31:90:B6:B4:AF:0D:8A
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F432858494BADBB37B98FFDBDCAE16680
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a228e266-954a-3bcb-9a5b-521e8e8bb852.roa
Signing time: Mon 24 Mar 2025 15:29:30 +0000
ROA not before: Mon 24 Mar 2025 15:29:30 +0000
ROA not after: Sun 22 Jun 2025 15:29:30 +0000
asID: 30036
IP address blocks: 2604:2d80:ac00::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:ad:bb:37:b9:8f:fd:bd:ca:e1:66:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Mar 24 15:29:30 2025 GMT
Not After : Jun 22 15:29:30 2025 GMT
Subject: CN=ff3f1ca8-8869-4992-b430-b40491204732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a3:95:8c:25:3a:d3:ad:ef:a1:51:c8:72:4a:
ce:3a:a3:da:bc:6f:8c:36:12:d5:20:05:b3:98:0c:
78:5c:74:3a:93:01:f8:11:8e:d4:17:d4:bd:85:32:
9a:ae:1d:a4:d9:59:ef:66:34:52:83:07:73:1c:02:
84:ca:e9:57:35:b5:33:fa:c6:02:9f:bd:1c:f4:1c:
89:b3:9b:6a:eb:86:0e:c3:3d:04:10:e7:5c:34:ec:
cf:7e:57:ab:91:57:75:ae:d6:44:a6:b0:9c:53:35:
e3:fa:14:c1:39:75:54:c3:75:bb:26:61:f1:ba:5f:
8f:00:b0:6a:a1:91:c7:59:ef:75:93:31:4e:94:d8:
01:90:c2:43:3c:ba:da:b0:f7:81:fc:73:6a:25:2e:
10:11:c4:3b:f1:6b:d1:53:cd:88:a6:15:f5:f4:72:
2d:87:93:ee:7d:2b:d6:5c:cb:a9:33:67:a0:8c:60:
78:db:d2:6a:e7:c0:b8:6c:04:f5:86:12:99:6e:da:
d5:97:0b:35:92:9d:96:31:9d:4a:42:0b:e1:ab:0f:
7b:b4:c1:4e:5c:0f:22:3b:4c:d7:d7:42:a5:f9:e1:
80:4d:bf:fa:52:72:05:1b:28:af:6d:07:9f:9b:1b:
d9:b6:47:23:4b:c9:b9:4c:be:4c:91:f9:86:89:19:
30:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:98:49:1B:25:55:65:33:05:D9:CF:F2:E6:31:90:B6:B4:AF:0D:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a228e266-954a-3bcb-9a5b-521e8e8bb852.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d80:ac00::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:d9:13:d7:e9:c1:e8:18:3d:6a:f9:64:f7:73:b8:d5:99:a7:
1a:0d:c6:4a:a6:11:21:48:b6:96:b1:5f:0d:21:06:7e:3e:e5:
f6:a0:2e:91:fd:8c:b7:82:46:5f:de:a9:35:35:45:7c:d0:71:
63:ed:99:fa:da:01:a1:b7:c7:cb:58:42:09:01:19:34:74:0f:
bb:a5:6b:41:ab:cc:22:3f:19:8e:23:ed:e2:36:2d:2d:cd:c1:
7e:5c:b1:c1:2e:a7:b5:57:32:4e:d3:13:c8:40:23:77:ec:18:
fb:5e:8e:5e:9b:33:04:b2:3b:4e:5f:08:63:a3:f5:5f:cd:f7:
66:23:33:7a:c2:7b:a8:97:93:bd:0b:ad:cb:16:cc:32:c9:4c:
99:0d:79:9a:b2:ed:51:7e:2e:b0:94:f9:2e:63:9a:a2:03:04:
3c:af:3f:15:58:4d:11:06:7c:90:b1:71:ce:aa:34:17:a6:70:
dc:47:ce:ab:10:09:c6:04:91:63:19:d1:23:cc:52:5b:d0:cc:
48:0e:b4:de:fe:7f:57:e7:42:0f:a4:46:ec:6b:5b:60:2c:13:
3e:7c:67:33:cc:6f:1d:a4:86:e5:89:ee:42:a9:81:84:6d:9d:
19:f5:4a:66:d7:cf:60:32:38:78:a4:3d:2a:ba:64:25:81:68:
a4:c4:74:a2
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWElLrbs3uY/9vcrhZoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDMyNDE1MjkzMFoXDTI1MDYyMjE1MjkzMFowLzEtMCsGA1UEAxMk
ZmYzZjFjYTgtODg2OS00OTkyLWI0MzAtYjQwNDkxMjA0NzMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKOVjCU6063voVHIckrOOqPavG+MNhLVIAWz
mAx4XHQ6kwH4EY7UF9S9hTKarh2k2VnvZjRSgwdzHAKEyulXNbUz+sYCn70c9ByJ
s5tq64YOwz0EEOdcNOzPflerkVd1rtZEprCcUzXj+hTBOXVUw3W7JmHxul+PALBq
oZHHWe91kzFOlNgBkMJDPLrasPeB/HNqJS4QEcQ78WvRU82IphX19HIth5PufSvW
XMupM2egjGB429Jq58C4bAT1hhKZbtrVlws1kp2WMZ1KQgvhqw97tMFOXA8iO0zX
10Kl+eGATb/6UnIFGyivbQefmxvZtkcjS8m5TL5MkfmGiRkwlQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFIyYSRslVWUzBdnP8uYxkLa0rw2KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTIyOGUyNjYtOTU0YS0z
YmNiLTlhNWItNTIxZThlOGJiODUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQtgKww
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAINkT1+nB6Bg9avlk93O41ZmnGg3GSqYRIUi2lrFfDSEGfj7l9qAu
kf2Mt4JGX96pNTVFfNBxY+2Z+toBobfHy1hCCQEZNHQPu6VrQavMIj8ZjiPt4jYt
Lc3BflyxwS6ntVcyTtMTyEAjd+wY+16OXpszBLI7Tl8IY6P1X833ZiMzesJ7qJeT
vQutyxbMMslMmQ15mrLtUX4usJT5LmOaogMEPK8/FVhNEQZ8kLFxzqo0F6Zw3EfO
qxAJxgSRYxnRI8xSW9DMSA603v5/V+dCD6RG7GtbYCwTPnxnM8xvHaSG5YnuQqmB
hG2dGfVKZtfPYDI4eKQ9KrpkJYFopMR0og==
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:57:18 2025 by rpki-client