Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/42001a2b-1b4b-4d19-8600-8744ad8103d8/6472db78-1afa-3cae-9a2b-32f414bfc88e.roa
File: 6472db78-1afa-3cae-9a2b-32f414bfc88e.roa (raw, json)
Hash identifier: s0AJ8VCAlvqG+a385puMFImddqCYi2o7rEiy+dcBYo8=
Subject key identifier: 76:21:63:3B:3D:13:7F:3D:27:F4:91:7F:57:C3:90:32:57:0E:BF:AC
Certificate issuer: /CN=42001a2b-1b4b-4d19-8600-8744ad8103d8
Certificate serial: 010D0C9F432858488AE090F1B5DC96D6F1C04280
Authority key identifier: AB:52:0D:F3:47:04:A1:92:CA:DA:8A:09:13:88:46:AB:B0:76:89:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/42001a2b-1b4b-4d19-8600-8744ad8103d8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/42001a2b-1b4b-4d19-8600-8744ad8103d8/6472db78-1afa-3cae-9a2b-32f414bfc88e.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 0
IP address blocks: 2001:504:96::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:90:f1:b5:dc:96:d6:f1:c0:42:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42001a2b-1b4b-4d19-8600-8744ad8103d8
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=182656f1-7e2c-4dd7-a95d-d9887c383977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f0:a6:b6:b3:c3:91:4e:c1:88:e2:4c:dd:8f:
1d:b6:49:7d:c1:fd:20:a6:81:29:f5:ad:73:5f:f5:
b4:ce:e8:50:54:0f:04:79:47:6a:92:01:37:63:95:
29:8e:48:08:7e:c7:a8:20:42:ac:06:61:1d:29:e0:
24:07:50:cf:01:4a:12:66:70:19:fc:4e:91:42:04:
37:a4:71:af:ba:f1:cd:aa:d3:a5:2c:85:78:f4:e7:
ae:61:6f:f5:9c:23:ed:ad:94:a0:e8:46:27:ca:d6:
87:c7:45:ad:aa:f1:a7:43:e9:57:7c:3a:ef:9c:22:
4f:ff:79:bc:57:4b:f8:cb:0c:51:66:89:16:bf:b3:
b6:21:05:ef:86:20:2d:f6:ac:b0:aa:a4:92:3b:89:
98:d1:f9:aa:c7:4a:a7:db:db:dc:23:2b:57:a1:ca:
d2:72:ce:e8:f1:88:ad:03:68:0b:62:bb:4f:c7:3f:
a2:83:88:aa:f9:0a:5a:2b:49:d6:70:b3:aa:9b:87:
41:72:f0:66:2c:c0:15:86:a0:a9:d8:1d:34:e5:21:
9e:87:15:26:71:f9:1b:01:19:fc:be:f2:bd:8e:0e:
67:c6:d3:40:92:a2:27:ee:fa:c7:04:00:23:82:32:
21:1b:ed:68:b1:57:b8:f9:93:96:23:53:56:17:94:
7d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:21:63:3B:3D:13:7F:3D:27:F4:91:7F:57:C3:90:32:57:0E:BF:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/42001a2b-1b4b-4d19-8600-8744ad8103d8/6472db78-1afa-3cae-9a2b-32f414bfc88e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/42001a2b-1b4b-4d19-8600-8744ad8103d8/42001a2b-1b4b-4d19-8600-8744ad8103d8.crl
X509v3 Authority Key Identifier:
keyid:AB:52:0D:F3:47:04:A1:92:CA:DA:8A:09:13:88:46:AB:B0:76:89:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/42001a2b-1b4b-4d19-8600-8744ad8103d8.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:504:96::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c2:b3:a7:9f:24:cf:9c:fa:c4:34:95:2b:93:01:36:b0:01:ee:
c9:ad:9e:ae:b7:5f:fe:db:6c:27:c4:64:f6:7d:35:1b:c6:6b:
03:01:8b:5f:58:29:74:ec:b9:06:9a:e3:01:fd:34:00:8c:d0:
90:91:ae:ec:fb:45:81:45:6e:09:4b:b3:d4:97:f8:c1:5a:32:
32:28:2d:14:fd:79:dd:3b:2e:5d:ee:b5:0e:58:49:53:b8:c0:
58:eb:3d:dd:76:67:52:7b:b7:96:4d:7e:77:05:31:85:5e:79:
a9:6b:5f:73:34:4f:bb:7f:3a:af:f1:d4:67:b2:c2:fe:b7:8e:
d2:14:13:e0:9c:42:05:81:26:30:27:22:99:37:0b:54:75:83:
48:34:55:06:ae:70:d5:5d:91:23:56:53:d4:b1:b5:33:41:34:
8a:b2:4e:50:78:c1:c7:b2:0f:99:22:65:2b:4b:11:85:4a:1c:
5e:05:1e:a1:cc:5b:41:2c:02:06:1b:58:28:26:d9:7b:ca:3d:
a3:ea:71:fb:7a:ae:5f:e0:b5:aa:e6:60:34:10:56:73:61:a7:
d1:58:c4:e5:91:87:9c:cb:1c:54:96:f2:ab:9d:fe:9f:61:3a:
2d:da:59:ab:10:35:68:c2:00:db:0c:91:26:28:e1:f0:0e:6f:
db:0c:d9:9d
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiK4JDxtdyW1vHAQoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDIwMDFhMmItMWI0Yi00ZDE5LTg2MDAtODc0NGFkODEw
M2Q4MB4XDTI1MDExNDE0MDA1MVoXDTI1MDQxNDEzMDA1MVowLzEtMCsGA1UEAxMk
MTgyNjU2ZjEtN2UyYy00ZGQ3LWE5NWQtZDk4ODdjMzgzOTc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7vCmtrPDkU7BiOJM3Y8dtkl9wf0gpoEp9a1z
X/W0zuhQVA8EeUdqkgE3Y5UpjkgIfseoIEKsBmEdKeAkB1DPAUoSZnAZ/E6RQgQ3
pHGvuvHNqtOlLIV49OeuYW/1nCPtrZSg6EYnytaHx0WtqvGnQ+lXfDrvnCJP/3m8
V0v4ywxRZokWv7O2IQXvhiAt9qywqqSSO4mY0fmqx0qn29vcIytXocrScs7o8Yit
A2gLYrtPxz+ig4iq+QpaK0nWcLOqm4dBcvBmLMAVhqCp2B005SGehxUmcfkbARn8
vvK9jg5nxtNAkqIn7vrHBAAjgjIhG+1osVe4+ZOWI1NWF5R9bwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHYhYzs9E389J/SRf1fDkDJXDr+sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80MjAw
MWEyYi0xYjRiLTRkMTktODYwMC04NzQ0YWQ4MTAzZDgvNjQ3MmRiNzgtMWFmYS0z
Y2FlLTlhMmItMzJmNDE0YmZjODhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNDIwMDFhMmItMWI0Yi00ZDE5LTg2
MDAtODc0NGFkODEwM2Q4LzQyMDAxYTJiLTFiNGItNGQxOS04NjAwLTg3NDRhZDgx
MDNkOC5jcmwwHwYDVR0jBBgwFoAUq1IN80cEoZLK2ooJE4hGq7B2iY0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy80MjAwMWEyYi0xYjRiLTRkMTktODYwMC04NzQ0
YWQ4MTAzZDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBACW
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAMKzp58kz5z6xDSVK5MBNrAB7smtnq63X/7bbCfEZPZ9NRvGawMB
i19YKXTsuQaa4wH9NACM0JCRruz7RYFFbglLs9SX+MFaMjIoLRT9ed07Ll3utQ5Y
SVO4wFjrPd12Z1J7t5ZNfncFMYVeealrX3M0T7t/Oq/x1Geywv63jtIUE+CcQgWB
JjAnIpk3C1R1g0g0VQaucNVdkSNWU9SxtTNBNIqyTlB4wceyD5kiZStLEYVKHF4F
HqHMW0EsAgYbWCgm2XvKPaPqcft6rl/gtarmYDQQVnNhp9FYxOWRh5zLHFSW8qud
/p9hOi3aWasQNWjCANsMkSYo4fAOb9sM2Z0=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:17:51 2025 by rpki-client