Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/ae0f2957-b0a8-3b21-88a3-5e9c8a505e8a.roa
File: ae0f2957-b0a8-3b21-88a3-5e9c8a505e8a.roa (raw, json)
Hash identifier: CKf8Q/GrKcVG79YZQRd7K3dLhO3nY0k+C+VDASZf7Rk=
Subject key identifier: 1C:31:6C:2D:1B:8A:F3:2C:D3:D1:C0:BD:D4:66:3D:9B:91:B8:E8:5D
Certificate issuer: /CN=4eab7524-ab79-46c8-aea6-96b100eb245d
Certificate serial: 010D0C9F4328584898D60564325B4B68C015FA80
Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/ae0f2957-b0a8-3b21-88a3-5e9c8a505e8a.roa
Signing time: Sun 19 Jan 2025 14:00:52 +0000
ROA not before: Sun 19 Jan 2025 14:00:52 +0000
ROA not after: Sat 19 Apr 2025 13:00:52 +0000
asID: 400097
IP address blocks: 2606:3d40:100::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:98:d6:05:64:32:5b:4b:68:c0:15:fa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d
Validity
Not Before: Jan 19 14:00:52 2025 GMT
Not After : Apr 19 13:00:52 2025 GMT
Subject: CN=d3e89fd1-a0b9-487d-a1ea-a9368b343aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f0:bd:87:6e:f2:1e:89:74:8f:15:5d:c8:3d:
5a:54:98:f9:e1:06:78:c9:1c:7e:73:e7:b4:fc:33:
f0:f8:ed:70:41:34:7b:dc:0a:05:95:2e:43:3d:eb:
b4:3e:2f:9c:9f:16:4b:d6:13:b4:7f:ec:0f:90:8d:
f8:40:08:ea:65:55:18:20:dc:67:3a:72:1e:07:e8:
57:05:f9:a1:80:6a:89:e7:4a:3d:40:ae:f9:40:79:
22:9b:04:5c:f9:21:ea:00:50:e5:41:a0:f3:54:0b:
63:9e:f5:26:b2:4c:cc:ec:6d:24:d0:b6:8d:68:7b:
44:1d:ec:72:65:56:b1:1c:f5:36:c2:99:1b:90:39:
45:04:af:78:a7:cc:98:70:0f:15:4f:fa:56:b4:68:
0c:c2:ca:bf:df:2b:0e:e4:0e:65:58:0f:04:80:a5:
e2:c4:e8:6d:02:45:c7:0a:b2:1d:e9:d4:b0:bb:72:
5d:dc:fe:0d:34:c3:b7:35:34:a7:c3:ca:1b:df:52:
62:cb:1d:3b:1b:fb:9a:7c:55:74:67:e4:27:72:ee:
6a:c2:79:bc:19:a6:69:a3:88:03:05:46:df:2e:67:
4d:3a:65:5d:8f:64:fa:b7:38:a6:ae:27:fc:55:b1:
bb:12:93:93:98:69:32:df:d9:6f:db:ec:fc:f4:f3:
49:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:31:6C:2D:1B:8A:F3:2C:D3:D1:C0:BD:D4:66:3D:9B:91:B8:E8:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/ae0f2957-b0a8-3b21-88a3-5e9c8a505e8a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl
X509v3 Authority Key Identifier:
keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:3d40:100::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:ba:cf:2d:4d:4f:49:b1:33:0d:9a:40:68:6a:37:74:78:26:
ae:72:05:74:6b:3a:ee:f3:65:93:f9:6e:b4:28:9c:b6:f7:d9:
e7:bd:1f:6f:2e:ab:89:cf:9f:d1:de:07:4e:43:42:16:16:4f:
11:e4:95:8d:bb:6e:b2:4d:47:77:a6:e5:c8:d7:b8:22:f2:ec:
af:ca:2b:44:e7:75:4d:0f:47:51:b1:1a:68:61:88:3b:7f:e3:
d3:44:76:fc:ca:da:32:65:a2:9b:05:e4:e7:c3:5b:4a:e1:75:
98:c9:78:a8:52:70:d7:a8:3e:9a:32:36:bd:14:2b:86:d7:86:
1f:9a:60:86:c7:62:5b:87:8f:e7:88:98:d6:92:25:36:b8:81:
c6:c0:9d:73:49:c4:0b:5a:1d:a5:8c:8f:81:98:51:9f:a0:6e:
aa:fb:47:3b:1d:e3:c1:00:f4:de:43:ce:bf:b7:9a:6c:77:41:
1b:7b:d4:15:ec:ec:36:03:e8:9d:68:89:20:fa:1a:6a:ac:bc:
68:7e:8c:31:7f:47:ae:b8:58:bc:64:e4:f8:a7:ab:3a:19:03:
f5:cf:31:b1:70:54:ff:79:dd:c5:8f:0d:d9:d7:70:0e:f3:9a:
5d:08:15:42:d6:15:3c:29:ca:4b:53:59:6f:4c:2f:1e:bf:e1:
65:98:73:11
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEiY1gVkMltLaMAV+oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGVhYjc1MjQtYWI3OS00NmM4LWFlYTYtOTZiMTAwZWIy
NDVkMB4XDTI1MDExOTE0MDA1MloXDTI1MDQxOTEzMDA1MlowLzEtMCsGA1UEAxMk
ZDNlODlmZDEtYTBiOS00ODdkLWExZWEtYTkzNjhiMzQzYWE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvC9h27yHol0jxVdyD1aVJj54QZ4yRx+c+e0
/DPw+O1wQTR73AoFlS5DPeu0Pi+cnxZL1hO0f+wPkI34QAjqZVUYINxnOnIeB+hX
BfmhgGqJ50o9QK75QHkimwRc+SHqAFDlQaDzVAtjnvUmskzM7G0k0LaNaHtEHexy
ZVaxHPU2wpkbkDlFBK94p8yYcA8VT/pWtGgMwsq/3ysO5A5lWA8EgKXixOhtAkXH
CrId6dSwu3Jd3P4NNMO3NTSnw8ob31Jiyx07G/uafFV0Z+Qncu5qwnm8GaZpo4gD
BUbfLmdNOmVdj2T6tzimrif8VbG7EpOTmGky39lv2+z89PNJAQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFBwxbC0bivMs09HAvdRmPZuRuOhdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFi
NzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIxMDBlYjI0NWQvYWUwZjI5NTctYjBhOC0z
YjIxLTg4YTMtNWU5YzhhNTA1ZThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGVhYjc1MjQtYWI3OS00NmM4LWFl
YTYtOTZiMTAwZWIyNDVkLzRlYWI3NTI0LWFiNzktNDZjOC1hZWE2LTk2YjEwMGVi
MjQ1ZC5jcmwwHwYDVR0jBBgwFoAUAvAXN7tccDjst6Tnox+wrSnQ6+YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFiNzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIx
MDBlYjI0NWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgY9QAEw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAlLrPLU1PSbEzDZpAaGo3dHgmrnIFdGs67vNlk/lutCictvfZ570f
by6ric+f0d4HTkNCFhZPEeSVjbtusk1Hd6blyNe4IvLsr8orROd1TQ9HUbEaaGGI
O3/j00R2/MraMmWimwXk58NbSuF1mMl4qFJw16g+mjI2vRQrhteGH5pghsdiW4eP
54iY1pIlNriBxsCdc0nEC1odpYyPgZhRn6BuqvtHOx3jwQD03kPOv7eabHdBG3vU
FezsNgPonWiJIPoaaqy8aH6MMX9HrrhYvGTk+KerOhkD9c8xsXBU/3ndxY8N2ddw
DvOaXQgVQtYVPCnKS1NZb0wvHr/hZZhzEQ==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:51:58 2025 by rpki-client