Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4302d911-1568-36aa-993a-f2a6938ac8f1.roa
File: 4302d911-1568-36aa-993a-f2a6938ac8f1.roa (raw, json)
Hash identifier: IZW3nGRAwIY2J+kDL8vvQ5hiesaOC7XJ52sOoSEE42g=
Subject key identifier: 8F:82:8B:40:A1:92:07:97:E1:E8:9C:38:E9:38:36:C0:20:D2:1D:D5
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE66A8A1BCD82C1A16AC580
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4302d911-1568-36aa-993a-f2a6938ac8f1.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 855
IP address blocks: 2001:4c0:2000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e6:6a:8a:1b:cd:82:c1:a1:6a:c5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=6f637b7e-e68d-46c8-8b1b-1ece60810ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4c:b4:7c:89:22:dc:99:5f:ae:15:60:f9:1a:
7d:fe:3a:36:90:28:c4:7f:f2:3b:7d:9d:42:17:a1:
4e:90:c4:ce:45:0b:35:68:c7:65:6c:95:61:48:9a:
ef:3c:74:e4:b8:ac:35:af:ee:b9:73:5d:d1:2e:02:
cf:14:16:23:2d:a7:6b:3e:1d:02:af:89:dc:13:84:
27:c7:1a:ee:a6:89:16:bd:d0:8e:bb:66:0c:87:4c:
af:bf:b4:14:ba:70:e1:be:26:67:e9:33:bc:ab:45:
e3:fc:58:07:05:4e:b0:f6:00:0a:d8:37:d9:3e:d5:
bb:1f:3c:d4:ab:dc:5f:28:82:93:c8:70:93:41:ea:
7f:2f:39:1a:54:91:d4:1b:96:28:d0:1c:6f:7f:4e:
52:da:05:1a:98:03:aa:5c:96:b0:f2:71:1b:56:27:
58:75:c3:54:ea:81:03:8b:89:a5:b0:59:84:cb:40:
02:cd:8f:c5:23:57:59:14:77:f2:77:e3:e8:a5:7e:
7c:ce:55:e6:b2:34:11:35:1b:0c:3d:b9:94:fe:2a:
f2:01:fc:fe:e5:36:61:47:bc:12:ae:53:28:44:67:
dd:44:73:c4:d9:55:b3:89:db:b2:f1:b4:86:a5:0e:
b6:66:93:e3:21:2b:a1:82:98:fb:70:e4:f0:f4:f6:
54:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:82:8B:40:A1:92:07:97:E1:E8:9C:38:E9:38:36:C0:20:D2:1D:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4302d911-1568-36aa-993a-f2a6938ac8f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4c0:2000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:7d:c5:6d:45:4b:39:a7:05:cd:48:34:53:32:08:32:56:26:
e8:a1:5d:26:77:50:5a:2c:32:4d:5a:64:19:39:b6:75:19:ed:
cd:cb:b0:83:f8:d8:6c:78:9f:52:64:73:9b:1c:7f:17:c2:ac:
87:f6:c5:f2:2c:06:fd:93:3b:ef:32:40:fb:b2:c9:32:24:9e:
44:43:7f:38:a6:be:8c:9d:9f:d6:d3:23:ee:7f:ea:25:c3:70:
bd:4c:e2:ce:23:58:90:7f:bc:96:92:ac:18:18:0d:c3:74:27:
68:c0:bf:99:33:2d:d0:f7:c3:e1:77:31:57:b1:66:dd:a5:92:
58:6d:83:13:1f:b5:44:f6:47:ca:07:3b:8b:79:70:30:96:25:
31:ba:e8:79:c1:eb:47:85:5b:6b:b4:5c:51:c4:94:33:0e:7f:
a0:28:08:b1:8f:b8:70:e8:9d:0b:3f:bf:e0:b2:64:27:a7:b4:
b4:5e:23:3c:44:dd:a6:b6:5e:86:6d:36:c6:b1:84:86:1a:68:
7b:3f:b6:36:27:ac:a5:3b:60:21:3b:2f:5a:09:6b:05:04:10:
87:85:ba:21:a0:77:03:d4:8d:d5:af:23:21:14:b5:85:a4:5e:
28:8b:42:32:fc:f9:40:e2:d3:82:9d:73:d9:41:ad:c9:a9:aa:
a2:42:61:46
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEOa5mqKG82CwaFqxYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMTAxODEyMDAwMFoXDTI0MDExODA1MDAwMFowLzEtMCsGA1UEAxMk
NmY2MzdiN2UtZTY4ZC00NmM4LThiMWItMWVjZTYwODEwZWEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ky0fIki3JlfrhVg+Rp9/jo2kCjEf/I7fZ1C
F6FOkMTORQs1aMdlbJVhSJrvPHTkuKw1r+65c13RLgLPFBYjLadrPh0Cr4ncE4Qn
xxrupokWvdCOu2YMh0yvv7QUunDhviZn6TO8q0Xj/FgHBU6w9gAK2DfZPtW7HzzU
q9xfKIKTyHCTQep/LzkaVJHUG5Yo0Bxvf05S2gUamAOqXJaw8nEbVidYdcNU6oED
i4mlsFmEy0ACzY/FI1dZFHfyd+PopX58zlXmsjQRNRsMPbmU/iryAfz+5TZhR7wS
rlMoRGfdRHPE2VWziduy8bSGpQ62ZpPjISuhgpj7cOTw9PZUkQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFI+Ci0ChkgeX4eicOOk4NsAg0h3VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvNDMwMmQ5MTEtMTU2OC0z
NmFhLTk5M2EtZjJhNjkzOGFjOGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEwCAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAH19xW1FSzmnBc1INFMyCDJWJuihXSZ3UFosMk1aZBk5tnUZ7c3L
sIP42Gx4n1Jkc5scfxfCrIf2xfIsBv2TO+8yQPuyyTIknkRDfzimvoydn9bTI+5/
6iXDcL1M4s4jWJB/vJaSrBgYDcN0J2jAv5kzLdD3w+F3MVexZt2lklhtgxMftUT2
R8oHO4t5cDCWJTG66HnB60eFW2u0XFHElDMOf6AoCLGPuHDonQs/v+CyZCentLRe
IzxE3aa2XoZtNsaxhIYaaHs/tjYnrKU7YCE7L1oJawUEEIeFuiGgdwPUjdWvIyEU
tYWkXiiLQjL8+UDi04Kdc9lBrcmpqqJCYUY=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:30:25 2025 by rpki-client