Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/151a19fb-0b82-30da-88a1-aaa2dd3db85f.roa
File: 151a19fb-0b82-30da-88a1-aaa2dd3db85f.roa (raw, json)
Hash identifier: K8fv3yEJXgvvGl/cVd3M9tPMnzH3pNcO40uHkf/XlEw=
Subject key identifier: 58:25:2C:15:ED:36:05:AB:0D:1B:B3:6E:CE:8D:04:8B:5A:25:40:EB
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F432858494BADD5F81A04A245CA358900
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/151a19fb-0b82-30da-88a1-aaa2dd3db85f.roa
Signing time: Mon 24 Mar 2025 15:29:43 +0000
ROA not before: Mon 24 Mar 2025 15:29:43 +0000
ROA not after: Sun 22 Jun 2025 15:29:43 +0000
asID: 30036
IP address blocks: 2604:2e8d:6c00::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:ad:d5:f8:1a:04:a2:45:ca:35:89:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Mar 24 15:29:43 2025 GMT
Not After : Jun 22 15:29:43 2025 GMT
Subject: CN=d543878d-37ae-41cc-81da-0e8ccfe8d4cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:18:32:90:18:ff:4f:6e:ef:03:cb:ad:47:94:
7a:2f:a9:a4:62:e9:3d:99:5a:04:db:99:fb:12:49:
df:ba:e9:35:4a:7d:8d:4c:d4:b0:9e:17:7d:bc:d7:
f2:23:d5:6f:a6:ef:04:bb:d3:9b:ca:e2:e9:ce:af:
ff:11:53:f8:04:f5:06:18:a6:e5:f1:ce:c5:ab:6f:
89:5d:2c:1b:56:53:2a:86:77:65:94:6d:b1:68:46:
6e:a6:13:4c:f9:f6:2d:87:81:f1:4c:b1:0c:7d:60:
ab:7b:2b:1f:af:bb:87:1e:42:c1:00:61:29:67:d4:
12:6c:3e:21:54:8d:78:ca:19:5c:a1:be:bf:e2:3d:
1c:77:9d:24:a6:e1:cc:59:cf:56:1b:e1:a7:4c:da:
d3:fd:52:55:2a:d2:18:eb:6c:a6:14:24:9c:dd:22:
dc:77:af:bd:9c:f3:11:69:f7:49:8c:57:1b:0e:56:
f4:17:ea:75:5d:4f:07:83:55:88:b8:27:b2:4b:ec:
9c:08:4b:55:19:15:0a:f2:07:a1:9b:77:f0:5e:5a:
bb:d8:ce:b3:ba:33:1f:06:2a:b6:5a:8f:a2:ae:ef:
2c:58:ea:46:8b:9e:f2:12:53:f7:cb:89:43:37:1d:
00:9e:8a:f4:d0:bd:f3:9a:c5:c4:ba:fc:e6:8e:ae:
0e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:25:2C:15:ED:36:05:AB:0D:1B:B3:6E:CE:8D:04:8B:5A:25:40:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/151a19fb-0b82-30da-88a1-aaa2dd3db85f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8d:6c00::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:28:d7:f9:c4:80:aa:bf:f5:46:17:8d:68:8a:04:96:5c:18:
92:ad:8c:01:36:26:99:e9:14:8c:f2:9e:6a:0b:63:8c:79:52:
3e:15:62:50:10:f5:91:0c:78:b7:82:56:cd:7d:05:2c:e5:5b:
cc:6a:6b:ee:11:82:d7:00:fa:b1:db:c8:9e:69:be:49:d3:27:
b4:9d:f2:d2:a8:9b:29:76:ea:1f:47:72:90:8f:1b:8f:c6:37:
c0:ba:f2:0d:f5:bc:9d:22:96:7f:d2:75:31:85:17:43:c0:e7:
f0:98:25:9a:d5:32:71:30:72:09:5b:e9:54:d9:79:db:3d:e9:
8e:3a:53:19:1d:11:a3:69:da:d6:7b:dd:23:d8:3f:bb:85:48:
59:5f:ca:ef:a5:8d:fb:99:56:6e:a9:19:28:3f:f3:93:97:e1:
92:92:8c:3e:21:0b:fd:7b:8b:c2:cb:f6:d0:f7:eb:96:77:de:
19:7d:ad:18:78:e7:40:fa:75:fa:a1:be:d3:37:42:46:56:f7:
21:f2:f5:93:06:ab:2d:15:90:91:33:65:45:02:de:35:4a:43:
89:43:be:cc:2c:44:76:a9:95:f3:45:4b:3a:71:c5:bd:a8:97:
66:b7:ee:9f:46:d4:46:08:51:60:83:eb:87:ff:2d:d7:96:32:
62:21:a2:d7
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWElLrdX4GgSiRco1iQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDMyNDE1Mjk0M1oXDTI1MDYyMjE1Mjk0M1owLzEtMCsGA1UEAxMk
ZDU0Mzg3OGQtMzdhZS00MWNjLTgxZGEtMGU4Y2NmZThkNGNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRgykBj/T27vA8utR5R6L6mkYuk9mVoE25n7
Eknfuuk1Sn2NTNSwnhd9vNfyI9Vvpu8Eu9ObyuLpzq//EVP4BPUGGKbl8c7Fq2+J
XSwbVlMqhndllG2xaEZuphNM+fYth4HxTLEMfWCreysfr7uHHkLBAGEpZ9QSbD4h
VI14yhlcob6/4j0cd50kpuHMWc9WG+GnTNrT/VJVKtIY62ymFCSc3SLcd6+9nPMR
afdJjFcbDlb0F+p1XU8Hg1WIuCeyS+ycCEtVGRUK8gehm3fwXlq72M6zujMfBiq2
Wo+iru8sWOpGi57yElP3y4lDNx0Anor00L3zmsXEuvzmjq4OcQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFFglLBXtNgWrDRuzbs6NBItaJUDrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMTUxYTE5ZmItMGI4Mi0z
MGRhLTg4YTEtYWFhMmRkM2RiODVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujWww
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAWijX+cSAqr/1RheNaIoEllwYkq2MATYmmekUjPKeagtjjHlSPhVi
UBD1kQx4t4JWzX0FLOVbzGpr7hGC1wD6sdvInmm+SdMntJ3y0qibKXbqH0dykI8b
j8Y3wLryDfW8nSKWf9J1MYUXQ8Dn8JglmtUycTByCVvpVNl52z3pjjpTGR0Ro2na
1nvdI9g/u4VIWV/K76WN+5lWbqkZKD/zk5fhkpKMPiEL/XuLwsv20PfrlnfeGX2t
GHjnQPp1+qG+0zdCRlb3IfL1kwarLRWQkTNlRQLeNUpDiUO+zCxEdqmV80VLOnHF
vaiXZrfun0bURghRYIPrh/8t15YyYiGi1w==
-----END CERTIFICATE-----
Generated at Tue Apr 8 23:36:28 2025 by rpki-client