Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/04667be6-dbfe-39b3-883b-8ceb088e9fd6.roa
File: 04667be6-dbfe-39b3-883b-8ceb088e9fd6.roa (raw, json)
Hash identifier: y7VKOlkNAz1XUsUvC0avnIOHvZ1lo4SAYAaxLSc5vxo=
Subject key identifier: 29:D9:73:78:36:EB:35:2F:96:32:F9:3F:61:26:BC:A8:3E:6D:CD:44
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F913B1AE4E57172B90A380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/04667be6-dbfe-39b3-883b-8ceb088e9fd6.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33662
IP address blocks: 2603:300c:800::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f9:13:b1:ae:4e:57:17:2b:90:a3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=1ad291f6-8b75-4dfe-952f-16229b64476d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d3:1a:47:72:99:f2:16:02:bb:3f:7a:c5:cd:
60:7e:d3:2d:81:5f:2b:bd:6e:fd:fe:0d:0e:25:37:
bf:ac:48:46:55:d2:07:72:da:40:3f:a2:07:eb:0e:
e1:4e:fd:c6:0f:25:1e:10:f8:07:cc:1c:e0:e4:be:
44:1f:84:71:3c:fc:63:7c:7e:4d:a4:02:cf:1a:ce:
a4:14:a6:18:d8:f8:6f:30:23:f5:d1:e5:45:3d:cb:
60:a2:56:da:38:28:cb:19:1a:51:16:78:14:16:e9:
4f:57:3f:32:2f:2a:0e:00:57:a1:6e:47:93:88:48:
a9:f2:76:b4:37:55:b3:c7:1a:89:01:ec:46:1f:6a:
57:3c:b9:2e:bc:f3:25:fb:82:5b:17:aa:0c:b3:c5:
77:51:8a:99:69:47:af:5f:ff:94:78:db:82:12:f0:
01:ad:1f:e1:c3:fd:aa:3d:43:20:83:b2:f2:4d:fa:
cd:1f:b2:79:cf:a7:0a:a6:48:fb:70:85:47:27:df:
24:9e:97:61:d8:55:ce:ea:34:73:60:e1:62:c5:31:
fd:e0:71:40:79:23:80:18:1a:3b:db:04:b0:88:95:
cb:c0:bd:77:2d:0f:8f:e1:b6:fc:80:a7:21:9a:44:
33:40:9a:c1:31:49:b7:00:58:22:c5:74:b7:7d:10:
d9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D9:73:78:36:EB:35:2F:96:32:F9:3F:61:26:BC:A8:3E:6D:CD:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/04667be6-dbfe-39b3-883b-8ceb088e9fd6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:300c:800::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:65:1d:ca:c0:08:a4:2d:43:2e:e4:70:72:f3:f8:0e:94:e0:
8b:b2:8e:85:a0:7e:02:47:bc:39:fd:bf:04:ce:ad:c1:03:f6:
8a:83:be:09:f1:28:2f:b3:e5:80:d3:2c:49:1a:79:b4:8a:bf:
80:f2:b7:58:ae:f4:a0:41:5d:72:67:ee:c8:14:0f:d7:8b:48:
28:0d:b3:7d:63:e0:7d:c6:ca:65:57:d0:ea:df:c9:bc:e2:22:
71:0a:34:26:cc:4c:52:d9:de:40:b5:91:56:6d:e6:00:23:29:
5e:10:82:03:7b:bc:b2:4b:33:66:01:61:f0:2c:dd:2a:c5:85:
f8:6a:a1:4c:05:a5:75:7c:bb:8a:fe:30:6d:fe:e1:b2:46:6d:
a9:75:e1:b6:83:b2:a0:1f:1b:ee:cd:53:66:71:7d:a7:83:a9:
a6:ad:85:b8:63:db:0a:ca:3f:a3:ce:0e:68:ed:32:72:0f:b3:
44:f7:84:91:68:b1:4e:13:f1:30:bd:24:38:cc:b1:05:61:6b:
42:35:61:3e:c3:1b:2f:78:89:eb:11:47:93:f8:44:2c:46:8f:
1e:f1:ed:18:b2:7c:c4:28:a7:99:ac:d5:e9:49:e1:86:16:7c:
b2:50:29:ad:7b:36:10:91:0a:b9:cc:ad:28:9e:39:9a:61:8f:
ca:3c:77:91
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEj0+ROxrk5XFyuQo4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
MWFkMjkxZjYtOGI3NS00ZGZlLTk1MmYtMTYyMjliNjQ0NzZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNMaR3KZ8hYCuz96xc1gftMtgV8rvW79/g0O
JTe/rEhGVdIHctpAP6IH6w7hTv3GDyUeEPgHzBzg5L5EH4RxPPxjfH5NpALPGs6k
FKYY2PhvMCP10eVFPctgolbaOCjLGRpRFngUFulPVz8yLyoOAFehbkeTiEip8na0
N1WzxxqJAexGH2pXPLkuvPMl+4JbF6oMs8V3UYqZaUevX/+UeNuCEvABrR/hw/2q
PUMgg7LyTfrNH7J5z6cKpkj7cIVHJ98knpdh2FXO6jRzYOFixTH94HFAeSOAGBo7
2wSwiJXLwL13LQ+P4bb8gKchmkQzQJrBMUm3AFgixXS3fRDZYwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFCnZc3g26zUvljL5P2EmvKg+bc1EMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDQ2NjdiZTYtZGJmZS0z
OWIzLTg4M2ItOGNlYjA4OGU5ZmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwDAgw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEALGUdysAIpC1DLuRwcvP4DpTgi7KOhaB+Ake8Of2/BM6twQP2ioO+
CfEoL7PlgNMsSRp5tIq/gPK3WK70oEFdcmfuyBQP14tIKA2zfWPgfcbKZVfQ6t/J
vOIicQo0JsxMUtneQLWRVm3mACMpXhCCA3u8skszZgFh8CzdKsWF+GqhTAWldXy7
iv4wbf7hskZtqXXhtoOyoB8b7s1TZnF9p4Oppq2FuGPbCso/o84OaO0ycg+zRPeE
kWixThPxML0kOMyxBWFrQjVhPsMbL3iJ6xFHk/hELEaPHvHtGLJ8xCinmazV6Unh
hhZ8slAprXs2EJEKucytKJ45mmGPyjx3kQ==
-----END CERTIFICATE-----
Generated at Mon Apr 7 05:49:07 2025 by rpki-client