Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/07da0d37-0cfc-3d80-b72b-fd6ac0d881f6.roa
File: 07da0d37-0cfc-3d80-b72b-fd6ac0d881f6.roa (raw, json)
Hash identifier: UxC+/ErNrvwgKk8Rx6VnexrLmx48J5Ej2IPd5gL77mU=
Subject key identifier: 5B:A3:BD:82:C9:34:6A:A2:BA:51:41:7F:85:0F:45:8F:D7:96:2F:F2
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F6FD5BB2344FD94D5D6600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/07da0d37-0cfc-3d80-b72b-fd6ac0d881f6.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 7015
IP address blocks: 2601:192:8000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:fd:5b:b2:34:4f:d9:4d:5d:66:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=a676f37a-99d3-47e3-b3b1-4b7ebdffcf41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:18:93:a4:bc:67:d3:06:d9:d2:61:92:c8:ec:
04:a0:f1:6d:3d:48:9c:de:79:bc:dc:6e:2e:47:e8:
ea:78:f0:2a:fa:86:83:d1:af:cb:1c:ee:87:7d:62:
07:d2:07:04:bf:34:b4:2f:c2:4f:86:d8:b5:69:36:
6f:6a:d2:78:04:c1:9f:68:36:0c:cf:14:c1:34:fc:
36:4f:d0:d3:2a:14:ba:b7:9c:20:43:a1:b1:76:2a:
47:de:48:3d:cc:de:b1:8f:69:51:63:84:c3:67:ba:
13:dc:7d:bb:62:16:ae:00:8c:1f:78:65:81:34:71:
ac:d7:03:c9:bb:8a:0b:79:6c:3e:1e:17:4a:2e:5a:
ea:d9:10:a8:6f:fa:b9:22:a1:e4:c4:6f:55:c1:05:
8f:b6:7d:1f:5c:a5:d4:7f:76:ca:34:66:42:a8:0e:
1d:20:12:92:ee:c9:58:44:f6:32:a1:e2:7c:54:29:
85:5d:8f:24:8c:ca:f9:ad:85:f8:41:57:ee:11:d4:
56:cc:6b:6f:23:ee:59:03:9e:41:75:0b:ed:96:24:
3a:43:95:dc:c4:f1:e6:2c:59:ae:12:92:8d:bc:10:
61:63:1a:0b:07:68:2c:fd:d8:73:4e:d2:1d:08:6c:
11:92:52:c3:58:2f:cb:e8:f5:90:20:f1:46:6e:94:
72:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A3:BD:82:C9:34:6A:A2:BA:51:41:7F:85:0F:45:8F:D7:96:2F:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/07da0d37-0cfc-3d80-b72b-fd6ac0d881f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2601:192:8000::/34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:15:ae:45:d1:1b:59:d8:43:e6:2d:08:84:0b:39:af:40:fd:
31:d7:14:2b:45:8f:f2:12:52:4c:61:17:5f:da:e4:21:fc:54:
a6:ca:9e:20:ac:63:05:f3:57:83:8d:e8:75:8c:51:ba:a6:f8:
91:b6:fe:3f:a3:d3:40:15:fd:a3:39:62:31:b6:15:6c:e2:e3:
54:43:ca:f4:1f:9f:2e:32:44:85:a9:a3:e2:ed:06:9f:0c:b9:
91:66:68:16:ca:8b:40:56:dc:0c:16:15:6e:85:1f:ca:0c:63:
3e:e1:af:a0:9b:2b:78:32:1e:f3:45:e0:73:5c:0a:93:12:80:
e0:78:c4:49:6e:3c:56:b2:65:da:83:0f:52:fb:de:87:c5:12:
c5:7b:5d:de:f8:fc:86:6c:a8:1c:47:e2:2c:bd:f2:f5:80:6a:
97:e5:8d:42:ca:62:14:e8:2c:d0:99:cf:f6:26:c7:60:c8:7c:
45:5f:88:f6:2d:93:51:fb:82:ac:fa:6c:46:3d:d0:ed:95:49:
b0:56:06:a9:3f:21:61:fd:ef:5f:14:f1:81:80:3e:05:fb:d0:
ee:9e:8f:26:7e:8a:b4:c9:36:33:07:af:e8:21:84:3e:75:11:
b6:cd:fa:90:0d:b3:e7:cc:a6:fc:3d:1b:b2:ce:c6:9d:82:61:
09:c3:4e:d9
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEj09v1bsjRP2U1dZgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
YTY3NmYzN2EtOTlkMy00N2UzLWIzYjEtNGI3ZWJkZmZjZjQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBiTpLxn0wbZ0mGSyOwEoPFtPUic3nm83G4u
R+jqePAq+oaD0a/LHO6HfWIH0gcEvzS0L8JPhti1aTZvatJ4BMGfaDYMzxTBNPw2
T9DTKhS6t5wgQ6GxdipH3kg9zN6xj2lRY4TDZ7oT3H27YhauAIwfeGWBNHGs1wPJ
u4oLeWw+HhdKLlrq2RCob/q5IqHkxG9VwQWPtn0fXKXUf3bKNGZCqA4dIBKS7slY
RPYyoeJ8VCmFXY8kjMr5rYX4QVfuEdRWzGtvI+5ZA55BdQvtliQ6Q5XcxPHmLFmu
EpKNvBBhYxoLB2gs/dhzTtIdCGwRklLDWC/L6PWQIPFGbpRyjwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFFujvYLJNGqiulFBf4UPRY/Xli/yMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDdkYTBkMzctMGNmYy0z
ZDgwLWI3MmItZmQ2YWMwZDg4MWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgEBkoAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAchWuRdEbWdhD5i0IhAs5r0D9MdcUK0WP8hJSTGEXX9rkIfxUpsqe
IKxjBfNXg43odYxRuqb4kbb+P6PTQBX9ozliMbYVbOLjVEPK9B+fLjJEhamj4u0G
nwy5kWZoFsqLQFbcDBYVboUfygxjPuGvoJsreDIe80Xgc1wKkxKA4HjESW48VrJl
2oMPUvveh8USxXtd3vj8hmyoHEfiLL3y9YBql+WNQspiFOgs0JnP9ibHYMh8RV+I
9i2TUfuCrPpsRj3Q7ZVJsFYGqT8hYf3vXxTxgYA+BfvQ7p6PJn6KtMk2Mwev6CGE
PnURts36kA2z58ym/D0bss7GnYJhCcNO2Q==
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:24:25 2025 by rpki-client