Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3aacd553-c6e6-3a43-974b-ac87cbf2d763.roa
File: 3aacd553-c6e6-3a43-974b-ac87cbf2d763.roa (raw, json)
Hash identifier: UMa5dAIDH8lrDN3QSaJd6Weu0fvpUu5/L01gxXE2Xqc=
Subject key identifier: E3:C2:6E:17:C9:C6:2F:45:C6:6A:15:2C:03:7F:F8:EF:0F:DB:FB:9F
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F700A8D425FF075D548700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3aacd553-c6e6-3a43-974b-ac87cbf2d763.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 7015
IP address blocks: 2603:2191:4000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f7:00:a8:d4:25:ff:07:5d:54:87:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=94f5e683-94f3-40f3-ac55-3ce6fb68a7b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1d:71:3e:a0:7f:3b:b4:2a:e3:72:15:a3:e7:
82:40:fa:1f:ff:0f:75:4f:64:6a:57:cb:74:b7:9c:
6c:71:96:33:32:54:b5:b5:71:e5:bd:08:40:c1:f2:
48:5f:f8:8c:53:76:86:34:f7:e1:40:4e:1e:45:0b:
23:dc:70:f7:41:3e:e7:75:47:c7:30:22:d1:aa:87:
a4:de:35:82:82:08:70:5f:48:ed:22:60:23:45:f6:
d2:87:8e:18:d5:fa:2a:54:e9:1a:d6:6a:b1:63:84:
44:50:4a:3e:da:d7:8d:82:a8:0e:e9:0c:0f:35:9d:
0c:7c:05:9f:cc:f7:de:88:67:ea:c6:b1:81:2d:f6:
50:7e:82:c1:d3:a7:0e:b1:b4:12:0d:08:13:f5:1b:
65:9a:24:64:d1:ae:0a:6f:17:75:be:a3:31:58:4c:
b2:0e:66:92:01:1b:7f:c1:e2:43:fe:bf:da:2d:f6:
78:b2:5b:94:38:34:a7:52:80:67:98:c0:3f:c4:0b:
ee:7e:7a:ac:43:77:36:5a:f6:37:0c:3a:49:59:1b:
f6:62:52:e6:85:7d:df:39:c5:47:f9:be:b1:79:57:
89:75:b1:fc:5a:aa:85:d2:7c:87:70:22:86:e1:3c:
de:79:35:15:6e:ea:91:6c:29:84:be:38:a3:be:ca:
78:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C2:6E:17:C9:C6:2F:45:C6:6A:15:2C:03:7F:F8:EF:0F:DB:FB:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3aacd553-c6e6-3a43-974b-ac87cbf2d763.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:2191:4000::/34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:6e:dd:21:70:4f:16:15:b3:24:77:05:d8:c4:10:2d:41:32:
ee:46:26:ba:27:0d:e5:c2:10:58:c2:f6:a2:2b:17:5c:2c:df:
57:ac:de:7f:6b:c0:fd:f8:70:cb:fc:81:be:c8:9a:cb:44:95:
6d:26:c5:1b:fb:77:79:b3:71:73:2c:58:7d:42:59:8e:92:9b:
45:d9:8b:ba:35:2a:04:d2:0d:dd:20:99:ff:24:2d:7c:08:ab:
54:8c:de:4b:62:35:99:af:c6:56:7f:47:00:1c:f2:f3:25:4e:
3f:51:77:54:e7:b1:16:53:85:1c:21:f5:21:a4:fa:2c:14:f2:
67:03:23:49:ad:c5:e8:f3:8a:eb:a4:13:26:98:93:f0:32:7a:
a4:54:20:02:77:7e:de:e7:91:9c:20:2a:8d:8b:2e:a3:0f:f6:
7d:cc:69:90:ca:9f:bb:c7:ea:7b:33:8a:fb:7a:2a:5c:77:37:
a4:b1:73:80:43:3d:cf:e1:06:1d:1e:07:63:12:f5:d4:1b:ce:
09:d5:10:d4:75:b4:12:58:5a:d3:94:25:89:7a:ce:44:ad:01:
79:a3:2e:7c:74:7c:48:92:84:91:ef:8a:a2:b5:85:f6:ce:bc:
a1:b7:35:ab:db:cf:25:41:31:4f:b1:73:69:6e:8c:3e:36:2a:
a9:01:7b:ac
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEj09wCo1CX/B11UhwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
OTRmNWU2ODMtOTRmMy00MGYzLWFjNTUtM2NlNmZiNjhhN2IzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuB1xPqB/O7Qq43IVo+eCQPof/w91T2RqV8t0
t5xscZYzMlS1tXHlvQhAwfJIX/iMU3aGNPfhQE4eRQsj3HD3QT7ndUfHMCLRqoek
3jWCgghwX0jtImAjRfbSh44Y1foqVOka1mqxY4REUEo+2teNgqgO6QwPNZ0MfAWf
zPfeiGfqxrGBLfZQfoLB06cOsbQSDQgT9RtlmiRk0a4Kbxd1vqMxWEyyDmaSARt/
weJD/r/aLfZ4sluUODSnUoBnmMA/xAvufnqsQ3c2WvY3DDpJWRv2YlLmhX3fOcVH
+b6xeVeJdbH8WqqF0nyHcCKG4TzeeTUVbuqRbCmEvjijvsp4xQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFOPCbhfJxi9FxmoVLAN/+O8P2/ufMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2FhY2Q1NTMtYzZlNi0z
YTQzLTk3NGItYWM4N2NiZjJkNzYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgMhkUAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAaG7dIXBPFhWzJHcF2MQQLUEy7kYmuicN5cIQWML2oisXXCzfV6ze
f2vA/fhwy/yBvsiay0SVbSbFG/t3ebNxcyxYfUJZjpKbRdmLujUqBNIN3SCZ/yQt
fAirVIzeS2I1ma/GVn9HABzy8yVOP1F3VOexFlOFHCH1IaT6LBTyZwMjSa3F6POK
66QTJpiT8DJ6pFQgAnd+3ueRnCAqjYsuow/2fcxpkMqfu8fqezOK+3oqXHc3pLFz
gEM9z+EGHR4HYxL11BvOCdUQ1HW0Elha05QliXrORK0BeaMufHR8SJKEke+KorWF
9s68obc1q9vPJUExT7FzaW6MPjYqqQF7rA==
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:56:39 2025 by rpki-client