Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/436daea9-ebc2-3428-94b6-cfa304aa9755.roa
File: 436daea9-ebc2-3428-94b6-cfa304aa9755.roa (raw, json)
Hash identifier: MQeYweMlxib2kpw8eLVGuZGkRfuyIffr0BcbOHqQkSo=
Subject key identifier: F9:05:43:D9:30:A4:B7:66:CA:55:A5:F6:FA:55:11:7B:BB:1F:AE:D8
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB0803E99B86BD9FBAB8B80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/436daea9-ebc2-3428-94b6-cfa304aa9755.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33659
IP address blocks: 2603:301b:2d00::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b0:80:3e:99:b8:6b:d9:fb:ab:8b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=706c36f5-13f5-473a-82da-884f15b50eb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ff:40:2d:e0:0d:18:ab:ad:cd:2a:45:69:83:
b6:d5:0a:d7:21:57:37:2e:fb:62:41:71:45:ed:66:
54:78:f2:72:ca:3d:27:16:d8:e0:5e:9d:b7:a4:53:
68:ef:bd:3a:c9:eb:9d:82:ab:ca:0e:f3:27:82:df:
3a:a1:44:cf:ba:7c:6f:35:98:ca:08:f0:3a:ca:3f:
77:04:17:a9:41:09:7c:9a:df:e3:1c:4d:61:93:93:
a1:da:e3:34:9a:e1:c5:18:e9:aa:12:77:6e:f4:5c:
6b:1c:75:e9:1b:e7:78:41:0b:58:ed:75:1b:b3:a9:
55:b9:95:17:1e:35:d1:18:fb:cb:6d:fc:9a:31:4f:
da:13:c0:69:72:13:82:79:6f:65:c3:35:bb:b7:14:
d7:69:72:71:0f:1e:fb:55:92:f8:93:40:80:ca:6b:
8d:4a:ae:4c:f7:4d:70:b3:d9:06:ac:71:c3:ab:26:
fb:48:bd:da:39:ea:e5:b8:0a:2b:c8:33:7c:4e:a8:
c7:c5:d4:b1:09:b4:65:4a:26:ab:f8:12:3f:ae:a9:
6f:26:57:58:61:9e:4c:ec:4a:90:a9:a3:f4:50:6d:
03:23:78:0a:4c:b9:e2:90:c9:ff:30:72:a4:68:2a:
8e:e3:de:0e:6e:1c:3d:96:2f:07:c8:9c:6f:ed:87:
47:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:05:43:D9:30:A4:B7:66:CA:55:A5:F6:FA:55:11:7B:BB:1F:AE:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/436daea9-ebc2-3428-94b6-cfa304aa9755.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:301b:2d00::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c4:6c:83:93:24:3d:28:da:0c:fe:00:94:6a:14:12:54:7d:45:
4e:4c:f2:7e:71:af:35:4b:90:44:bc:80:f9:68:72:2b:c4:66:
42:fa:fa:f0:5a:b4:f2:76:ff:de:5b:b0:69:d3:f1:4e:30:ae:
0a:80:24:9c:16:de:55:d4:0f:15:d6:b7:19:4b:b4:c0:85:d9:
f3:3b:27:d2:a4:b2:18:41:95:7b:d4:75:e1:bd:f9:3a:d5:2f:
3f:77:a3:9c:17:2d:ad:05:9a:61:29:e5:1c:bb:96:a3:25:b5:
c3:f0:ab:8a:67:79:67:17:ce:84:89:c4:02:7a:58:27:5a:3d:
e8:8b:ae:2d:ef:f1:16:7c:1f:b5:81:71:e4:28:3e:5e:0d:61:
aa:bc:85:73:35:be:d7:ff:80:be:7b:63:e4:13:a9:1f:58:5f:
a7:ef:25:6f:b4:09:9d:d7:46:21:d2:9c:c9:9a:e8:f9:64:1a:
c6:9a:cb:49:31:f3:1b:6b:bf:72:fa:30:a7:e3:e0:6d:15:95:
8b:c0:bc:bc:1a:e6:ab:9c:3f:36:31:9a:67:3d:e3:49:35:fd:
35:da:c4:9c:c1:a2:df:f5:c5:e8:ae:da:0a:7f:ac:e4:0f:85:
76:26:ae:35:24:5d:85:67:83:2c:e2:3b:f3:d2:c6:61:77:60:
be:42:31:35
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkssIA+mbhr2furi4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
NzA2YzM2ZjUtMTNmNS00NzNhLTgyZGEtODg0ZjE1YjUwZWIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvP9ALeANGKutzSpFaYO21QrXIVc3LvtiQXFF
7WZUePJyyj0nFtjgXp23pFNo7706yeudgqvKDvMngt86oUTPunxvNZjKCPA6yj93
BBepQQl8mt/jHE1hk5Oh2uM0muHFGOmqEndu9FxrHHXpG+d4QQtY7XUbs6lVuZUX
HjXRGPvLbfyaMU/aE8BpchOCeW9lwzW7txTXaXJxDx77VZL4k0CAymuNSq5M901w
s9kGrHHDqyb7SL3aOerluAoryDN8TqjHxdSxCbRlSiar+BI/rqlvJldYYZ5M7EqQ
qaP0UG0DI3gKTLnikMn/MHKkaCqO494Obhw9li8HyJxv7YdHQQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFPkFQ9kwpLdmylWl9vpVEXu7H67YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDM2ZGFlYTktZWJjMi0z
NDI4LTk0YjYtY2ZhMzA0YWE5NzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwGy0w
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAxGyDkyQ9KNoM/gCUahQSVH1FTkzyfnGvNUuQRLyA+WhyK8RmQvr6
8Fq08nb/3luwadPxTjCuCoAknBbeVdQPFda3GUu0wIXZ8zsn0qSyGEGVe9R14b35
OtUvP3ejnBctrQWaYSnlHLuWoyW1w/Crimd5ZxfOhInEAnpYJ1o96IuuLe/xFnwf
tYFx5Cg+Xg1hqryFczW+1/+Avntj5BOpH1hfp+8lb7QJnddGIdKcyZro+WQaxprL
STHzG2u/cvowp+PgbRWVi8C8vBrmq5w/NjGaZz3jSTX9NdrEnMGi3/XF6K7aCn+s
5A+FdiauNSRdhWeDLOI789LGYXdgvkIxNQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:09:52 2025 by rpki-client