Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bec667b2-b8e1-3af6-b197-5bffee5c7579.roa
File: bec667b2-b8e1-3af6-b197-5bffee5c7579.roa (raw, json)
Hash identifier: W0UeyyuU+vm45gYhXAPMUlXwMBnzskhlABLFaxzVpaI=
Subject key identifier: DC:59:31:69:D1:C6:21:5A:9C:08:FF:FD:BF:8B:F6:6A:3B:E6:ED:28
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB0B25AE315F71FF4D77480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bec667b2-b8e1-3af6-b197-5bffee5c7579.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33287
IP address blocks: 2601:43:c000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b0:b2:5a:e3:15:f7:1f:f4:d7:74:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=e3eb1dcf-7f82-4de4-9249-e422258b2031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:57:c5:ca:f5:a5:07:ae:d6:d9:f1:52:27:a1:
a6:e1:d9:a1:2d:0f:0b:e8:11:04:d2:1c:a9:6e:e2:
13:5d:33:31:2c:3a:35:fe:d1:2b:6b:08:5a:25:e0:
51:51:68:91:5a:62:6c:76:ad:75:36:9b:d5:a2:bd:
3d:5e:b3:f8:52:fb:0d:74:d6:40:85:f5:c5:d0:f2:
54:6d:ab:e4:b7:2d:c9:9f:9d:c0:1c:cd:bb:00:ea:
ea:cd:a0:72:5d:06:df:ac:65:5c:51:a7:b9:d6:a0:
5d:e9:9d:a7:f1:05:ae:01:bd:3d:5a:06:09:07:03:
1b:05:6d:b6:e0:0a:84:7a:a2:7b:be:6d:47:05:5e:
da:62:eb:0e:d1:f5:8c:be:b7:dc:c5:99:52:b9:0a:
66:5d:8f:0d:a6:b5:64:98:a9:60:81:bb:a1:16:1f:
9c:42:d8:e8:08:69:c6:76:57:80:34:23:b6:a1:03:
4f:a9:aa:c3:31:84:71:69:a3:72:38:d4:63:1d:99:
61:2e:0c:56:6f:8a:bb:18:88:78:20:57:52:60:4a:
e7:53:8f:de:28:d5:1b:21:50:38:07:85:1e:2d:8a:
68:9d:53:e9:81:83:ca:fe:d2:5f:85:f4:ee:19:17:
29:a9:1a:57:2e:38:b9:29:c8:3b:f5:8e:16:a8:72:
33:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:59:31:69:D1:C6:21:5A:9C:08:FF:FD:BF:8B:F6:6A:3B:E6:ED:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bec667b2-b8e1-3af6-b197-5bffee5c7579.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2601:43:c000::/34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:9e:69:99:ea:6f:24:40:bf:f7:71:59:5a:e8:2a:15:46:85:
77:ae:33:f8:21:8b:ac:52:f5:df:3c:9d:db:ac:73:62:a3:53:
66:2b:f0:4c:67:f5:7b:c3:90:b9:ec:d2:13:81:9a:90:25:83:
ad:bf:ea:61:c8:4f:97:3e:5d:5d:b4:ca:41:6a:b4:c9:af:b7:
5d:94:72:80:8b:d9:91:c5:82:b3:4a:a9:06:b0:7e:fc:18:36:
77:55:7d:97:5a:1b:53:7f:ba:14:ce:f7:3f:2d:23:8c:53:c6:
f4:2d:1f:8e:fd:68:b6:75:90:cf:5b:f6:bb:13:6c:bc:b1:5e:
8c:7d:b1:aa:73:9e:aa:8c:95:2d:c0:2b:01:59:35:74:57:ea:
a5:c1:47:cf:a2:88:11:c3:a0:60:cb:3e:43:53:ae:54:f8:50:
3e:b7:98:d2:00:52:0f:78:35:b5:8e:e0:6d:de:a2:20:90:98:
93:f6:8c:6a:08:3f:0c:ed:55:5c:44:06:0e:80:f1:c5:d1:57:
af:f7:9f:25:66:38:99:f9:70:05:80:da:8f:b0:f7:bb:82:14:
74:4f:6e:51:5a:84:86:3c:98:8d:18:d8:a4:4b:c7:73:c4:da:
09:b2:09:c3:4e:a0:a0:a9:38:cf:65:1a:0b:0d:45:24:c3:9f:
70:05:f9:73
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkssLJa4xX3H/TXdIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
ZTNlYjFkY2YtN2Y4Mi00ZGU0LTkyNDktZTQyMjI1OGIyMDMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVfFyvWlB67W2fFSJ6Gm4dmhLQ8L6BEE0hyp
buITXTMxLDo1/tErawhaJeBRUWiRWmJsdq11NpvVor09XrP4UvsNdNZAhfXF0PJU
bavkty3Jn53AHM27AOrqzaByXQbfrGVcUae51qBd6Z2n8QWuAb09WgYJBwMbBW22
4AqEeqJ7vm1HBV7aYusO0fWMvrfcxZlSuQpmXY8NprVkmKlggbuhFh+cQtjoCGnG
dleANCO2oQNPqarDMYRxaaNyONRjHZlhLgxWb4q7GIh4IFdSYErnU4/eKNUbIVA4
B4UeLYponVPpgYPK/tJfhfTuGRcpqRpXLji5Kcg79Y4WqHIzuwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFNxZMWnRxiFanAj//b+L9mo75u0oMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmVjNjY3YjItYjhlMS0z
YWY2LWIxOTctNWJmZmVlNWM3NTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgEAQ8Aw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEALp5pmepvJEC/93FZWugqFUaFd64z+CGLrFL13zyd26xzYqNTZivw
TGf1e8OQuezSE4GakCWDrb/qYchPlz5dXbTKQWq0ya+3XZRygIvZkcWCs0qpBrB+
/Bg2d1V9l1obU3+6FM73Py0jjFPG9C0fjv1otnWQz1v2uxNsvLFejH2xqnOeqoyV
LcArAVk1dFfqpcFHz6KIEcOgYMs+Q1OuVPhQPreY0gBSD3g1tY7gbd6iIJCYk/aM
agg/DO1VXEQGDoDxxdFXr/efJWY4mflwBYDaj7D3u4IUdE9uUVqEhjyYjRjYpEvH
c8TaCbIJw06goKk4z2UaCw1FJMOfcAX5cw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:11:36 2025 by rpki-client