Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d5a84b84-4044-33a4-ae1f-58f8c1237875.roa
File: d5a84b84-4044-33a4-ae1f-58f8c1237875.roa (raw, json)
Hash identifier: i/nS+2ZBy6Rt4lOoEDiPm9AC+jeylk+N+E1kuY9wYxY=
Subject key identifier: DB:7D:58:4F:8C:AB:84:CA:42:5C:B7:73:81:C5:06:EB:BE:84:C8:D2
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285849203C913AEAA1862401FB78F0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d5a84b84-4044-33a4-ae1f-58f8c1237875.roa
Signing time: Sun 09 Mar 2025 02:00:39 +0000
ROA not before: Sun 09 Mar 2025 02:00:39 +0000
ROA not after: Sat 07 Jun 2025 01:00:39 +0000
asID: 7725
IP address blocks: 2603:3001:1000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:20:3c:91:3a:ea:a1:86:24:01:fb:78:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 9 02:00:39 2025 GMT
Not After : Jun 7 01:00:39 2025 GMT
Subject: CN=c8e19302-db23-4d9e-9848-a1761009120f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4f:9c:89:de:bd:3d:16:87:96:44:ca:91:2b:
bc:85:91:d8:1d:67:6c:01:20:1a:45:e1:6c:67:9d:
a0:7d:83:40:94:21:8e:f3:74:aa:b8:84:bf:f5:35:
2e:6a:f8:72:25:77:ec:91:b2:66:93:73:04:59:22:
11:b4:62:0e:80:67:7e:92:da:14:b6:1a:37:a4:20:
b5:45:b6:93:ca:8e:de:0d:f1:17:1a:bb:01:f8:03:
11:b7:fd:16:e0:d9:0c:97:77:09:71:01:71:fa:58:
5f:a5:d0:67:be:c3:9c:c3:80:8f:ac:12:34:31:8d:
cb:a0:93:df:30:60:88:28:03:41:63:dd:93:24:a0:
82:49:bb:79:a7:66:10:37:eb:a2:ae:68:d6:11:dc:
1c:0f:5e:bb:b7:56:29:56:42:0c:7a:86:ac:6b:93:
f8:20:c6:15:53:5e:01:48:01:00:c9:25:9d:c7:9f:
1b:46:28:f6:43:d7:9e:7c:35:31:da:93:bd:7d:da:
43:db:28:80:b8:d1:07:4a:32:ca:1c:0b:cd:32:2a:
c2:36:ac:9d:c7:05:b5:b0:58:da:eb:9e:bb:9e:98:
c3:75:ca:1e:a3:2e:ea:53:15:a5:da:37:a8:ad:3f:
ae:b7:c3:ff:93:9a:3b:43:b7:91:86:85:cd:7d:6b:
ad:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:7D:58:4F:8C:AB:84:CA:42:5C:B7:73:81:C5:06:EB:BE:84:C8:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d5a84b84-4044-33a4-ae1f-58f8c1237875.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:3001:1000::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:a5:b5:cb:35:05:59:66:da:e0:ad:78:7b:42:97:29:9d:43:
54:0a:f6:c4:e6:5b:11:ef:a8:a1:fc:64:55:75:22:eb:06:b7:
25:15:b7:87:d5:d7:93:f4:78:da:f2:90:dd:c1:da:ec:53:18:
40:e0:d6:0f:f9:0c:23:18:90:02:ae:be:6e:67:e5:ca:dc:60:
dc:85:09:83:2d:40:94:b9:66:35:e6:9e:36:da:b3:05:33:c3:
9e:0f:1c:94:ad:25:d0:79:5a:63:c5:52:84:7a:3d:76:eb:8b:
02:de:cc:49:56:fb:1f:1f:e1:ce:55:e9:ac:97:c1:ae:fa:f2:
06:39:f3:61:4e:0f:d6:25:c4:f1:14:c1:61:8b:3a:e0:7f:cb:
2c:eb:a0:05:99:02:ec:1c:9f:33:47:70:e4:9d:06:d1:88:9b:
02:8e:fd:08:9d:aa:24:e7:d0:df:aa:eb:8b:85:13:21:0b:ae:
b1:11:3a:46:da:d2:93:d8:c0:9c:14:53:55:1e:73:e2:9b:d5:
38:59:51:d4:37:4a:81:fe:83:fc:f6:a4:5a:15:1a:23:fc:fd:
37:96:c5:50:99:3a:01:2c:73:97:81:6e:b4:31:5f:33:99:fd:
f1:ae:89:d3:97:d9:52:17:0f:83:ac:6b:16:fd:a2:f7:0f:ff:
ed:c3:b4:4c
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkgPJE66qGGJAH7ePAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk
YzhlMTkzMDItZGIyMy00ZDllLTk4NDgtYTE3NjEwMDkxMjBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArk+cid69PRaHlkTKkSu8hZHYHWdsASAaReFs
Z52gfYNAlCGO83SquIS/9TUuavhyJXfskbJmk3MEWSIRtGIOgGd+ktoUtho3pCC1
RbaTyo7eDfEXGrsB+AMRt/0W4NkMl3cJcQFx+lhfpdBnvsOcw4CPrBI0MY3LoJPf
MGCIKANBY92TJKCCSbt5p2YQN+uirmjWEdwcD167t1YpVkIMeoasa5P4IMYVU14B
SAEAySWdx58bRij2Q9eefDUx2pO9fdpD2yiAuNEHSjLKHAvNMirCNqydxwW1sFja
6567npjDdcoeoy7qUxWl2jeorT+ut8P/k5o7Q7eRhoXNfWut3QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFNt9WE+Mq4TKQly3c4HFBuu+hMjSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDVhODRiODQtNDA0NC0z
M2E0LWFlMWYtNThmOGMxMjM3ODc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwARAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAVKW1yzUFWWba4K14e0KXKZ1DVAr2xOZbEe+oofxkVXUi6wa3JRW3
h9XXk/R42vKQ3cHa7FMYQODWD/kMIxiQAq6+bmflytxg3IUJgy1AlLlmNeaeNtqz
BTPDng8clK0l0HlaY8VShHo9duuLAt7MSVb7Hx/hzlXprJfBrvryBjnzYU4P1iXE
8RTBYYs64H/LLOugBZkC7ByfM0dw5J0G0YibAo79CJ2qJOfQ36rri4UTIQuusRE6
RtrSk9jAnBRTVR5z4pvVOFlR1DdKgf6D/PakWhUaI/z9N5bFUJk6ASxzl4FutDFf
M5n98a6J05fZUhcPg6xrFv2i9w//7cO0TA==
-----END CERTIFICATE-----
Generated at Mon Apr 7 09:46:54 2025 by rpki-client