Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fff549fc-752a-3818-a072-8852fba1a3e7.roa
File: fff549fc-752a-3818-a072-8852fba1a3e7.roa (raw, json)
Hash identifier: CanjzUXb48ImnAizZncsn92X8ghH0degwwhzBCKVSd0=
Subject key identifier: 0C:CA:E1:E8:6E:40:CF:80:D3:6E:78:7D:06:48:40:21:23:A2:32:F6
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAEF75445B398A4A61B5BC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fff549fc-752a-3818-a072-8852fba1a3e7.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33659
IP address blocks: 2601:84:8000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:ae:f7:54:45:b3:98:a4:a6:1b:5b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=5fd8ff2a-703e-4448-b9b6-815ea0d440de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fd:9e:a8:f5:6f:92:01:b1:c3:3b:eb:37:e2:
bf:97:bf:33:a7:a3:36:04:cf:dc:ff:d5:d7:99:b3:
00:ce:08:69:30:71:b5:01:89:af:04:18:40:fc:51:
3e:e6:e2:06:b1:99:7a:ea:9a:52:08:ac:fa:e9:7c:
3b:b5:6b:9c:8c:05:c9:be:90:4c:0a:2b:1b:c9:0c:
49:6f:2e:3a:99:23:23:76:9e:aa:eb:6c:95:28:29:
89:b5:ec:cb:c0:6a:40:be:f6:0c:1c:06:8c:fc:4b:
e3:41:61:d5:35:e0:02:7e:78:f4:f6:92:cd:5b:59:
9b:74:48:85:46:e2:05:60:0d:af:5e:d8:5f:f4:86:
65:3d:74:04:0c:52:4b:17:1b:26:ee:35:1c:37:67:
6e:a4:dd:62:80:70:06:5b:c1:07:44:c7:5c:fe:e8:
c2:29:df:d7:23:ef:b9:bd:f1:63:9f:df:5d:34:d6:
d1:e4:40:f3:a7:4c:b3:ae:5a:d2:fe:53:a8:65:d2:
1f:c8:0a:b0:f7:76:dc:c5:20:99:b6:ab:21:cf:27:
f0:c6:fe:21:6c:33:42:82:ee:7e:94:43:58:fb:87:
62:de:7e:ae:97:67:35:ba:ba:6c:11:96:98:51:a3:
7a:3f:d7:1a:dc:51:0d:3c:a2:be:a2:59:07:ce:7a:
b5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:CA:E1:E8:6E:40:CF:80:D3:6E:78:7D:06:48:40:21:23:A2:32:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fff549fc-752a-3818-a072-8852fba1a3e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2601:84:8000::/34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:ee:e5:ac:eb:7b:91:d8:4c:ac:ee:3a:05:62:64:35:f7:47:
f6:cc:5c:bf:55:38:93:f6:29:d9:43:e3:fc:bf:84:86:0e:ca:
79:dd:34:38:dc:f2:cf:b7:4b:b2:57:38:73:f8:95:78:81:c6:
b0:bb:62:8b:83:d1:ac:a0:69:3c:11:35:12:05:99:00:38:e1:
f1:22:64:cc:62:14:a3:a7:d2:a6:4e:1d:aa:60:d1:a8:a9:d6:
d2:64:c4:50:33:eb:24:7f:57:9d:2e:01:68:85:96:76:53:48:
69:2e:1f:48:7c:6d:c0:2c:5b:46:10:11:a7:a2:fb:f1:43:4d:
87:ee:10:55:0a:a8:73:50:61:73:7e:d9:3b:8c:fd:9f:15:80:
19:1d:cf:ed:c0:84:2c:e4:1f:db:71:22:b8:6f:73:c8:a7:81:
4c:58:02:0f:5c:6c:6d:cb:2a:86:ab:91:a5:5e:cd:3a:03:39:
97:c1:95:2c:2d:a9:16:f8:70:e0:b5:cd:3b:e4:48:5f:01:e8:
72:e4:3f:0d:d8:cd:30:05:6a:6d:41:7c:18:05:39:39:b8:65:
40:98:6c:90:85:ee:f5:a2:f2:d7:ba:d1:9c:67:f3:65:ae:fa:
1a:11:38:56:6a:cd:0d:58:49:82:6e:cc:b0:b4:10:5a:46:ae:
9f:64:45:ea
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEksrvdURbOYpKYbW8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
NWZkOGZmMmEtNzAzZS00NDQ4LWI5YjYtODE1ZWEwZDQ0MGRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnP2eqPVvkgGxwzvrN+K/l78zp6M2BM/c/9XX
mbMAzghpMHG1AYmvBBhA/FE+5uIGsZl66ppSCKz66Xw7tWucjAXJvpBMCisbyQxJ
by46mSMjdp6q62yVKCmJtezLwGpAvvYMHAaM/EvjQWHVNeACfnj09pLNW1mbdEiF
RuIFYA2vXthf9IZlPXQEDFJLFxsm7jUcN2dupN1igHAGW8EHRMdc/ujCKd/XI++5
vfFjn99dNNbR5EDzp0yzrlrS/lOoZdIfyAqw93bcxSCZtqshzyfwxv4hbDNCgu5+
lENY+4di3n6ul2c1urpsEZaYUaN6P9ca3FENPKK+olkHznq1VwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFAzK4ehuQM+A0254fQZIQCEjojL2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmZmNTQ5ZmMtNzUyYS0z
ODE4LWEwNzItODg1MmZiYTFhM2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgEAhIAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAmu7lrOt7kdhMrO46BWJkNfdH9sxcv1U4k/Yp2UPj/L+Ehg7Ked00
ONzyz7dLslc4c/iVeIHGsLtii4PRrKBpPBE1EgWZADjh8SJkzGIUo6fSpk4dqmDR
qKnW0mTEUDPrJH9XnS4BaIWWdlNIaS4fSHxtwCxbRhARp6L78UNNh+4QVQqoc1Bh
c37ZO4z9nxWAGR3P7cCELOQf23EiuG9zyKeBTFgCD1xsbcsqhquRpV7NOgM5l8GV
LC2pFvhw4LXNO+RIXwHocuQ/DdjNMAVqbUF8GAU5ObhlQJhskIXu9aLy17rRnGfz
Za76GhE4VmrNDVhJgm7MsLQQWkaun2RF6g==
-----END CERTIFICATE-----
Generated at Sun Apr 6 20:34:29 2025 by rpki-client