Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0139d575-52bf-39bc-935b-b9f52574b724.roa
File: 0139d575-52bf-39bc-935b-b9f52574b724.roa (raw, json)
Hash identifier: ieI9fbBuOg4Q4v6e+pFYccbBLzlIc4vJNz6OMJu+PAI=
Subject key identifier: C2:F8:BB:06:5E:C9:74:93:5E:1C:93:72:16:C3:BF:34:42:10:A5:29
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F432858492CAE97CADB3AECAD5AD48580
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0139d575-52bf-39bc-935b-b9f52574b724.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 2914
IP address blocks: 2001:418:1456:b16::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:ae:97:ca:db:3a:ec:ad:5a:d4:85:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=d8658fcd-568f-4d9e-b543-99dd52e87dd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d9:93:67:07:3d:0d:41:e1:dc:6e:fc:04:5d:
b9:97:20:7f:dc:60:35:53:09:e4:18:3d:95:ac:59:
d3:f8:b5:66:fa:7e:d5:13:61:f1:b0:a3:10:e9:90:
42:3f:ab:23:20:b7:a9:9c:5a:50:5b:30:de:25:5d:
90:d3:99:0a:d6:62:c0:e1:a9:93:0e:d3:26:60:a4:
b4:31:23:24:19:76:41:e6:28:16:a9:f4:ae:19:15:
0e:9a:87:a1:d8:67:22:34:74:30:64:d7:c4:c5:f3:
9a:37:06:1e:a6:8a:f1:93:ec:61:79:49:40:34:3e:
be:41:34:8c:c1:f1:61:09:68:06:df:bd:bf:5c:a8:
d5:15:d0:3e:ce:76:22:62:33:5b:21:2d:c1:ed:2d:
1c:d6:87:4b:6c:85:bb:29:ec:f6:a0:c9:39:0d:ae:
a0:57:e1:19:d6:4c:e6:b8:d3:04:ec:02:18:5d:c3:
39:6c:b0:85:08:93:a6:9b:4e:d7:0f:9c:ed:92:f2:
52:00:01:4f:e4:ff:29:30:a3:88:ee:4f:85:43:e7:
12:b6:5c:c6:1f:29:dd:0b:eb:ae:a5:c0:32:57:55:
ee:67:14:6d:bd:33:ba:db:9d:ee:4b:01:45:3d:4f:
ce:40:b2:e1:e0:85:5f:a5:b1:ae:e5:16:0a:4c:56:
e8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F8:BB:06:5E:C9:74:93:5E:1C:93:72:16:C3:BF:34:42:10:A5:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0139d575-52bf-39bc-935b-b9f52574b724.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:418:1456:b16::/64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:81:a8:b3:d3:15:d8:10:a4:8c:cb:f6:0f:6a:20:e4:04:72:
91:28:d6:f8:9b:66:ca:47:9c:4e:12:b1:05:ef:a5:59:3d:49:
77:25:cc:7e:54:f2:49:66:91:fd:41:b1:6b:6f:81:03:26:5d:
5f:56:a8:0b:12:70:22:97:3a:e5:ca:94:5b:eb:fc:4b:63:7d:
27:34:2c:e7:db:61:19:45:40:f3:f7:77:9a:4f:ea:15:be:30:
24:8a:f5:1a:0f:90:b3:14:e0:79:8c:2e:03:88:ea:0c:15:2b:
d9:50:d6:d2:2b:bd:d7:4e:83:17:bb:e1:fe:90:30:e5:6c:d4:
a2:26:9a:b0:de:dd:85:8e:06:ed:1d:33:a2:fb:f9:3a:80:14:
6b:51:97:3e:7f:e3:99:5d:ae:44:cb:ca:1f:ce:94:ee:fe:4b:
ca:c6:aa:57:93:8f:1a:e3:c8:dc:c5:dd:d7:d2:d3:03:f1:fb:
da:fe:8f:43:bd:f2:21:b2:ba:3f:e6:69:de:88:61:93:c2:de:
1f:59:11:b1:4d:45:3a:e6:f4:e6:27:31:bf:10:50:2e:f8:23:
73:a0:9e:f9:ab:5c:52:57:f5:8e:5d:a0:97:87:e5:58:fd:73:
25:4c:34:19:2b:9d:f4:6e:35:53:fb:31:06:5b:7b:5c:fb:0d:
e7:ed:82:51
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEksrpfK2zrsrVrUhYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
ZDg2NThmY2QtNTY4Zi00ZDllLWI1NDMtOTlkZDUyZTg3ZGQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3dmTZwc9DUHh3G78BF25lyB/3GA1UwnkGD2V
rFnT+LVm+n7VE2HxsKMQ6ZBCP6sjILepnFpQWzDeJV2Q05kK1mLA4amTDtMmYKS0
MSMkGXZB5igWqfSuGRUOmoeh2GciNHQwZNfExfOaNwYeporxk+xheUlAND6+QTSM
wfFhCWgG372/XKjVFdA+znYiYjNbIS3B7S0c1odLbIW7Kez2oMk5Da6gV+EZ1kzm
uNME7AIYXcM5bLCFCJOmm07XD5ztkvJSAAFP5P8pMKOI7k+FQ+cStlzGHyndC+uu
pcAyV1XuZxRtvTO6253uSwFFPU/OQLLh4IVfpbGu5RYKTFbocQIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFML4uwZeyXSTXhyTchbDvzRCEKUpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMDEzOWQ1NzUtNTJiZi0z
OWJjLTkzNWItYjlmNTI1NzRiNzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEEGBRW
CxYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAgIGos9MV2BCkjMv2D2og5ARykSjW+JtmykecThKxBe+lWT1J
dyXMflTySWaR/UGxa2+BAyZdX1aoCxJwIpc65cqUW+v8S2N9JzQs59thGUVA8/d3
mk/qFb4wJIr1Gg+QsxTgeYwuA4jqDBUr2VDW0iu9106DF7vh/pAw5WzUoiaasN7d
hY4G7R0zovv5OoAUa1GXPn/jmV2uRMvKH86U7v5LysaqV5OPGuPI3MXd19LTA/H7
2v6PQ73yIbK6P+Zp3ohhk8LeH1kRsU1FOub05icxvxBQLvgjc6Ce+atcUlf1jl2g
l4flWP1zJUw0GSud9G41U/sxBlt7XPsN5+2CUQ==
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:34:12 2025 by rpki-client