Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bcc31c08-1368-3bd3-a890-bedad0c0ca23.roa
File: bcc31c08-1368-3bd3-a890-bedad0c0ca23.roa (raw, json)
Hash identifier: CINdLAwwEr7Hgcf0SIkCodAvxO+25uR1H0oCEsBSlpw=
Subject key identifier: 4E:82:46:5B:13:25:9A:21:A1:35:68:12:29:E9:58:41:36:CF:11:64
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F432858491941883D2D36ABDEC167C000
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bcc31c08-1368-3bd3-a890-bedad0c0ca23.roa
Signing time: Thu 06 Mar 2025 14:00:52 +0000
ROA not before: Thu 06 Mar 2025 14:00:52 +0000
ROA not after: Wed 04 Jun 2025 13:00:52 +0000
asID: 397601
IP address blocks: 2001:418:1456:b21::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:19:41:88:3d:2d:36:ab:de:c1:67:c0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Mar 6 14:00:52 2025 GMT
Not After : Jun 4 13:00:52 2025 GMT
Subject: CN=384aa56c-1806-4d0e-99bf-44e6e6a1e28e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0c:ee:ed:ee:04:c8:5b:fb:69:92:af:b5:d2:
e7:19:0a:9b:0b:90:85:5f:75:40:5a:83:e3:63:bb:
68:d9:34:4b:51:80:f6:14:54:38:d8:b2:7e:c4:7b:
56:53:36:ba:eb:9f:52:b1:89:37:66:53:16:f9:75:
66:41:45:b6:60:e2:9e:35:f9:94:c0:7e:09:9c:dd:
71:6b:36:bf:64:6e:51:e0:46:f9:d5:44:df:7c:fd:
87:91:02:ae:af:59:14:1f:59:ec:07:36:25:94:45:
9d:1f:01:23:6e:80:b3:a1:6b:0b:3e:5f:db:57:59:
b6:8b:ad:d7:5d:25:5e:ec:3b:27:7c:8a:2b:91:17:
fd:d1:1c:3a:f3:8a:3a:2e:4f:4b:7d:06:59:07:e7:
06:e7:6f:a9:6d:2f:86:75:01:29:83:2a:11:e4:60:
ca:d4:81:4f:ac:b4:d0:5b:d1:1c:a5:86:b6:ad:0b:
59:c1:50:c2:8c:e7:7f:fb:27:b3:b8:04:4f:74:42:
db:84:c3:c1:90:52:df:4a:82:c2:72:49:63:1d:1e:
fe:28:fa:51:f4:82:81:83:6d:eb:d0:7d:a8:ab:07:
3e:f3:b7:71:5c:d5:fa:fd:b9:be:b6:0f:8f:1f:46:
47:be:51:9e:aa:9e:63:91:f9:c3:16:bb:8f:9f:4e:
ac:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:82:46:5B:13:25:9A:21:A1:35:68:12:29:E9:58:41:36:CF:11:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bcc31c08-1368-3bd3-a890-bedad0c0ca23.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:418:1456:b21::/64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:92:74:d1:3f:a0:84:12:8c:18:ad:43:21:b0:1c:40:50:e3:
d7:ef:ee:4c:83:2f:94:35:c8:e0:3e:4d:53:f6:f9:a8:eb:72:
d9:6f:ee:fd:16:c7:f2:3a:8d:4f:48:75:77:5e:f1:7c:16:47:
1d:2a:31:fc:d6:be:76:28:7b:82:9e:cf:c8:b1:f5:d8:8a:46:
ac:39:c4:2a:29:60:21:78:6a:a7:70:13:c2:4d:22:8a:de:07:
19:57:93:f9:8d:26:48:14:0f:c8:1d:1b:76:2b:eb:0a:1b:34:
0a:70:dc:79:ad:cc:2c:37:3b:d4:10:e7:c4:30:a2:e2:4f:d7:
6f:40:bc:c5:2d:18:79:40:73:be:db:b9:9f:b1:80:ef:c0:b2:
a8:ae:ab:8b:e9:7b:aa:6a:39:f9:72:7f:f4:06:38:c7:7e:5f:
d5:8b:0e:2d:65:b4:d1:bf:64:31:21:45:2a:76:29:12:85:d9:
51:cc:a5:72:6b:e9:4d:b8:ff:30:c5:ed:48:e5:89:ba:81:54:
11:4a:94:0c:ae:cd:45:e1:d8:d8:27:b1:ca:99:76:22:98:42:
bc:b1:13:b3:52:ad:ea:20:64:dc:30:7b:91:25:26:aa:04:07:
ee:4c:b4:eb:b4:14:4e:01:99:3f:11:49:11:ed:11:6b:08:5b:
6a:ce:ba:e0
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEkZQYg9LTar3sFnwAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk
Mzg0YWE1NmMtMTgwNi00ZDBlLTk5YmYtNDRlNmU2YTFlMjhlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQzu7e4EyFv7aZKvtdLnGQqbC5CFX3VAWoPj
Y7to2TRLUYD2FFQ42LJ+xHtWUza6659SsYk3ZlMW+XVmQUW2YOKeNfmUwH4JnN1x
aza/ZG5R4Eb51UTffP2HkQKur1kUH1nsBzYllEWdHwEjboCzoWsLPl/bV1m2i63X
XSVe7DsnfIorkRf90Rw684o6Lk9LfQZZB+cG52+pbS+GdQEpgyoR5GDK1IFPrLTQ
W9EcpYa2rQtZwVDCjOd/+yezuARPdELbhMPBkFLfSoLCckljHR7+KPpR9IKBg23r
0H2oqwc+87dxXNX6/bm+tg+PH0ZHvlGeqp5jkfnDFruPn06sgQIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFE6CRlsTJZohoTVoEinpWEE2zxFkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYmNjMzFjMDgtMTM2OC0z
YmQzLWE4OTAtYmVkYWQwYzBjYTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEEGBRW
CyEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAEZJ00T+ghBKMGK1DIbAcQFDj1+/uTIMvlDXI4D5NU/b5qOty
2W/u/RbH8jqNT0h1d17xfBZHHSox/Na+dih7gp7PyLH12IpGrDnEKilgIXhqp3AT
wk0iit4HGVeT+Y0mSBQPyB0bdivrChs0CnDcea3MLDc71BDnxDCi4k/Xb0C8xS0Y
eUBzvtu5n7GA78CyqK6ri+l7qmo5+XJ/9AY4x35f1YsOLWW00b9kMSFFKnYpEoXZ
UcylcmvpTbj/MMXtSOWJuoFUEUqUDK7NReHY2Cexypl2IphCvLETs1Kt6iBk3DB7
kSUmqgQH7ky067QUTgGZPxFJEe0Rawhbas664A==
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:16:13 2025 by rpki-client