Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e1b764b-3779-355c-befe-adc3ed0b0404.roa
File: 3e1b764b-3779-355c-befe-adc3ed0b0404.roa (raw, json)
Hash identifier: EPGtqN16ZA/0Ei07uFMuwtOvZN2ellfJ4xK+HxLnJWk=
Subject key identifier: 73:06:60:70:1D:40:12:AC:BC:77:29:BD:BD:59:49:43:E9:1B:DE:BC
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858490CB1455B338D53753EEE51E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e1b764b-3779-355c-befe-adc3ed0b0404.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 396568
IP address blocks: 2620:0:5050::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:45:5b:33:8d:53:75:3e:ee:51:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=c7e50ca8-f876-4dbc-9b24-2a7932cfbf6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1b:01:37:90:4d:ea:05:83:d4:fd:c1:c6:15:
91:1c:82:87:14:5a:bc:14:08:bc:74:bf:68:fd:6c:
33:31:7c:e3:3f:eb:61:bd:94:03:05:dd:78:8c:49:
d9:34:1d:22:4f:ce:be:50:cf:4e:df:ad:ba:16:1f:
f9:79:17:3d:51:8b:62:f7:4e:cf:67:9c:f3:d0:70:
2d:2a:84:99:d1:2f:49:8e:d9:d6:3e:55:86:7f:90:
d0:bb:09:9a:9c:78:3a:62:21:0a:aa:51:b6:51:82:
16:45:f3:95:74:90:45:76:aa:eb:5d:ad:04:76:4a:
36:5b:27:cd:05:f1:80:1c:96:9d:b2:c2:76:40:ed:
42:87:a8:2e:a9:95:c0:8a:40:a1:36:b7:cb:cf:c1:
42:5c:fe:32:e2:b5:94:64:8a:42:87:be:52:f3:30:
bc:92:e0:10:00:11:cc:c5:b3:76:a1:25:3f:bb:e9:
5a:79:6e:a3:dd:31:f6:43:fb:60:16:56:46:ae:60:
5d:9d:bc:51:dc:0f:7f:af:a1:71:b4:89:50:54:e2:
d9:45:0c:13:cb:38:2a:52:d0:08:bd:93:00:0a:35:
83:d5:02:ee:c1:e4:c5:93:cb:6e:89:45:70:21:54:
81:c5:14:d8:55:79:7f:2f:fc:10:57:a3:56:c9:c9:
cb:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:06:60:70:1D:40:12:AC:BC:77:29:BD:BD:59:49:43:E9:1B:DE:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e1b764b-3779-355c-befe-adc3ed0b0404.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:0:5050::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:f2:84:9c:a5:2d:f0:94:38:85:78:59:a6:2b:76:8a:da:e4:
da:1a:84:5d:a7:0c:2d:64:a2:71:9c:a4:31:3d:cc:d2:d1:37:
2c:48:c6:8b:ed:84:6f:7b:3d:f7:eb:9a:60:d2:d2:f3:84:87:
ad:b3:46:54:0c:27:f5:2d:d2:a3:ef:da:fd:60:9c:f4:95:af:
a2:12:af:72:33:08:6e:a9:22:f2:57:3d:73:03:52:b1:58:1d:
46:e2:05:7e:83:4e:66:f4:a5:c2:f4:6b:40:df:c1:cc:6f:bc:
31:67:59:18:41:27:04:f3:63:01:b0:1b:f7:db:b6:c7:e9:ae:
59:9b:1d:8f:85:af:71:40:2e:96:1d:00:cf:08:a2:26:0b:15:
1b:a9:54:d1:64:52:d8:1d:98:36:9f:b2:3b:53:ad:20:9a:c9:
de:47:42:c8:84:7c:84:1a:9f:1c:71:07:20:f9:93:00:87:37:
ce:af:3c:84:e1:b1:0e:45:56:8e:12:6a:9b:5c:58:dd:ea:dc:
4d:46:60:4e:b1:9f:0d:53:37:02:d8:7a:0a:70:7e:22:56:06:
cd:99:51:e3:40:fc:ec:a9:4e:11:bf:15:7e:f2:09:bf:2e:c7:
15:97:f0:6a:31:bd:67:a5:5b:99:43:cc:2d:f5:46:9c:2e:ea:
f6:47:eb:8f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkMsUVbM41TdT7uUeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk
YzdlNTBjYTgtZjg3Ni00ZGJjLTliMjQtMmE3OTMyY2ZiZjZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hsBN5BN6gWD1P3BxhWRHIKHFFq8FAi8dL9o
/WwzMXzjP+thvZQDBd14jEnZNB0iT86+UM9O3626Fh/5eRc9UYti907PZ5zz0HAt
KoSZ0S9JjtnWPlWGf5DQuwmanHg6YiEKqlG2UYIWRfOVdJBFdqrrXa0Edko2WyfN
BfGAHJadssJ2QO1Ch6guqZXAikChNrfLz8FCXP4y4rWUZIpCh75S8zC8kuAQABHM
xbN2oSU/u+laeW6j3TH2Q/tgFlZGrmBdnbxR3A9/r6FxtIlQVOLZRQwTyzgqUtAI
vZMACjWD1QLuweTFk8tuiUVwIVSBxRTYVXl/L/wQV6NWycnL8QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHMGYHAdQBKsvHcpvb1ZSUPpG968MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2UxYjc2NGItMzc3OS0z
NTVjLWJlZmUtYWRjM2VkMGIwNDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAFBQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABfyhJylLfCUOIV4WaYrdora5NoahF2nDC1konGcpDE9zNLRNyxI
xovthG97PffrmmDS0vOEh62zRlQMJ/Ut0qPv2v1gnPSVr6ISr3IzCG6pIvJXPXMD
UrFYHUbiBX6DTmb0pcL0a0DfwcxvvDFnWRhBJwTzYwGwG/fbtsfprlmbHY+Fr3FA
LpYdAM8IoiYLFRupVNFkUtgdmDafsjtTrSCayd5HQsiEfIQanxxxByD5kwCHN86v
PIThsQ5FVo4SaptcWN3q3E1GYE6xnw1TNwLYegpwfiJWBs2ZUeNA/OypThG/FX7y
Cb8uxxWX8GoxvWelW5lDzC31Rpwu6vZH648=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:59:41 2025 by rpki-client