Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5dd404a5-a418-36aa-938a-673dc0a33cd6.roa
File: 5dd404a5-a418-36aa-938a-673dc0a33cd6.roa (raw, json)
Hash identifier: jIWSPgIP6o3G0MnRJl+3JnZdtqeueHJcpsX6nNmwjIo=
Subject key identifier: 27:6B:67:77:5F:75:BF:94:79:CE:B5:9A:05:D7:8C:2D:BD:48:F6:46
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858490CB14A98E7EB5C8D21805DC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5dd404a5-a418-36aa-938a-673dc0a33cd6.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 36632
IP address blocks: 2620:0:5050::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:4a:98:e7:eb:5c:8d:21:80:5d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=2dda964b-e937-44a3-99dc-dec4d41475c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4c:c5:4d:24:86:13:4f:15:4a:9f:0f:0b:bf:
b6:67:90:cc:44:20:21:9c:66:20:f5:fa:63:58:dd:
ec:1a:ec:cb:f8:bb:27:30:a7:8a:47:a8:f7:b6:40:
a7:a5:ac:18:31:77:ba:11:70:b2:40:ed:aa:2e:d9:
f9:7d:d6:cf:ab:86:a0:ed:0f:3f:c1:2c:38:ea:c1:
5d:c5:06:5c:f9:7e:6f:31:5a:95:12:a1:35:bc:4c:
b8:70:e7:e5:85:74:2d:cb:36:bb:32:a7:60:87:91:
27:76:13:39:12:07:0f:64:1c:2c:d5:e0:d6:84:63:
04:c6:a3:ee:a0:da:ec:3f:7a:7c:19:11:be:40:4c:
3d:56:57:26:bf:5d:f7:65:c2:56:4a:8e:2a:1e:e3:
77:29:d1:11:2c:45:30:ec:a7:b1:57:d3:02:d7:88:
0e:5f:16:42:a2:90:30:d4:f9:07:14:ba:84:be:2b:
74:1d:c2:90:85:5c:a7:cd:ab:06:a7:46:32:fe:13:
97:78:8a:a3:83:fb:57:8f:b2:13:5a:d0:36:e4:a3:
db:9b:c3:76:71:c3:9c:6a:a2:d8:71:65:73:c5:d6:
8b:10:73:3b:9d:22:eb:36:6c:a8:a2:df:d3:0b:f7:
3e:2f:f0:37:07:13:f1:a9:fc:5c:a5:10:91:7e:b1:
91:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:6B:67:77:5F:75:BF:94:79:CE:B5:9A:05:D7:8C:2D:BD:48:F6:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5dd404a5-a418-36aa-938a-673dc0a33cd6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:0:5050::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:2d:cd:b1:91:5a:61:48:ea:88:aa:76:f7:63:8b:ae:83:44:
9a:d1:c9:ff:0c:ac:57:8c:0e:47:b3:a7:4b:1a:b1:5b:4b:8b:
1c:32:21:25:69:94:2b:70:0a:5d:d0:81:57:79:83:a2:31:79:
60:46:53:3e:cd:88:c1:42:84:63:30:8a:4c:80:34:54:f1:72:
c3:97:b8:b9:46:96:24:2c:36:7e:83:33:71:d3:fa:28:aa:83:
0e:a6:ca:52:6d:72:a1:44:bb:97:32:e3:f0:c7:5e:d2:5e:4b:
af:d7:67:52:59:ef:df:84:1c:0e:aa:fd:79:74:d0:a3:8c:8b:
6f:96:20:7d:26:76:d6:8d:b0:61:03:5f:19:f1:d3:0a:1e:dd:
22:b9:4f:97:f5:a1:2f:53:e0:52:ec:bf:43:8f:61:fb:f6:24:
a4:75:d4:0a:e7:97:13:1e:8a:23:43:6e:5a:0d:17:17:b4:cc:
14:74:e9:d3:77:52:04:dd:65:72:94:7c:e3:98:04:b5:0b:1b:
5e:3a:6b:d8:5e:c7:fe:8e:56:52:de:3d:75:67:49:fb:2e:eb:
a0:7d:69:b5:c4:57:a5:a7:c9:f2:e2:d6:2c:7e:bf:a8:4d:64:
f3:10:fc:8d:5f:02:0f:3b:1c:1d:1d:c5:57:b6:79:66:2f:4e:
d0:a9:cb:cc
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkMsUqY5+tcjSGAXcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk
MmRkYTk2NGItZTkzNy00NGEzLTk5ZGMtZGVjNGQ0MTQ3NWMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEzFTSSGE08VSp8PC7+2Z5DMRCAhnGYg9fpj
WN3sGuzL+LsnMKeKR6j3tkCnpawYMXe6EXCyQO2qLtn5fdbPq4ag7Q8/wSw46sFd
xQZc+X5vMVqVEqE1vEy4cOflhXQtyza7Mqdgh5EndhM5EgcPZBws1eDWhGMExqPu
oNrsP3p8GRG+QEw9Vlcmv133ZcJWSo4qHuN3KdERLEUw7KexV9MC14gOXxZCopAw
1PkHFLqEvit0HcKQhVynzasGp0Yy/hOXeIqjg/tXj7ITWtA25KPbm8N2ccOcaqLY
cWVzxdaLEHM7nSLrNmyoot/TC/c+L/A3BxPxqfxcpRCRfrGRAwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCdrZ3dfdb+Uec61mgXXjC29SPZGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNWRkNDA0YTUtYTQxOC0z
NmFhLTkzOGEtNjczZGMwYTMzY2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAFBQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAA4tzbGRWmFI6oiqdvdji66DRJrRyf8MrFeMDkezp0sasVtLixwy
ISVplCtwCl3QgVd5g6IxeWBGUz7NiMFChGMwikyANFTxcsOXuLlGliQsNn6DM3HT
+iiqgw6mylJtcqFEu5cy4/DHXtJeS6/XZ1JZ79+EHA6q/Xl00KOMi2+WIH0mdtaN
sGEDXxnx0woe3SK5T5f1oS9T4FLsv0OPYfv2JKR11ArnlxMeiiNDbloNFxe0zBR0
6dN3UgTdZXKUfOOYBLULG146a9hex/6OVlLePXVnSfsu66B9abXEV6WnyfLi1ix+
v6hNZPMQ/I1fAg87HB0dxVe2eWYvTtCpy8w=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:33:00 2025 by rpki-client