Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9897e08e-3b07-3795-b18d-a3a81becf2a1.roa
File: 9897e08e-3b07-3795-b18d-a3a81becf2a1.roa (raw, json)
Hash identifier: bEtSPlcQ656IfHRUHiGPLvfzeUA6Rq0ueoJezaAGnYI=
Subject key identifier: 56:F0:F1:1A:47:B0:BA:E2:C6:5F:F0:13:AD:71:80:81:BE:97:10:A3
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F4328584940395F9E3D6085367EDE2A00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9897e08e-3b07-3795-b18d-a3a81becf2a1.roa
Signing time: Thu 20 Mar 2025 13:00:53 +0000
ROA not before: Thu 20 Mar 2025 13:00:53 +0000
ROA not after: Wed 18 Jun 2025 13:00:53 +0000
asID: 54113
IP address blocks: 2607:8940:43a0::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:40:39:5f:9e:3d:60:85:36:7e:de:2a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Mar 20 13:00:53 2025 GMT
Not After : Jun 18 13:00:53 2025 GMT
Subject: CN=a8eb9167-84cb-4632-9a32-159ffc95a9ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:09:82:6c:66:78:64:a2:76:69:10:26:99:f5:
49:53:af:44:f1:05:24:8e:01:4e:09:86:97:5d:55:
85:1a:80:53:88:04:60:be:0e:f7:47:23:05:42:20:
8d:07:e4:93:43:dd:3e:ac:44:b8:17:b1:e4:87:d3:
c0:3b:d4:fd:33:32:b5:00:39:b9:99:04:50:57:fc:
cd:f7:48:b6:0b:34:23:8b:81:56:23:d3:b5:8a:98:
19:77:56:f1:3e:6c:48:89:9f:e3:6c:52:1e:1c:9b:
f8:0a:43:dd:78:3b:af:13:ae:54:29:15:df:23:df:
f9:5a:4f:b6:2a:6b:f3:c6:7d:09:e5:75:aa:75:64:
6f:71:99:0b:1b:11:23:37:50:5c:9b:af:86:5e:d2:
ea:97:a9:d7:03:ee:2f:89:03:56:bf:e1:38:ea:e7:
bf:61:00:09:1a:64:bd:fb:e0:9f:7d:85:aa:3f:08:
b4:5e:4a:3d:66:41:a6:99:20:f5:c4:85:84:e6:ed:
64:cc:64:e6:ac:51:7c:9b:b6:4e:ba:af:79:f8:17:
af:04:c7:20:6a:45:19:a9:dd:62:3d:9f:57:c0:84:
94:04:f4:13:5a:22:bf:8a:a8:8e:e2:b9:74:da:b9:
32:13:d0:16:21:5a:ed:b7:8b:92:37:d9:76:45:02:
f7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F0:F1:1A:47:B0:BA:E2:C6:5F:F0:13:AD:71:80:81:BE:97:10:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9897e08e-3b07-3795-b18d-a3a81becf2a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:43a0::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:ef:d8:f4:0b:c4:22:82:2f:6f:5a:5b:3b:87:bc:9e:66:c7:
db:d0:d4:e7:d8:67:89:51:e6:5c:fc:11:0e:ef:9b:dc:a8:49:
4a:8f:b0:77:90:bd:50:05:e5:8b:ee:1a:99:8d:85:42:6e:04:
11:fa:42:e2:4f:68:87:18:08:b2:b3:59:e9:55:01:5f:b8:8e:
e3:87:92:25:f6:8d:12:b9:73:31:34:8b:9e:19:21:6b:91:5a:
9e:7e:a5:df:85:63:e6:4b:7b:6e:3c:cf:f8:0b:c1:c6:6f:18:
c4:47:a8:85:8e:49:23:52:97:b8:1d:6a:09:5a:52:25:20:cc:
1a:2a:d2:91:f5:06:8b:c7:d9:02:ec:d4:10:23:d4:ed:6a:0b:
e5:e5:58:c3:34:3b:db:67:93:25:84:61:26:20:07:9f:2f:fa:
d0:3d:e3:f2:3e:a6:69:41:a9:74:5b:79:ad:31:68:26:e9:f9:
6e:40:9a:b6:16:d6:58:90:2b:5a:85:83:86:8a:0b:d2:10:22:
cc:a8:3e:7c:77:92:9f:f2:63:84:7b:c5:51:84:52:b1:d0:b6:
ba:25:5b:f5:91:e6:c4:e9:ad:58:16:a8:8c:b0:8f:e0:a3:52:
13:4a:be:59:cb:58:cc:02:ef:c6:66:17:a6:05:61:dd:1b:a1:
93:cd:17:69
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElAOV+ePWCFNn7eKgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk
YThlYjkxNjctODRjYi00NjMyLTlhMzItMTU5ZmZjOTVhOWFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwmCbGZ4ZKJ2aRAmmfVJU69E8QUkjgFOCYaX
XVWFGoBTiARgvg73RyMFQiCNB+STQ90+rES4F7Hkh9PAO9T9MzK1ADm5mQRQV/zN
90i2CzQji4FWI9O1ipgZd1bxPmxIiZ/jbFIeHJv4CkPdeDuvE65UKRXfI9/5Wk+2
Kmvzxn0J5XWqdWRvcZkLGxEjN1Bcm6+GXtLql6nXA+4viQNWv+E46ue/YQAJGmS9
++CffYWqPwi0Xko9ZkGmmSD1xIWE5u1kzGTmrFF8m7ZOuq95+BevBMcgakUZqd1i
PZ9XwISUBPQTWiK/iqiO4rl02rkyE9AWIVrtt4uSN9l2RQL31wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFbw8RpHsLrixl/wE61xgIG+lxCjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvOTg5N2UwOGUtM2IwNy0z
Nzk1LWIxOGQtYTNhODFiZWNmMmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQEOg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACLv2PQLxCKCL29aWzuHvJ5mx9vQ1OfYZ4lR5lz8EQ7vm9yoSUqP
sHeQvVAF5YvuGpmNhUJuBBH6QuJPaIcYCLKzWelVAV+4juOHkiX2jRK5czE0i54Z
IWuRWp5+pd+FY+ZLe248z/gLwcZvGMRHqIWOSSNSl7gdaglaUiUgzBoq0pH1BovH
2QLs1BAj1O1qC+XlWMM0O9tnkyWEYSYgB58v+tA94/I+pmlBqXRbea0xaCbp+W5A
mrYW1liQK1qFg4aKC9IQIsyoPnx3kp/yY4R7xVGEUrHQtrolW/WR5sTprVgWqIyw
j+CjUhNKvlnLWMwC78ZmF6YFYd0boZPNF2k=
-----END CERTIFICATE-----
Generated at Thu Apr 3 02:46:02 2025 by rpki-client