Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d1ec7d81-82ad-3029-abd2-5405897dacbf.roa
File: d1ec7d81-82ad-3029-abd2-5405897dacbf.roa (raw, json)
Hash identifier: Xgu+AmcD0C3LelGkYP9MIKVNf86HtCCjDLn1tH1SySs=
Subject key identifier: D2:AA:5F:BF:20:4F:9B:91:29:0C:39:C5:33:8A:9C:28:20:1F:A9:63
Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial: 010D0C9F4328584929E3C93A41D29EB2D6239600
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d1ec7d81-82ad-3029-abd2-5405897dacbf.roa
Signing time: Wed 12 Mar 2025 13:00:53 +0000
ROA not before: Wed 12 Mar 2025 13:00:53 +0000
ROA not after: Tue 10 Jun 2025 13:00:53 +0000
asID: 62651
IP address blocks: 2604:c980:800::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:29:e3:c9:3a:41:d2:9e:b2:d6:23:96:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Validity
Not Before: Mar 12 13:00:53 2025 GMT
Not After : Jun 10 13:00:53 2025 GMT
Subject: CN=83992036-f2ad-4ed3-829d-90c33eca0d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3c:34:66:e1:ad:04:46:3e:20:d0:6d:44:d8:
8e:bd:12:41:ab:91:4b:5e:f7:b2:6f:4d:35:11:06:
04:22:09:85:42:26:4a:e6:53:5e:34:6b:c4:9a:32:
9d:97:33:12:b0:a8:5d:e3:b9:87:3d:7f:0e:64:53:
a2:98:d5:7f:82:53:ac:c7:75:11:62:c0:4c:a1:c8:
44:e2:c7:78:51:6d:5e:f8:16:8d:12:23:46:ee:af:
c5:c8:2d:ec:23:77:ea:e1:58:84:8a:34:ba:4a:c2:
ed:c8:5f:4c:34:b3:75:3d:52:95:be:d8:fc:7f:1d:
3d:a1:68:f3:c1:fe:cf:01:e8:21:3a:e4:bd:19:94:
79:32:dd:a2:bc:9a:3d:f4:21:7e:d7:a9:01:2b:57:
8f:59:c3:e0:33:0b:96:d4:3a:c1:b5:5c:4c:f0:a7:
85:96:9c:5b:ca:86:02:31:cf:59:ea:b9:e6:80:0c:
45:57:af:2e:07:08:c8:38:14:e0:60:ce:28:65:fb:
98:56:5a:c8:4b:4f:24:55:8b:4d:ef:4e:bd:42:9e:
f1:ad:2f:2d:1f:ce:e9:6c:51:63:78:f0:2e:19:20:
0a:15:11:a3:a4:60:78:da:fe:2d:9a:a9:05:e6:89:
b6:2b:2f:eb:16:7d:f8:60:96:ed:7f:93:a8:2b:60:
32:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:AA:5F:BF:20:4F:9B:91:29:0C:39:C5:33:8A:9C:28:20:1F:A9:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d1ec7d81-82ad-3029-abd2-5405897dacbf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
X509v3 Authority Key Identifier:
keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:c980:800::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:05:cd:a6:35:79:2b:c7:3f:ca:9b:3d:02:65:e8:30:40:a1:
bc:e1:03:8f:14:8e:f0:a9:58:05:5c:2b:ce:58:13:7c:6d:48:
2a:01:3d:b7:b3:22:75:1e:52:72:7b:44:90:aa:4b:48:fe:99:
e0:5e:62:80:60:ce:d4:c0:4f:76:8b:72:2b:d6:2b:b5:96:7a:
05:30:1d:03:60:67:a6:8b:2f:6d:08:95:2e:cd:27:a6:93:f7:
99:58:75:81:44:30:c2:fb:b9:4a:64:e3:fc:59:0a:c4:f9:9a:
5e:5e:84:19:c0:17:9e:0b:eb:f3:df:cd:e2:e7:b4:7d:5f:a5:
67:4e:a7:c8:ff:87:a0:d5:3e:73:24:8f:66:97:9d:05:97:1b:
c8:96:0b:2a:c8:3d:89:4e:67:2e:5c:30:3e:78:93:31:f4:97:
a1:78:1a:43:6a:e3:ba:e4:97:0a:96:c9:19:82:29:81:37:cf:
22:bb:0e:19:09:9e:48:28:69:b5:87:11:14:a9:6c:e4:6d:40:
ab:5b:d2:a4:30:ed:1b:bc:38:93:e7:13:ea:01:71:51:c9:17:
3f:ab:d5:7b:95:54:79:80:d8:7d:3c:6d:00:53:75:ea:03:8a:
be:e4:a9:75:de:69:8a:9d:9e:30:79:e6:54:cc:eb:28:68:e8:
06:4e:4d:49
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkp48k6QdKestYjlgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz
NmJhMB4XDTI1MDMxMjEzMDA1M1oXDTI1MDYxMDEzMDA1M1owLzEtMCsGA1UEAxMk
ODM5OTIwMzYtZjJhZC00ZWQzLTgyOWQtOTBjMzNlY2EwZDZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTw0ZuGtBEY+INBtRNiOvRJBq5FLXveyb001
EQYEIgmFQiZK5lNeNGvEmjKdlzMSsKhd47mHPX8OZFOimNV/glOsx3URYsBMochE
4sd4UW1e+BaNEiNG7q/FyC3sI3fq4ViEijS6SsLtyF9MNLN1PVKVvtj8fx09oWjz
wf7PAeghOuS9GZR5Mt2ivJo99CF+16kBK1ePWcPgMwuW1DrBtVxM8KeFlpxbyoYC
Mc9Z6rnmgAxFV68uBwjIOBTgYM4oZfuYVlrIS08kVYtN7069Qp7xrS8tH87pbFFj
ePAuGSAKFRGjpGB42v4tmqkF5om2Ky/rFn34YJbtf5OoK2AyowIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFNKqX78gT5uRKQw5xTOKnCggH6ljMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy
NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvZDFlYzdkODEtODJhZC0z
MDI5LWFiZDItNTQwNTg5N2RhY2JmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj
MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl
MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3
OGU4ZTM2YmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTJgAgw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAXQXNpjV5K8c/yps9AmXoMEChvOEDjxSO8KlYBVwrzlgTfG1IKgE9
t7MidR5ScntEkKpLSP6Z4F5igGDO1MBPdotyK9YrtZZ6BTAdA2BnposvbQiVLs0n
ppP3mVh1gUQwwvu5SmTj/FkKxPmaXl6EGcAXngvr89/N4ue0fV+lZ06nyP+HoNU+
cySPZpedBZcbyJYLKsg9iU5nLlwwPniTMfSXoXgaQ2rjuuSXCpbJGYIpgTfPIrsO
GQmeSChptYcRFKls5G1Aq1vSpDDtG7w4k+cT6gFxUckXP6vVe5VUeYDYfTxtAFN1
6gOKvuSpdd5pip2eMHnmVMzrKGjoBk5NSQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:47:00 2025 by rpki-client