Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/0add0c68-6307-3a1c-9a64-fd4561e55abd.roa
File: 0add0c68-6307-3a1c-9a64-fd4561e55abd.roa (raw, json)
Hash identifier: 4qclfKbnmrSLNlhqMWSI/kfby9U/9x47Na/GIQ644Sk=
Subject key identifier: 88:23:78:ED:CE:E0:EA:C7:81:E0:86:4F:98:C8:E4:EA:F4:2F:A0:6D
Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial: 010D0C9F43285848EF613FC27BD680D66D25F980
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/0add0c68-6307-3a1c-9a64-fd4561e55abd.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 52000
IP address blocks: 2607:740:5f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:3f:c2:7b:d6:80:d6:6d:25:f9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=8ec5fe2e-f3e4-46f9-b6db-904ba31deeed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1a:df:de:0f:47:22:a9:34:6b:0b:fb:90:3c:
6a:43:a2:61:2b:30:37:89:d3:c1:a0:f6:1e:cc:2a:
ac:c9:bd:7f:b7:bb:60:50:6c:b3:b8:a9:2e:c0:c9:
c3:88:5e:bd:c3:a0:c7:88:d5:4b:e4:71:77:ff:55:
a7:5d:22:90:54:bc:0f:db:e3:81:c2:54:79:35:a5:
c1:13:e5:04:7c:aa:bc:d8:d5:c9:1d:da:66:24:2b:
b0:b4:32:dc:60:05:3f:18:8b:fd:fa:ce:cf:fe:7f:
39:4f:26:bf:e5:28:f7:81:16:8a:0e:1d:1c:94:8d:
1a:3e:6a:40:3e:52:8a:e1:51:b1:43:66:fc:7e:fd:
8a:c1:a6:4c:97:6c:35:89:6c:3f:15:7a:1e:b9:7e:
b1:e2:43:8e:c8:27:57:1c:33:99:e5:1a:8f:84:12:
9a:5b:18:75:c5:62:f4:1b:71:bb:09:f2:dc:3e:c5:
18:8b:e5:63:09:56:da:83:6b:f5:bb:6e:60:57:11:
f0:a2:7e:97:83:a9:d3:29:00:f6:07:2a:2f:4d:7b:
0d:fa:f5:06:df:95:c0:19:1e:72:ad:c1:8f:e5:1d:
72:ea:cd:f1:59:67:21:70:a7:9c:4d:1d:df:b0:58:
e9:0a:04:9b:4c:a8:b0:e7:74:4c:6e:0b:29:03:c8:
f2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:23:78:ED:CE:E0:EA:C7:81:E0:86:4F:98:C8:E4:EA:F4:2F:A0:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/0add0c68-6307-3a1c-9a64-fd4561e55abd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
X509v3 Authority Key Identifier:
keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:740:5f::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:22:2a:d7:dd:11:82:06:d7:22:b0:60:69:8d:b0:b4:8b:5e:
75:5b:fe:b9:4e:03:bb:0f:0f:53:c8:68:9e:eb:9d:43:b4:d9:
3d:95:8b:67:83:c9:16:7b:f1:81:54:ae:cf:7d:59:03:6e:be:
76:95:d2:10:91:a7:ff:6d:3f:1f:fd:50:cb:84:37:57:4d:e1:
ff:9f:fd:47:26:4b:d5:31:1a:29:78:d5:d3:3c:80:4d:3c:6f:
df:c9:a7:b2:af:05:77:b5:c7:d6:24:63:d9:11:be:63:ce:3f:
a1:46:52:6c:81:57:d9:7f:95:d5:c3:62:f5:e9:3c:eb:47:bf:
4f:0b:db:a8:8a:24:cb:f2:45:ea:a5:e8:08:ad:d8:4a:10:a0:
68:b2:9f:c1:36:7a:4e:b5:70:33:98:cc:4a:dd:39:d8:05:28:
84:4b:55:40:a3:5a:1a:59:82:c8:1c:42:aa:1a:ba:08:1c:03:
89:9f:54:82:10:4e:40:f8:29:fd:1a:27:86:89:b1:b6:22:c3:
ad:eb:20:36:f1:de:59:e5:ab:c7:67:c9:42:0e:7a:0b:ba:32:
47:28:5f:3a:07:bb:36:c4:85:1b:d3:5c:3a:a9:39:26:97:31:
66:de:d6:6c:41:09:ae:a8:08:88:b8:37:60:10:68:e0:71:64:
16:5f:a5:a0
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjvYT/Ce9aA1m0l+YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3
ZDNkMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk
OGVjNWZlMmUtZjNlNC00NmY5LWI2ZGItOTA0YmEzMWRlZWVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxrf3g9HIqk0awv7kDxqQ6JhKzA3idPBoPYe
zCqsyb1/t7tgUGyzuKkuwMnDiF69w6DHiNVL5HF3/1WnXSKQVLwP2+OBwlR5NaXB
E+UEfKq82NXJHdpmJCuwtDLcYAU/GIv9+s7P/n85Tya/5Sj3gRaKDh0clI0aPmpA
PlKK4VGxQ2b8fv2KwaZMl2w1iWw/FXoeuX6x4kOOyCdXHDOZ5RqPhBKaWxh1xWL0
G3G7CfLcPsUYi+VjCVbag2v1u25gVxHwon6Xg6nTKQD2ByovTXsN+vUG35XAGR5y
rcGP5R1y6s3xWWchcKecTR3fsFjpCgSbTKiw53RMbgspA8jyNwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIgjeO3O4OrHgeCGT5jI5Or0L6BtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5
OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvMGFkZDBjNjgtNjMwNy0z
YTFjLTlhNjQtZmQ0NTYxZTU1YWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4
NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz
N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5
NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQABf
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABwiKtfdEYIG1yKwYGmNsLSLXnVb/rlOA7sPD1PIaJ7rnUO02T2V
i2eDyRZ78YFUrs99WQNuvnaV0hCRp/9tPx/9UMuEN1dN4f+f/UcmS9UxGil41dM8
gE08b9/Jp7KvBXe1x9YkY9kRvmPOP6FGUmyBV9l/ldXDYvXpPOtHv08L26iKJMvy
Reql6Ait2EoQoGiyn8E2ek61cDOYzErdOdgFKIRLVUCjWhpZgsgcQqoauggcA4mf
VIIQTkD4Kf0aJ4aJsbYiw63rIDbx3lnlq8dnyUIOegu6MkcoXzoHuzbEhRvTXDqp
OSaXMWbe1mxBCa6oCIi4N2AQaOBxZBZfpaA=
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:37:55 2025 by rpki-client