Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/d93dda25-13c9-3b65-a1fd-a54bf749998e.roa
File: d93dda25-13c9-3b65-a1fd-a54bf749998e.roa (raw, json)
Hash identifier: jdqdLapun8NUHWTjrQo6wY5Nx+VfaU2VzY+ZQcfOXKc=
Subject key identifier: 4A:35:AE:38:EB:BA:FD:72:D5:3C:57:DD:72:B2:EF:67:12:4F:CC:95
Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial: 010D0C9F43285848A830AA053D269E4966B73180
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/d93dda25-13c9-3b65-a1fd-a54bf749998e.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 9009
IP address blocks: 2607:740:1c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:aa:05:3d:26:9e:49:66:b7:31:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=6d96e909-cac0-4b9a-85d4-28519578fb68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:20:28:9f:64:50:55:dc:43:59:9f:16:43:d8:
d1:b6:61:ff:48:94:ca:ee:ef:14:e7:38:88:de:8c:
41:38:11:40:13:c9:3c:63:b8:81:21:65:65:25:94:
d1:fc:a4:34:e5:66:06:f1:6f:13:dc:c0:96:ec:5b:
19:4e:95:5e:e4:6c:43:22:48:d3:d2:b5:9b:78:cd:
b7:9d:00:db:1b:b7:9c:0b:19:0e:7f:59:03:75:6c:
35:3b:f2:0c:34:42:7f:51:8e:b3:41:54:6a:ab:f9:
bf:df:fa:80:de:3e:0b:32:29:26:f7:61:19:ca:a5:
a4:93:0e:4e:27:bb:67:6a:94:0b:df:13:b6:37:0c:
72:c6:0c:f8:a6:d2:51:39:db:0d:b4:c2:b0:26:6d:
86:70:4a:1f:8a:22:1d:a7:c7:83:86:f8:70:5c:24:
61:3d:ac:74:b6:4b:1b:ad:08:80:60:fe:0a:83:f4:
f5:cd:26:64:ad:4a:17:58:a2:ac:a8:be:68:69:f7:
3b:3d:3b:87:0c:0c:9e:89:30:af:ad:9d:56:bf:53:
7f:78:cb:88:43:78:db:58:4b:e9:59:43:60:a5:2f:
b5:e5:2d:e3:78:51:b2:01:0b:5f:3a:5d:ef:e5:56:
68:33:ed:d0:8d:a5:45:25:2f:64:fe:41:38:f9:3e:
b2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:35:AE:38:EB:BA:FD:72:D5:3C:57:DD:72:B2:EF:67:12:4F:CC:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/d93dda25-13c9-3b65-a1fd-a54bf749998e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
X509v3 Authority Key Identifier:
keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:740:1c::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:a7:d3:b6:2f:1e:0c:32:f2:5c:79:dd:56:be:6b:83:0e:7c:
ae:6e:e0:fa:19:3e:f0:b9:fd:81:7b:6b:a0:21:f1:f6:64:a8:
12:f3:a6:4d:56:6c:4e:b5:dd:2f:a7:93:6b:70:82:a8:3f:86:
82:b0:25:ec:bc:41:4b:04:8a:4f:83:8b:8d:f4:29:8a:59:a1:
38:a3:98:bf:a3:b0:e0:09:ae:ee:18:4b:e9:a0:0b:d3:51:98:
3f:e5:b0:1d:77:ab:f9:eb:6b:eb:3e:bf:24:62:57:b2:44:fc:
78:0c:a4:56:01:89:93:57:7a:b0:45:e7:81:62:1c:12:97:91:
f9:4e:0d:43:a1:d6:fc:7a:a3:1f:c9:a7:7d:ba:9f:0a:24:a6:
ba:31:3e:8a:f2:88:a0:4a:f8:9d:f1:a1:99:e9:c8:97:de:e4:
fd:3c:da:cf:d7:88:a5:07:9f:bf:46:a8:3f:9e:cf:a6:3f:da:
77:80:69:f0:9e:92:ea:3e:da:7c:08:66:59:0c:b8:4b:9d:14:
c1:a2:e6:37:79:9b:92:e8:2a:64:4e:5b:99:e0:16:f6:7f:51:
16:64:06:15:84:c7:95:3f:17:d4:a1:d5:f2:d2:9d:84:12:2a:
80:d2:9a:2f:47:0f:64:4a:5f:9b:64:cb:a9:93:d8:4e:b3:d4:
52:de:02:90
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEioMKoFPSaeSWa3MYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3
ZDNkMB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk
NmQ5NmU5MDktY2FjMC00YjlhLTg1ZDQtMjg1MTk1NzhmYjY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSAon2RQVdxDWZ8WQ9jRtmH/SJTK7u8U5ziI
3oxBOBFAE8k8Y7iBIWVlJZTR/KQ05WYG8W8T3MCW7FsZTpVe5GxDIkjT0rWbeM23
nQDbG7ecCxkOf1kDdWw1O/IMNEJ/UY6zQVRqq/m/3/qA3j4LMikm92EZyqWkkw5O
J7tnapQL3xO2Nwxyxgz4ptJROdsNtMKwJm2GcEofiiIdp8eDhvhwXCRhPax0tksb
rQiAYP4Kg/T1zSZkrUoXWKKsqL5oafc7PTuHDAyeiTCvrZ1Wv1N/eMuIQ3jbWEvp
WUNgpS+15S3jeFGyAQtfOl3v5VZoM+3QjaVFJS9k/kE4+T6ykQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEo1rjjruv1y1TxX3XKy72cST8yVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5
OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvZDkzZGRhMjUtMTNjOS0z
YjY1LWExZmQtYTU0YmY3NDk5OThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4
NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz
N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5
NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAAc
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABmn07YvHgwy8lx53Va+a4MOfK5u4PoZPvC5/YF7a6Ah8fZkqBLz
pk1WbE613S+nk2twgqg/hoKwJey8QUsEik+Di430KYpZoTijmL+jsOAJru4YS+mg
C9NRmD/lsB13q/nra+s+vyRiV7JE/HgMpFYBiZNXerBF54FiHBKXkflODUOh1vx6
ox/Jp326nwokproxPoryiKBK+J3xoZnpyJfe5P082s/XiKUHn79GqD+ez6Y/2neA
afCekuo+2nwIZlkMuEudFMGi5jd5m5LoKmROW5ngFvZ/URZkBhWEx5U/F9Sh1fLS
nYQSKoDSmi9HD2RKX5tky6mT2E6z1FLeApA=
-----END CERTIFICATE-----
Generated at Mon Apr 7 11:53:00 2025 by rpki-client