Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/3428cc45-73a3-37b3-a9c8-d2366e878b14.roa
File: 3428cc45-73a3-37b3-a9c8-d2366e878b14.roa (raw, json)
Hash identifier: yjD/BkRn9Oc/L76amRINS5wdFf4hSJI14Fd5HL4RIWE=
Subject key identifier: 78:1C:6D:6D:69:89:A1:83:29:7F:C5:10:48:AD:71:89:2D:F2:1B:1A
Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial: 010D0C9F4328584894A5ED54C342447A657F4180
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/3428cc45-73a3-37b3-a9c8-d2366e878b14.roa
Signing time: Sat 18 Jan 2025 02:00:38 +0000
ROA not before: Sat 18 Jan 2025 02:00:38 +0000
ROA not after: Fri 18 Apr 2025 01:00:38 +0000
asID: 11055
IP address blocks: 2605:4a80:ef01::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:94:a5:ed:54:c3:42:44:7a:65:7f:41:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Validity
Not Before: Jan 18 02:00:38 2025 GMT
Not After : Apr 18 01:00:38 2025 GMT
Subject: CN=de694dfb-a8e1-4163-8a18-e145b17ffec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:de:31:0e:8f:85:65:89:52:d3:92:3c:2c:ff:
9d:db:a5:51:cf:d2:41:8d:7c:90:07:8e:33:b4:cd:
2c:89:bb:c7:d8:a1:ec:6b:8b:56:6d:6b:21:19:60:
02:34:30:7c:44:53:9d:81:08:41:3e:68:bd:0a:e2:
28:b3:10:d6:31:9c:0e:f2:29:04:58:7c:74:c6:cd:
01:ad:63:82:82:cc:a2:a6:c9:23:53:a6:5b:58:95:
70:71:0f:b9:f9:ee:3e:e3:99:b0:b7:46:d5:79:33:
72:79:e3:4a:db:60:28:64:02:d3:73:f5:65:58:54:
bd:fe:ee:8f:a4:68:7c:3d:f2:f7:f8:83:57:d7:6d:
9e:2c:5d:74:cf:94:0c:f1:da:97:83:30:98:a5:ff:
8d:20:78:33:a5:d8:f3:30:54:da:9d:c9:09:7c:05:
45:29:53:b9:0f:5d:bf:ed:00:55:83:d9:85:92:fa:
40:70:96:3b:0c:88:78:b3:28:b3:3e:22:cf:fa:54:
3d:1f:da:ae:e0:95:a0:09:3e:50:fc:a7:00:d9:50:
6f:fe:a6:5f:82:d1:06:a5:dc:39:0e:88:bd:e1:6d:
88:15:35:90:f7:21:60:bc:45:44:c6:ef:a1:a8:e5:
1e:87:bf:40:1a:c9:a6:e0:4f:1e:ef:ab:42:68:28:
8d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:1C:6D:6D:69:89:A1:83:29:7F:C5:10:48:AD:71:89:2D:F2:1B:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/3428cc45-73a3-37b3-a9c8-d2366e878b14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
X509v3 Authority Key Identifier:
keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:4a80:ef01::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:f6:e0:94:a3:4f:72:f2:e8:6c:77:8c:38:c5:af:11:51:33:
55:70:b3:45:86:66:68:c9:40:8a:bb:bd:44:62:f7:8c:10:eb:
70:2e:c2:f7:2e:f2:a2:d8:d2:9a:16:14:3d:d0:ff:4f:f3:e2:
02:93:0b:75:12:7a:e5:ad:23:63:1e:65:ab:ae:a9:51:7b:5a:
84:53:7c:a7:b4:b2:c5:b5:6c:f7:c2:e1:79:56:ee:41:78:97:
96:6c:34:f4:6b:f5:65:44:49:4d:b6:17:63:28:ff:4a:b4:1f:
94:0d:c5:ba:0d:7c:3e:a3:6b:ed:67:14:36:ce:e3:65:48:e6:
7c:52:25:c9:a6:19:b5:6d:42:e4:f2:9d:c8:fc:3c:33:7b:e7:
a1:ed:8b:93:0f:a1:71:3b:4c:86:8b:05:5c:fa:88:f2:c9:7e:
1d:64:2f:ee:75:a4:cd:cf:4a:5e:82:b0:a6:62:3b:d6:e3:1f:
26:da:0f:a9:8a:e5:48:34:f7:7c:51:5a:9a:23:85:e9:f5:94:
b8:5d:f2:a6:b0:08:8b:5b:4f:66:7f:89:a1:bc:43:c3:d2:a3:
c1:77:46:96:a7:55:e5:da:b6:70:d1:36:76:7c:c5:9f:7a:c1:
0b:93:67:86:8f:b9:9a:78:55:1c:80:33:b1:43:10:ba:b4:7c:
47:10:5d:e1
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiUpe1Uw0JEemV/QYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3
MDg1MB4XDTI1MDExODAyMDAzOFoXDTI1MDQxODAxMDAzOFowLzEtMCsGA1UEAxMk
ZGU2OTRkZmItYThlMS00MTYzLThhMTgtZTE0NWIxN2ZmZWM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyN4xDo+FZYlS05I8LP+d26VRz9JBjXyQB44z
tM0sibvH2KHsa4tWbWshGWACNDB8RFOdgQhBPmi9CuIosxDWMZwO8ikEWHx0xs0B
rWOCgsyipskjU6ZbWJVwcQ+5+e4+45mwt0bVeTNyeeNK22AoZALTc/VlWFS9/u6P
pGh8PfL3+INX122eLF10z5QM8dqXgzCYpf+NIHgzpdjzMFTanckJfAVFKVO5D12/
7QBVg9mFkvpAcJY7DIh4syizPiLP+lQ9H9qu4JWgCT5Q/KcA2VBv/qZfgtEGpdw5
Doi94W2IFTWQ9yFgvEVExu+hqOUeh79AGsmm4E8e76tCaCiNoQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHgcbW1piaGDKX/FEEitcYkt8hsaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2
M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvMzQyOGNjNDUtNzNhMy0z
N2IzLWE5YzgtZDIzNjZlODc4YjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm
YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3
NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2
NDNhNzcwODUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgVKgO8B
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAb24JSjT3Ly6Gx3jDjFrxFRM1Vws0WGZmjJQIq7vURi94wQ63Au
wvcu8qLY0poWFD3Q/0/z4gKTC3USeuWtI2MeZauuqVF7WoRTfKe0ssW1bPfC4XlW
7kF4l5ZsNPRr9WVESU22F2Mo/0q0H5QNxboNfD6ja+1nFDbO42VI5nxSJcmmGbVt
QuTyncj8PDN756Hti5MPoXE7TIaLBVz6iPLJfh1kL+51pM3PSl6CsKZiO9bjHyba
D6mK5Ug093xRWpojhen1lLhd8qawCItbT2Z/iaG8Q8PSo8F3RpanVeXatnDRNnZ8
xZ96wQuTZ4aPuZp4VRyAM7FDELq0fEcQXeE=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:54:48 2025 by rpki-client