Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/9bfefc0e-841e-32a7-adca-7e24076f32aa.roa
File: 9bfefc0e-841e-32a7-adca-7e24076f32aa.roa (raw, json)
Hash identifier: JyQCaKo4rjTg9i5j5tH9wRqj3dNnZLnDXhIlB6A+OGw=
Subject key identifier: 09:E8:BC:B6:3A:29:36:08:44:65:DE:F8:28:D8:3D:13:06:70:D0:91
Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial: 010D0C9F432858494E2EBACABA7010A8C0670000
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/9bfefc0e-841e-32a7-adca-7e24076f32aa.roa
Signing time: Tue 25 Mar 2025 13:00:51 +0000
ROA not before: Tue 25 Mar 2025 13:00:51 +0000
ROA not after: Mon 23 Jun 2025 13:00:51 +0000
asID: 11055
IP address blocks: 2605:4a80:ef00::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4e:2e:ba:ca:ba:70:10:a8:c0:67:00:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Validity
Not Before: Mar 25 13:00:51 2025 GMT
Not After : Jun 23 13:00:51 2025 GMT
Subject: CN=4541bca6-7d1d-4f5b-a005-e4d35d81843c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d5:22:8c:ed:80:86:a6:65:bf:4f:a6:ea:a4:
43:07:ae:11:fe:06:86:07:1c:fd:f7:96:a6:69:88:
82:83:c4:7d:a3:e8:d5:4f:3a:76:bb:3a:57:05:d6:
d0:c4:04:9f:da:1e:be:93:68:53:6d:c7:a5:94:82:
97:00:45:f6:3f:4f:86:26:8a:a8:fc:9d:12:a6:66:
c7:cc:54:2a:39:1d:ae:ce:40:c3:c5:f2:20:d8:27:
34:02:91:dd:ad:89:55:75:04:dc:fc:f1:e2:73:a0:
f7:26:06:1e:03:95:04:a0:cd:74:0b:69:5d:d5:23:
ab:d5:6c:85:2d:89:85:3f:df:7a:52:8f:1c:1b:b2:
c0:65:ab:ae:09:17:c1:a1:80:7b:d3:31:77:30:09:
30:e1:29:3a:bd:82:27:42:31:77:30:bc:4a:8a:48:
3b:d5:2f:b4:d4:c1:ae:e7:0f:37:27:25:49:50:eb:
e1:e5:5a:fa:ee:16:29:1e:29:4e:ae:51:12:dd:d7:
49:37:d6:38:f6:99:32:e4:f8:09:34:d1:eb:dc:10:
28:5d:18:bd:c1:aa:22:e4:1c:41:32:90:99:b1:13:
36:d4:0e:7a:be:26:98:19:0d:31:7b:2b:5a:b9:6c:
79:71:ca:34:73:ee:d6:cc:fa:a0:0b:b7:21:78:eb:
d4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E8:BC:B6:3A:29:36:08:44:65:DE:F8:28:D8:3D:13:06:70:D0:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/9bfefc0e-841e-32a7-adca-7e24076f32aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
X509v3 Authority Key Identifier:
keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:4a80:ef00::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:ec:53:75:d8:7f:41:75:45:22:c7:f2:4a:bf:ff:91:55:97:
48:46:cf:0e:8f:ba:32:2d:d3:41:de:b5:a9:9e:45:77:ea:98:
43:13:73:db:d1:f1:99:be:e5:63:2b:88:fb:df:8d:72:ba:03:
41:ec:e6:bb:df:aa:55:60:d9:3b:79:96:42:7a:88:df:1c:f5:
3c:24:d1:fb:fe:6c:fd:2a:d4:43:66:34:ec:a9:19:ef:a3:b6:
18:62:97:30:44:89:76:81:d3:92:1f:2b:98:ed:9f:4f:de:95:
bc:bc:f4:20:40:12:75:b4:c7:c1:5a:5f:d4:92:85:7a:84:5f:
bb:d8:db:3a:64:60:83:ab:b8:44:3d:74:25:8e:aa:ba:99:e7:
7b:45:d9:74:63:4b:c3:4f:86:b2:ac:2f:27:e4:c4:fe:93:f4:
3c:ab:9d:9d:70:18:71:d2:65:d4:ae:e2:c9:80:21:4d:4e:e0:
7c:bd:e3:09:e8:8b:8d:a3:bc:15:6d:41:07:f8:b4:87:81:f9:
60:83:b2:6a:ed:5e:de:c1:2e:3e:c0:cb:8d:57:2a:c7:69:39:
e9:af:86:3f:e6:d6:7e:6b:a3:d9:00:63:45:ba:9a:e3:be:76:
00:80:f3:a4:e0:ae:b3:b6:a5:77:0c:e8:a1:81:86:34:34:5b:
3c:5c:b7:ae
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWElOLrrKunAQqMBnAAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3
MDg1MB4XDTI1MDMyNTEzMDA1MVoXDTI1MDYyMzEzMDA1MVowLzEtMCsGA1UEAxMk
NDU0MWJjYTYtN2QxZC00ZjViLWEwMDUtZTRkMzVkODE4NDNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdUijO2AhqZlv0+m6qRDB64R/gaGBxz995am
aYiCg8R9o+jVTzp2uzpXBdbQxASf2h6+k2hTbcellIKXAEX2P0+GJoqo/J0SpmbH
zFQqOR2uzkDDxfIg2Cc0ApHdrYlVdQTc/PHic6D3JgYeA5UEoM10C2ld1SOr1WyF
LYmFP996Uo8cG7LAZauuCRfBoYB70zF3MAkw4Sk6vYInQjF3MLxKikg71S+01MGu
5w83JyVJUOvh5Vr67hYpHilOrlES3ddJN9Y49pky5PgJNNHr3BAoXRi9waoi5BxB
MpCZsRM21A56viaYGQ0xeytauWx5cco0c+7WzPqgC7cheOvUjQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFAnovLY6KTYIRGXe+CjYPRMGcNCRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2
M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvOWJmZWZjMGUtODQxZS0z
MmE3LWFkY2EtN2UyNDA3NmYzMmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm
YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3
NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2
NDNhNzcwODUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgVKgO8w
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEANOxTddh/QXVFIsfySr//kVWXSEbPDo+6Mi3TQd61qZ5Fd+qYQxNz
29Hxmb7lYyuI+9+NcroDQezmu9+qVWDZO3mWQnqI3xz1PCTR+/5s/SrUQ2Y07KkZ
76O2GGKXMESJdoHTkh8rmO2fT96VvLz0IEASdbTHwVpf1JKFeoRfu9jbOmRgg6u4
RD10JY6qupnne0XZdGNLw0+GsqwvJ+TE/pP0PKudnXAYcdJl1K7iyYAhTU7gfL3j
CeiLjaO8FW1BB/i0h4H5YIOyau1e3sEuPsDLjVcqx2k56a+GP+bWfmuj2QBjRbqa
4752AIDzpOCus7aldwzooYGGNDRbPFy3rg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:30:08 2025 by rpki-client