Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/4d778317-bfa9-32da-b5ef-d588603e5ac9.roa
File: 4d778317-bfa9-32da-b5ef-d588603e5ac9.roa (raw, json)
Hash identifier: I/ERqhb53s/AbvaoO2wt/A4ib52JEZ2MfUDMo+Z4gZY=
Subject key identifier: 49:C8:53:3E:D7:EA:92:0B:FF:E8:E1:DA:49:EF:84:7A:E5:2D:5B:55
Certificate issuer: /CN=ff8cfb76-d3cf-4da6-bfe0-361d7750c902
Certificate serial: 010D0C9F432858493243D6FAC884270D4E542600
Authority key identifier: 71:37:FE:CB:C1:74:3F:E3:2B:47:1B:A9:5E:1E:A2:6A:27:0E:48:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/4d778317-bfa9-32da-b5ef-d588603e5ac9.roa
Signing time: Sat 15 Mar 2025 13:00:52 +0000
ROA not before: Sat 15 Mar 2025 13:00:52 +0000
ROA not after: Fri 13 Jun 2025 13:00:52 +0000
asID: 397026
IP address blocks: 2604:f840::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:32:43:d6:fa:c8:84:27:0d:4e:54:26:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8cfb76-d3cf-4da6-bfe0-361d7750c902
Validity
Not Before: Mar 15 13:00:52 2025 GMT
Not After : Jun 13 13:00:52 2025 GMT
Subject: CN=1cf21ef8-01b9-4c82-a527-e38cf926189a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ca:6e:0f:00:8d:23:ae:18:a7:84:d7:7c:c9:
66:a3:1c:67:53:73:61:f5:24:e3:d8:d9:f3:42:cf:
a9:d6:08:1f:5a:87:23:18:76:3f:7e:f7:c7:28:77:
ac:46:09:d2:be:16:47:b3:f5:c6:56:cb:5b:d7:a7:
37:45:d2:e4:e8:84:4f:7b:1e:53:64:92:b0:35:f3:
c4:da:1f:21:35:17:66:1a:11:9c:85:18:a3:ed:c8:
1a:ee:21:a7:2c:12:73:38:75:41:36:e4:93:68:b2:
64:dc:78:85:02:6c:2e:ac:bd:eb:7b:2b:aa:f4:63:
da:4c:38:d7:90:73:c6:d6:44:12:a8:e1:4a:f6:f3:
e9:3a:ee:fa:58:80:0a:bc:2d:a2:85:6a:2f:19:40:
4e:78:38:46:ac:78:a4:76:82:6f:b8:2b:d7:71:fa:
ce:88:b8:ff:bb:b4:16:f2:3d:ef:4a:34:a5:4e:5c:
16:1a:42:5a:41:12:39:9f:51:ed:c1:d6:91:79:c2:
b1:cd:cb:d7:86:56:a5:6e:49:be:5b:c5:c7:13:fc:
9c:95:02:19:a9:05:89:34:f2:2e:94:15:67:2a:1d:
b4:a5:df:90:60:df:0d:3b:8b:fb:55:94:67:3d:40:
4a:91:8b:e4:55:22:f2:5b:20:be:bd:9a:95:02:b7:
62:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C8:53:3E:D7:EA:92:0B:FF:E8:E1:DA:49:EF:84:7A:E5:2D:5B:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/4d778317-bfa9-32da-b5ef-d588603e5ac9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.crl
X509v3 Authority Key Identifier:
keyid:71:37:FE:CB:C1:74:3F:E3:2B:47:1B:A9:5E:1E:A2:6A:27:0E:48:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:f840::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:93:3d:0a:5b:b4:10:c8:5b:c0:b8:98:d6:d4:21:1a:2d:6e:
34:0f:60:cb:12:64:54:96:b5:d2:23:98:d5:ab:f1:81:d5:78:
2b:bf:5b:a2:45:2c:00:88:ad:70:2b:76:7c:7f:28:e5:19:1a:
ae:f0:e4:34:54:ab:7f:d2:d5:2a:b9:61:4c:7a:7b:20:e1:e4:
2e:7a:ba:a0:88:be:66:36:40:77:5e:0f:0a:7d:75:6b:90:66:
6b:44:6d:57:fc:a1:20:ec:fd:99:4e:7b:02:3b:18:c4:ca:04:
4d:c8:d0:64:b5:aa:54:04:18:26:f7:ec:87:c5:5f:0d:1d:d5:
43:78:ec:c8:19:f1:ad:51:be:32:90:79:5b:b2:36:ba:78:9a:
14:e1:82:f5:5d:c3:1f:7f:0d:e0:30:40:e2:c6:53:52:10:ad:
53:8a:b0:41:c6:1c:bd:21:5e:81:31:8a:e3:28:c4:0c:36:d2:
e3:c9:63:5f:e1:e7:e4:ca:60:97:e2:a2:e4:39:2b:6f:c7:9d:
b5:2a:8f:ac:81:99:c6:a5:94:f8:3e:9e:e1:f2:2e:7c:72:af:
ea:81:ac:d0:96:36:02:33:1a:40:7a:0c:11:2d:b6:d9:3d:3b:
cf:88:5f:d6:00:29:79:bc:dd:d4:99:fc:73:e8:ca:c4:5f:0f:
cd:dc:2f:39
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkyQ9b6yIQnDU5UJgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmY4Y2ZiNzYtZDNjZi00ZGE2LWJmZTAtMzYxZDc3NTBj
OTAyMB4XDTI1MDMxNTEzMDA1MloXDTI1MDYxMzEzMDA1MlowLzEtMCsGA1UEAxMk
MWNmMjFlZjgtMDFiOS00YzgyLWE1MjctZTM4Y2Y5MjYxODlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8puDwCNI64Yp4TXfMlmoxxnU3Nh9STj2Nnz
Qs+p1ggfWocjGHY/fvfHKHesRgnSvhZHs/XGVstb16c3RdLk6IRPex5TZJKwNfPE
2h8hNRdmGhGchRij7cga7iGnLBJzOHVBNuSTaLJk3HiFAmwurL3reyuq9GPaTDjX
kHPG1kQSqOFK9vPpOu76WIAKvC2ihWovGUBOeDhGrHikdoJvuCvXcfrOiLj/u7QW
8j3vSjSlTlwWGkJaQRI5n1HtwdaRecKxzcvXhlalbkm+W8XHE/yclQIZqQWJNPIu
lBVnKh20pd+QYN8NO4v7VZRnPUBKkYvkVSLyWyC+vZqVArdi6QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFEnIUz7X6pIL/+jh2knvhHrlLVtVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZjhj
ZmI3Ni1kM2NmLTRkYTYtYmZlMC0zNjFkNzc1MGM5MDIvNGQ3NzgzMTctYmZhOS0z
MmRhLWI1ZWYtZDU4ODYwM2U1YWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmY4Y2ZiNzYtZDNjZi00ZGE2LWJm
ZTAtMzYxZDc3NTBjOTAyL2ZmOGNmYjc2LWQzY2YtNGRhNi1iZmUwLTM2MWQ3NzUw
YzkwMi5jcmwwHwYDVR0jBBgwFoAUcTf+y8F0P+MrRxupXh6iaicOSMAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mZjhjZmI3Ni1kM2NmLTRkYTYtYmZlMC0zNjFk
Nzc1MGM5MDIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgT4QDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAtkz0KW7QQyFvAuJjW1CEaLW40D2DLEmRUlrXSI5jVq/GB1Xgrv1ui
RSwAiK1wK3Z8fyjlGRqu8OQ0VKt/0tUquWFMensg4eQuerqgiL5mNkB3Xg8KfXVr
kGZrRG1X/KEg7P2ZTnsCOxjEygRNyNBktapUBBgm9+yHxV8NHdVDeOzIGfGtUb4y
kHlbsja6eJoU4YL1XcMffw3gMEDixlNSEK1TirBBxhy9IV6BMYrjKMQMNtLjyWNf
4efkymCX4qLkOStvx521Ko+sgZnGpZT4Pp7h8i58cq/qgazQljYCMxpAegwRLbbZ
PTvPiF/WACl5vN3Umfxz6MrEXw/N3C85
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:20:16 2025 by rpki-client