Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/ba7664f1-2748-3772-a538-56d297826de2.roa
File: ba7664f1-2748-3772-a538-56d297826de2.roa (raw, json)
Hash identifier: nB7emZ/De1QvLpg+SdJD6NMgWsYECvGPyUBbDLLHHvQ=
Subject key identifier: 4F:93:E2:C3:B3:03:7D:3A:57:63:56:31:D8:A6:0D:FA:57:71:B5:F7
Certificate issuer: /CN=c3c17db7-204c-41e2-85ca-6a5a448a8b88
Certificate serial: 010D0C9F432858492D92ED057F1B5D97A344E840
Authority key identifier: 7D:2D:BA:FF:43:DB:E9:72:96:E9:45:87:95:5C:45:72:54:D4:6B:83
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/ba7664f1-2748-3772-a538-56d297826de2.roa
Signing time: Thu 13 Mar 2025 20:41:14 +0000
ROA not before: Thu 13 Mar 2025 20:41:14 +0000
ROA not after: Wed 11 Jun 2025 20:41:14 +0000
asID: 214609
IP address blocks: 2607:1c0:2000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2d:92:ed:05:7f:1b:5d:97:a3:44:e8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c17db7-204c-41e2-85ca-6a5a448a8b88
Validity
Not Before: Mar 13 20:41:14 2025 GMT
Not After : Jun 11 20:41:14 2025 GMT
Subject: CN=027c4ba9-c2dc-4350-aaef-bfebd200afb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5d:67:25:41:c3:ae:08:f5:28:c1:53:3f:16:
d7:4d:1e:6e:d4:b7:bb:30:0a:db:e6:b1:bc:43:d4:
89:05:77:04:30:1d:94:f2:6b:f9:47:55:01:1b:3f:
b3:9c:9d:1a:48:8d:6f:04:d1:91:c6:e5:e5:7d:1f:
21:25:b6:0e:23:42:fe:d1:58:49:ce:39:c6:f3:14:
86:ad:0c:7f:cd:f3:bb:d5:03:71:36:77:92:87:2a:
81:de:e6:f1:a1:61:0a:be:1e:b9:f8:38:91:d3:73:
bc:04:d9:b9:69:54:ec:22:7a:88:13:67:33:76:68:
4e:06:fc:36:95:7c:a5:5a:f7:c1:52:09:e9:27:4a:
83:3d:14:17:a5:61:f4:27:53:3c:cb:f6:97:32:23:
db:46:e9:e3:51:23:e7:12:49:fb:fe:5a:ca:6b:38:
da:9c:d9:54:4b:2b:1c:a8:fe:ac:e8:26:5e:70:1e:
7e:8d:31:db:ab:08:91:96:dd:71:15:7f:26:85:6e:
3b:73:ce:da:53:dd:f6:36:da:15:56:86:77:d8:c7:
a9:06:b0:f7:7c:5b:d3:d4:e9:35:ac:66:5b:9a:a3:
3f:58:63:2d:eb:e6:58:a4:0b:9e:48:a7:8b:5e:4a:
cf:4c:94:5a:73:85:d9:67:e0:0f:39:cb:a1:cd:71:
43:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:93:E2:C3:B3:03:7D:3A:57:63:56:31:D8:A6:0D:FA:57:71:B5:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/ba7664f1-2748-3772-a538-56d297826de2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/c3c17db7-204c-41e2-85ca-6a5a448a8b88.crl
X509v3 Authority Key Identifier:
keyid:7D:2D:BA:FF:43:DB:E9:72:96:E9:45:87:95:5C:45:72:54:D4:6B:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:1c0:2000::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:7c:40:75:8f:c3:33:f3:34:cf:0e:48:ed:31:0b:93:62:23:
2a:80:16:40:82:86:fc:20:81:6d:3c:62:61:a9:8a:86:02:12:
21:37:fa:dd:c5:31:c6:a1:5b:54:ef:1c:73:18:6f:f7:8f:99:
26:1f:5d:cd:ed:23:99:86:8e:2c:a4:0b:ef:89:c9:32:89:01:
9a:ff:ee:99:06:a2:b8:9e:f7:d1:c6:64:ff:6f:46:b8:b8:cb:
32:67:03:b2:9e:77:75:0a:34:a9:d3:2d:46:c2:aa:c1:04:17:
7b:4b:d2:e7:3e:09:ed:be:73:f9:e9:0c:36:f4:c7:7b:dd:27:
bf:55:4b:c2:22:e5:aa:4b:91:bf:c1:c1:5d:0b:b6:1b:2f:38:
39:40:76:a9:2c:cd:fc:80:bf:8e:20:a2:d1:58:b5:a9:86:2c:
be:63:40:9a:73:ad:68:26:d4:e0:20:b3:5a:6f:cb:8c:ef:09:
09:2f:35:47:9f:27:d3:85:3d:92:a9:53:ae:a1:23:b2:8b:df:
23:a7:16:0e:bf:a3:fa:c3:fc:6e:77:d5:af:9e:32:c2:22:a8:
0f:89:76:6a:e8:34:ac:27:a6:fd:a7:f6:a3:55:ac:77:cc:2f:
ce:3b:63:30:d3:a4:15:3e:8e:a4:05:b7:f3:6d:f4:fe:ff:51:
61:e2:76:d0
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEktku0Ffxtdl6NE6EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzNjMTdkYjctMjA0Yy00MWUyLTg1Y2EtNmE1YTQ0OGE4
Yjg4MB4XDTI1MDMxMzIwNDExNFoXDTI1MDYxMTIwNDExNFowLzEtMCsGA1UEAxMk
MDI3YzRiYTktYzJkYy00MzUwLWFhZWYtYmZlYmQyMDBhZmI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzV1nJUHDrgj1KMFTPxbXTR5u1Le7MArb5rG8
Q9SJBXcEMB2U8mv5R1UBGz+znJ0aSI1vBNGRxuXlfR8hJbYOI0L+0VhJzjnG8xSG
rQx/zfO71QNxNneShyqB3ubxoWEKvh65+DiR03O8BNm5aVTsInqIE2czdmhOBvw2
lXylWvfBUgnpJ0qDPRQXpWH0J1M8y/aXMiPbRunjUSPnEkn7/lrKazjanNlUSysc
qP6s6CZecB5+jTHbqwiRlt1xFX8mhW47c87aU932NtoVVoZ32MepBrD3fFvT1Ok1
rGZbmqM/WGMt6+ZYpAueSKeLXkrPTJRac4XZZ+APOcuhzXFDFQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFE+T4sOzA306V2NWMdimDfpXcbX3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jM2Mx
N2RiNy0yMDRjLTQxZTItODVjYS02YTVhNDQ4YThiODgvYmE3NjY0ZjEtMjc0OC0z
NzcyLWE1MzgtNTZkMjk3ODI2ZGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzNjMTdkYjctMjA0Yy00MWUyLTg1
Y2EtNmE1YTQ0OGE4Yjg4L2MzYzE3ZGI3LTIwNGMtNDFlMi04NWNhLTZhNWE0NDhh
OGI4OC5jcmwwHwYDVR0jBBgwFoAUfS26/0Pb6XKW6UWHlVxFclTUa4MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jM2MxN2RiNy0yMDRjLTQxZTItODVjYS02YTVh
NDQ4YThiODguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgcBwCAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAInxAdY/DM/M0zw5I7TELk2IjKoAWQIKG/CCBbTxiYamKhgISITf6
3cUxxqFbVO8ccxhv94+ZJh9dze0jmYaOLKQL74nJMokBmv/umQaiuJ730cZk/29G
uLjLMmcDsp53dQo0qdMtRsKqwQQXe0vS5z4J7b5z+ekMNvTHe90nv1VLwiLlqkuR
v8HBXQu2Gy84OUB2qSzN/IC/jiCi0Vi1qYYsvmNAmnOtaCbU4CCzWm/LjO8JCS81
R58n04U9kqlTrqEjsovfI6cWDr+j+sP8bnfVr54ywiKoD4l2aug0rCem/af2o1Ws
d8wvzjtjMNOkFT6OpAW38230/v9RYeJ20A==
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:47:01 2025 by rpki-client