Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d189c13c-82f8-4a93-80ac-c659e448dd77/3b9d7cb3-27da-3b9c-bbc3-382a6d178788.roa
File: 3b9d7cb3-27da-3b9c-bbc3-382a6d178788.roa (raw, json)
Hash identifier: HNtpMaPa8RjLQzCo0bcwOFIPNjt1qERqPIvRa3cv/8U=
Subject key identifier: A7:A7:0D:9D:75:96:CB:58:8D:D7:96:6B:66:99:7B:BA:05:0B:2B:A0
Certificate issuer: /CN=d189c13c-82f8-4a93-80ac-c659e448dd77
Certificate serial: 010D0C9F432858494303F653CB580F96E341EF38
Authority key identifier: 34:77:9B:3F:83:B7:E0:2E:32:80:F6:25:8B:10:3F:DA:3D:D5:BD:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d189c13c-82f8-4a93-80ac-c659e448dd77.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d189c13c-82f8-4a93-80ac-c659e448dd77/3b9d7cb3-27da-3b9c-bbc3-382a6d178788.roa
Signing time: Fri 21 Mar 2025 13:00:50 +0000
ROA not before: Fri 21 Mar 2025 13:00:50 +0000
ROA not after: Thu 19 Jun 2025 13:00:50 +0000
asID: 401400
IP address blocks: 2602:81a:8000::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:43:03:f6:53:cb:58:0f:96:e3:41:ef:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d189c13c-82f8-4a93-80ac-c659e448dd77
Validity
Not Before: Mar 21 13:00:50 2025 GMT
Not After : Jun 19 13:00:50 2025 GMT
Subject: CN=4affb8ee-6148-485d-8e57-e7c597fdaaed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a8:86:dc:c0:d7:b3:b9:6b:ff:b0:7d:36:9f:
07:cd:09:f9:70:61:d9:e5:6c:48:74:42:21:e2:64:
c0:e8:11:aa:c3:f7:ec:3a:37:3f:d5:5d:46:90:d9:
32:96:52:e8:a4:5d:7c:ab:b0:23:46:d1:40:79:f0:
5f:08:0b:c6:4c:6b:f1:84:89:b7:a6:74:47:20:89:
b3:8d:a8:ce:7c:31:6f:f0:14:c3:bf:2d:e1:b4:96:
1e:97:63:06:5c:00:06:16:f1:9e:56:a5:cd:26:35:
36:e0:b4:94:0b:4c:d5:3c:67:d4:a8:89:86:50:e1:
6c:62:b2:4f:7e:3a:a7:61:a8:c4:9f:c9:54:0c:2d:
2a:cb:9b:d6:1c:37:83:b7:64:dc:b4:d7:3f:b2:00:
ba:c4:81:10:9a:b0:3d:87:79:66:21:1f:24:36:3c:
6f:7a:b6:5c:ac:68:07:1c:ac:b0:7a:c2:ab:e1:39:
16:4f:c9:b9:af:f6:ff:a5:a4:50:a6:b6:24:86:4b:
fa:0d:60:e4:87:75:3c:bf:7c:f4:37:9e:a0:ae:95:
66:35:a1:e7:88:b6:0e:23:ce:da:b6:55:5d:48:8e:
d6:d3:32:57:bb:0d:47:99:95:f7:e4:0d:fd:c6:72:
7b:18:6f:b7:9a:3d:f2:07:27:54:44:1f:15:ef:4e:
8c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A7:0D:9D:75:96:CB:58:8D:D7:96:6B:66:99:7B:BA:05:0B:2B:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d189c13c-82f8-4a93-80ac-c659e448dd77/3b9d7cb3-27da-3b9c-bbc3-382a6d178788.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d189c13c-82f8-4a93-80ac-c659e448dd77/d189c13c-82f8-4a93-80ac-c659e448dd77.crl
X509v3 Authority Key Identifier:
keyid:34:77:9B:3F:83:B7:E0:2E:32:80:F6:25:8B:10:3F:DA:3D:D5:BD:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d189c13c-82f8-4a93-80ac-c659e448dd77.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:81a:8000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:7b:10:ec:ab:df:b6:3e:13:ce:8d:cf:a9:50:b3:15:83:0b:
7e:08:c4:96:04:fd:d2:f5:79:40:fa:0e:27:4e:3b:6b:b1:87:
77:71:23:cb:9e:27:ab:95:65:ad:ff:6c:9e:a4:5c:d5:91:14:
66:55:bf:71:65:99:96:30:4c:4f:19:19:45:77:15:6d:6e:40:
8a:2f:53:39:d9:48:47:d7:d1:1e:67:c8:ad:d4:7a:61:a2:47:
95:72:4b:83:ec:fb:96:99:34:1f:cb:3e:29:31:8f:5c:93:a1:
36:fb:bf:8a:a4:22:5b:3c:5d:04:ba:d5:1e:62:96:9e:34:f3:
b0:05:cf:53:9e:7e:a6:d6:69:7b:5f:c0:35:27:b6:09:1a:8c:
da:ef:98:85:73:f6:f1:0b:f0:c5:b7:24:a2:73:47:bb:de:1e:
db:21:8f:e6:c4:12:68:0d:b5:88:a6:0e:1d:90:ae:ef:f7:7a:
88:02:28:a4:e7:df:72:e6:5b:48:71:29:2e:8c:b7:7a:34:22:
bc:d3:c6:85:b4:7d:21:80:1a:84:84:4d:b3:cd:a0:85:40:78:
e1:48:be:1f:84:af:ad:ea:60:bf:8e:8d:29:12:d4:9b:a3:b9:
0b:31:8a:e1:39:e9:b9:d7:dc:54:7e:af:6d:b0:88:b4:b7:42:
57:74:c0:aa
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElDA/ZTy1gPluNB7zgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDE4OWMxM2MtODJmOC00YTkzLTgwYWMtYzY1OWU0NDhk
ZDc3MB4XDTI1MDMyMTEzMDA1MFoXDTI1MDYxOTEzMDA1MFowLzEtMCsGA1UEAxMk
NGFmZmI4ZWUtNjE0OC00ODVkLThlNTctZTdjNTk3ZmRhYWVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5KiG3MDXs7lr/7B9Np8HzQn5cGHZ5WxIdEIh
4mTA6BGqw/fsOjc/1V1GkNkyllLopF18q7AjRtFAefBfCAvGTGvxhIm3pnRHIImz
jajOfDFv8BTDvy3htJYel2MGXAAGFvGeVqXNJjU24LSUC0zVPGfUqImGUOFsYrJP
fjqnYajEn8lUDC0qy5vWHDeDt2TctNc/sgC6xIEQmrA9h3lmIR8kNjxverZcrGgH
HKywesKr4TkWT8m5r/b/paRQprYkhkv6DWDkh3U8v3z0N56grpVmNaHniLYOI87a
tlVdSI7W0zJXuw1HmZX35A39xnJ7GG+3mj3yBydURB8V706MPwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKenDZ11lstYjdeWa2aZe7oFCyugMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kMTg5
YzEzYy04MmY4LTRhOTMtODBhYy1jNjU5ZTQ0OGRkNzcvM2I5ZDdjYjMtMjdkYS0z
YjljLWJiYzMtMzgyYTZkMTc4Nzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZDE4OWMxM2MtODJmOC00YTkzLTgw
YWMtYzY1OWU0NDhkZDc3L2QxODljMTNjLTgyZjgtNGE5My04MGFjLWM2NTllNDQ4
ZGQ3Ny5jcmwwHwYDVR0jBBgwFoAUNHebP4O34C4ygPYlixA/2j3VvUwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kMTg5YzEzYy04MmY4LTRhOTMtODBhYy1jNjU5
ZTQ0OGRkNzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIIGoAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADd7EOyr37Y+E86Nz6lQsxWDC34IxJYE/dL1eUD6DidOO2uxh3dx
I8ueJ6uVZa3/bJ6kXNWRFGZVv3FlmZYwTE8ZGUV3FW1uQIovUznZSEfX0R5nyK3U
emGiR5VyS4Ps+5aZNB/LPikxj1yToTb7v4qkIls8XQS61R5ilp4087AFz1OefqbW
aXtfwDUntgkajNrvmIVz9vEL8MW3JKJzR7veHtshj+bEEmgNtYimDh2Qru/3eogC
KKTn33LmW0hxKS6Mt3o0IrzTxoW0fSGAGoSETbPNoIVAeOFIvh+Er63qYL+OjSkS
1JujuQsxiuE56bnX3FR+r22wiLS3Qld0wKo=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:01:35 2025 by rpki-client