Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab48051f-b089-4872-acc6-a73a442e9736/5447fca3-a5a8-3b61-90b0-e825d8612614.roa
File: 5447fca3-a5a8-3b61-90b0-e825d8612614.roa (raw, json)
Hash identifier: YM1gVFR1jxAz+ztMQiPNh0xeXbNOy9RCKtfnp1vjnYw=
Subject key identifier: 45:CE:43:3E:32:7B:FF:14:15:14:29:72:70:99:75:31:A2:88:83:2E
Certificate issuer: /CN=ab48051f-b089-4872-acc6-a73a442e9736
Certificate serial: 010D0C9F43285849203C1715779CDEF632EC1500
Authority key identifier: 2B:54:20:F2:AF:8F:AF:36:32:D0:F6:01:84:AB:37:C8:43:29:28:26
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab48051f-b089-4872-acc6-a73a442e9736.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab48051f-b089-4872-acc6-a73a442e9736/5447fca3-a5a8-3b61-90b0-e825d8612614.roa
Signing time: Sun 09 Mar 2025 02:00:39 +0000
ROA not before: Sun 09 Mar 2025 02:00:39 +0000
ROA not after: Sat 07 Jun 2025 01:00:39 +0000
asID: 401008
IP address blocks: 2607:ad40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:20:3c:17:15:77:9c:de:f6:32:ec:15:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab48051f-b089-4872-acc6-a73a442e9736
Validity
Not Before: Mar 9 02:00:39 2025 GMT
Not After : Jun 7 01:00:39 2025 GMT
Subject: CN=70cbb471-c805-4be9-8c1e-ec74b85e8fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e0:55:32:ba:0f:c8:5a:4e:f0:a0:f6:06:fa:
ee:01:97:f5:ef:0e:3e:4a:e3:57:c4:ac:ad:19:57:
ca:f3:73:fb:98:e0:0a:91:da:7e:94:d8:7d:2d:be:
10:e8:1e:cc:b2:23:05:1d:d5:71:b4:4b:93:29:05:
3f:63:2c:54:1d:a5:76:1a:08:10:ed:e4:a5:62:11:
f1:5c:48:ee:af:62:5b:fb:b0:da:91:f4:1d:ca:87:
07:66:25:70:1c:8c:2c:0d:2e:50:d9:47:40:55:9a:
81:14:79:c3:8e:96:f9:9d:c1:ab:b4:e0:cd:8d:56:
e9:49:54:a9:61:94:51:5e:dc:35:59:f1:06:00:0d:
bc:28:62:ae:40:df:8c:ea:b7:d2:ad:9d:1e:3d:4e:
e1:bf:71:d0:be:9c:1e:07:55:d5:53:22:ba:ca:96:
c1:bd:e2:73:3e:cd:21:01:c8:e6:db:11:fb:54:dc:
31:95:ae:a1:04:81:28:5d:d2:56:c9:cd:2a:91:1d:
97:dd:81:d3:56:01:d2:e2:be:ad:f3:52:05:62:45:
7a:1b:0f:20:75:00:b0:39:b0:8e:81:17:c6:6b:f5:
19:77:67:bc:33:1d:2f:cf:27:8a:51:9e:fa:c1:3b:
d9:85:03:57:cb:e7:cc:69:17:49:d0:e8:f1:07:92:
1d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:CE:43:3E:32:7B:FF:14:15:14:29:72:70:99:75:31:A2:88:83:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab48051f-b089-4872-acc6-a73a442e9736/5447fca3-a5a8-3b61-90b0-e825d8612614.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab48051f-b089-4872-acc6-a73a442e9736/ab48051f-b089-4872-acc6-a73a442e9736.crl
X509v3 Authority Key Identifier:
keyid:2B:54:20:F2:AF:8F:AF:36:32:D0:F6:01:84:AB:37:C8:43:29:28:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab48051f-b089-4872-acc6-a73a442e9736.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:ad40::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c9:15:41:27:ee:7d:07:0d:95:d6:c2:70:1b:40:f5:29:68:cd:
3e:14:9c:c2:93:ab:a8:72:e9:24:52:48:b5:9a:3a:d3:ae:67:
bf:cb:9c:71:af:3b:e1:97:e7:b5:ba:25:04:db:f9:a0:1e:d1:
cd:8f:92:6c:54:dd:2c:48:0a:09:19:7f:16:e5:86:e5:80:32:
87:c4:97:01:b1:5d:fa:1c:30:67:8f:4f:0b:9d:0b:7d:6c:4f:
1d:d7:a6:8d:83:50:18:10:53:0c:16:cb:f7:a5:53:f7:28:4b:
68:0e:84:db:a6:2b:34:46:3e:3f:57:99:9e:23:6a:6a:48:2e:
82:d1:2c:2e:58:c6:bf:10:c2:d7:5e:19:63:0d:6b:2a:a1:22:
2e:5d:e1:ea:74:f1:eb:18:44:b8:e2:36:e8:a5:1e:ea:bf:2f:
a4:41:25:ab:95:86:2c:ed:b5:61:9b:ee:56:80:1f:81:37:03:
7c:11:9f:3a:8a:82:0b:b5:3d:83:1c:3c:0d:1e:77:94:cc:a9:
fc:7b:25:c2:1a:71:76:5e:49:f5:48:a8:9a:ac:31:33:f6:dd:
e8:0a:23:10:8a:30:d6:f9:b7:fc:9d:dd:9a:12:0d:34:dd:53:
48:3c:28:10:b7:2f:7f:74:97:d4:6d:90:eb:da:89:1b:ce:58:
d3:e9:1f:93
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkgPBcVd5ze9jLsFQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWI0ODA1MWYtYjA4OS00ODcyLWFjYzYtYTczYTQ0MmU5
NzM2MB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk
NzBjYmI0NzEtYzgwNS00YmU5LThjMWUtZWM3NGI4NWU4ZmIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+BVMroPyFpO8KD2BvruAZf17w4+SuNXxKyt
GVfK83P7mOAKkdp+lNh9Lb4Q6B7MsiMFHdVxtEuTKQU/YyxUHaV2GggQ7eSlYhHx
XEjur2Jb+7DakfQdyocHZiVwHIwsDS5Q2UdAVZqBFHnDjpb5ncGrtODNjVbpSVSp
YZRRXtw1WfEGAA28KGKuQN+M6rfSrZ0ePU7hv3HQvpweB1XVUyK6ypbBveJzPs0h
Acjm2xH7VNwxla6hBIEoXdJWyc0qkR2X3YHTVgHS4r6t81IFYkV6Gw8gdQCwObCO
gRfGa/UZd2e8Mx0vzyeKUZ76wTvZhQNXy+fMaRdJ0OjxB5IdQwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFEXOQz4ye/8UFRQpcnCZdTGiiIMuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hYjQ4
MDUxZi1iMDg5LTQ4NzItYWNjNi1hNzNhNDQyZTk3MzYvNTQ0N2ZjYTMtYTVhOC0z
YjYxLTkwYjAtZTgyNWQ4NjEyNjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYWI0ODA1MWYtYjA4OS00ODcyLWFj
YzYtYTczYTQ0MmU5NzM2L2FiNDgwNTFmLWIwODktNDg3Mi1hY2M2LWE3M2E0NDJl
OTczNi5jcmwwHwYDVR0jBBgwFoAUK1Qg8q+PrzYy0PYBhKs3yEMpKCYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9hYjQ4MDUxZi1iMDg5LTQ4NzItYWNjNi1hNzNh
NDQyZTk3MzYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgetQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQDJFUEn7n0HDZXWwnAbQPUpaM0+FJzCk6uocukkUki1mjrTrme/y5xx
rzvhl+e1uiUE2/mgHtHNj5JsVN0sSAoJGX8W5YblgDKHxJcBsV36HDBnj08LnQt9
bE8d16aNg1AYEFMMFsv3pVP3KEtoDoTbpis0Rj4/V5meI2pqSC6C0SwuWMa/EMLX
XhljDWsqoSIuXeHqdPHrGES44jbopR7qvy+kQSWrlYYs7bVhm+5WgB+BNwN8EZ86
ioILtT2DHDwNHneUzKn8eyXCGnF2Xkn1SKiarDEz9t3oCiMQijDW+bf8nd2aEg00
3VNIPCgQty9/dJfUbZDr2okbzljT6R+T
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:27:39 2025 by rpki-client