Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/01c03400-d94e-401c-8fcf-fa8dd7d18bff/bb2010da-f54b-3118-b01f-f1ac12f2aa9a.roa
File: bb2010da-f54b-3118-b01f-f1ac12f2aa9a.roa (raw, json)
Hash identifier: bgkr3rRfvT6lGcLA2bQKYkUwsWP5BfBxjz5I7OPM0l8=
Subject key identifier: F0:77:9D:89:8C:81:09:F2:85:C6:A8:7D:F0:F1:03:76:F0:8B:1C:B5
Certificate issuer: /CN=01c03400-d94e-401c-8fcf-fa8dd7d18bff
Certificate serial: 010D0C9F43285848EF6138BCD618F42DBB5135A0
Authority key identifier: 42:F3:38:EA:9E:0D:07:43:5C:A6:75:22:41:17:95:F2:F1:CC:7E:0C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/01c03400-d94e-401c-8fcf-fa8dd7d18bff.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/01c03400-d94e-401c-8fcf-fa8dd7d18bff/bb2010da-f54b-3118-b01f-f1ac12f2aa9a.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 27008
IP address blocks: 2607:fda0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:38:bc:d6:18:f4:2d:bb:51:35:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c03400-d94e-401c-8fcf-fa8dd7d18bff
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=61d6a153-3a27-423a-aaf9-8fb9f2d17f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:48:07:5e:d0:22:31:a5:af:1d:73:20:96:a3:
89:4f:62:26:e3:ce:19:3c:2c:b5:a8:6b:9f:ca:59:
64:be:04:80:3a:1a:eb:43:cd:51:f8:7f:13:57:e4:
7d:ad:c5:00:5b:8d:f8:55:66:98:87:f6:24:b6:64:
91:f8:be:e9:b1:87:29:d0:79:1a:e8:92:a0:d0:dd:
20:54:79:9f:39:99:6b:ae:3f:26:9a:ca:75:ab:9b:
cd:2f:b7:71:95:34:fc:f2:ae:b3:ce:2e:22:10:77:
73:9c:e7:56:df:d8:8f:6a:f2:fe:ae:c1:81:1d:88:
fe:22:e1:a5:82:52:d5:07:e4:05:81:c8:4e:57:99:
8c:cd:9d:02:3f:58:9b:35:55:a7:4b:84:c8:b4:08:
88:11:2f:57:30:af:98:5c:b4:93:15:7a:a5:fa:ea:
6f:5d:ed:e6:f6:c2:20:6d:44:04:71:6d:4c:68:53:
31:25:77:77:76:f4:2d:30:c3:6c:72:c6:55:fd:d6:
52:b7:7a:7d:a9:82:c5:10:92:2a:86:3f:b2:ca:f2:
e3:ff:ba:12:0d:02:ac:45:54:42:89:c2:2f:40:db:
3a:9d:02:b7:f8:53:19:57:5e:ec:35:5e:8e:64:d6:
62:f0:a1:20:da:db:f8:8e:1b:c5:03:ab:42:c5:69:
1e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:77:9D:89:8C:81:09:F2:85:C6:A8:7D:F0:F1:03:76:F0:8B:1C:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/01c03400-d94e-401c-8fcf-fa8dd7d18bff/bb2010da-f54b-3118-b01f-f1ac12f2aa9a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/01c03400-d94e-401c-8fcf-fa8dd7d18bff/01c03400-d94e-401c-8fcf-fa8dd7d18bff.crl
X509v3 Authority Key Identifier:
keyid:42:F3:38:EA:9E:0D:07:43:5C:A6:75:22:41:17:95:F2:F1:CC:7E:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/01c03400-d94e-401c-8fcf-fa8dd7d18bff.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:fda0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:f8:14:21:68:3e:6a:10:6c:a6:ef:22:bc:95:73:51:a0:1d:
cb:55:ab:a3:1a:a9:6d:a9:76:d3:b9:59:b7:79:45:60:86:c5:
a3:f3:f8:62:c6:a5:bc:dc:44:af:75:91:99:99:68:53:ee:05:
48:16:4a:0d:a4:ad:71:0b:64:1e:45:ab:3d:54:5c:5d:2e:36:
69:fa:7f:70:42:2c:db:97:1b:b0:30:8a:62:7c:ec:77:3c:dd:
2b:6c:3f:89:9d:32:91:e5:2b:0c:ab:4a:42:82:ee:ed:6c:0e:
c3:a4:8b:ce:6c:34:b9:0e:6c:08:f5:79:4d:93:bb:22:d9:15:
1c:4b:fb:08:5a:62:d7:01:bd:80:f9:8a:4e:b7:e5:18:a5:8b:
04:4b:89:0e:bf:dd:6a:af:16:85:0f:ea:11:4c:46:b4:62:1e:
5e:5a:06:02:f0:04:35:dc:46:f1:57:ad:64:90:0a:53:51:1a:
05:ec:f8:19:b8:1e:20:92:bc:ba:0c:ed:d2:fa:fb:6c:24:40:
22:9d:ac:f9:0e:9a:84:ac:76:de:15:51:07:78:3b:d0:5c:9c:
38:6d:49:dc:0e:43:71:ba:03:f5:78:fc:28:a8:83:8e:48:d7:
e8:e7:79:42:78:b4:de:50:5f:5e:94:e2:65:3a:ff:fa:6c:2f:
78:fb:e1:30
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjvYTi81hj0LbtRNaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDFjMDM0MDAtZDk0ZS00MDFjLThmY2YtZmE4ZGQ3ZDE4
YmZmMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk
NjFkNmExNTMtM2EyNy00MjNhLWFhZjktOGZiOWYyZDE3ZjJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0gHXtAiMaWvHXMglqOJT2Im484ZPCy1qGuf
yllkvgSAOhrrQ81R+H8TV+R9rcUAW434VWaYh/YktmSR+L7psYcp0Hka6JKg0N0g
VHmfOZlrrj8mmsp1q5vNL7dxlTT88q6zzi4iEHdznOdW39iPavL+rsGBHYj+IuGl
glLVB+QFgchOV5mMzZ0CP1ibNVWnS4TItAiIES9XMK+YXLSTFXql+upvXe3m9sIg
bUQEcW1MaFMxJXd3dvQtMMNscsZV/dZSt3p9qYLFEJIqhj+yyvLj/7oSDQKsRVRC
icIvQNs6nQK3+FMZV17sNV6OZNZi8KEg2tv4jhvFA6tCxWkewwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFPB3nYmMgQnyhcaoffDxA3bwixy1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMWMw
MzQwMC1kOTRlLTQwMWMtOGZjZi1mYThkZDdkMThiZmYvYmIyMDEwZGEtZjU0Yi0z
MTE4LWIwMWYtZjFhYzEyZjJhYTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDFjMDM0MDAtZDk0ZS00MDFjLThm
Y2YtZmE4ZGQ3ZDE4YmZmLzAxYzAzNDAwLWQ5NGUtNDAxYy04ZmNmLWZhOGRkN2Qx
OGJmZi5jcmwwHwYDVR0jBBgwFoAUQvM46p4NB0NcpnUiQReV8vHMfgwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMWMwMzQwMC1kOTRlLTQwMWMtOGZjZi1mYThk
ZDdkMThiZmYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf9oDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA7+BQhaD5qEGym7yK8lXNRoB3LVaujGqltqXbTuVm3eUVghsWj8/hi
xqW83ESvdZGZmWhT7gVIFkoNpK1xC2QeRas9VFxdLjZp+n9wQizblxuwMIpifOx3
PN0rbD+JnTKR5SsMq0pCgu7tbA7DpIvObDS5DmwI9XlNk7si2RUcS/sIWmLXAb2A
+YpOt+UYpYsES4kOv91qrxaFD+oRTEa0Yh5eWgYC8AQ13EbxV61kkApTURoF7PgZ
uB4gkry6DO3S+vtsJEAinaz5DpqErHbeFVEHeDvQXJw4bUncDkNxugP1ePwoqIOO
SNfo53lCeLTeUF9elOJlOv/6bC94++Ew
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:51:38 2025 by rpki-client