Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/970b7e04-01f1-3927-90a0-79d7a904fce7.roa
File: 970b7e04-01f1-3927-90a0-79d7a904fce7.roa (raw, json)
Hash identifier: BjwA+2813KibaodxGBvZxpBCkcUcVStbkXWQIWHcZBI=
Subject key identifier: C1:12:B6:24:8F:52:C8:18:E4:07:14:FF:E7:CA:23:8D:11:21:4E:E8
Certificate issuer: /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Certificate serial: 010D0C9F43285848CB165146B3567AAFED2B5FA8
Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/970b7e04-01f1-3927-90a0-79d7a904fce7.roa
Signing time: Thu 06 Feb 2025 14:00:52 +0000
ROA not before: Thu 06 Feb 2025 14:00:52 +0000
ROA not after: Wed 07 May 2025 13:00:52 +0000
asID: 10390
IP address blocks: 2620:10f:400e::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cb:16:51:46:b3:56:7a:af:ed:2b:5f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Validity
Not Before: Feb 6 14:00:52 2025 GMT
Not After : May 7 13:00:52 2025 GMT
Subject: CN=1498dc09-35ae-4333-93b0-44d3b653c10c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:01:39:6d:20:3d:90:f1:01:d4:f2:49:2b:f6:
82:ab:ee:1d:ff:e7:38:2b:c4:5e:87:a2:6f:f7:f2:
83:e7:99:76:2c:6f:55:07:8d:d6:39:b3:00:d7:65:
a7:4b:95:ac:a2:41:48:e1:55:e7:bc:9a:c2:0a:bc:
76:0b:a7:be:99:82:d2:69:bf:ed:87:23:6e:cc:48:
88:4d:ef:fa:4d:c1:eb:79:69:d6:41:2e:d5:7e:d4:
49:e3:36:a3:c6:1b:67:91:18:30:15:67:16:51:33:
c7:a4:31:f3:ab:6f:27:eb:ac:b2:a7:16:1c:24:e2:
bf:63:f7:b4:73:31:2a:8d:75:1b:66:17:c9:c3:9e:
13:f7:51:df:ef:a6:a6:9d:ea:73:85:73:6f:1c:85:
05:4b:1e:a8:34:65:97:0c:f0:0c:0e:e1:32:af:d1:
a0:46:0f:51:bb:16:20:aa:cb:83:37:62:de:39:e7:
1b:3c:aa:99:15:1f:3d:44:54:55:29:49:e8:cc:52:
71:e9:1c:bb:65:f5:cb:28:d5:ca:17:8b:7d:56:60:
56:dc:c2:bc:30:bc:11:71:29:8a:a9:e8:dd:4d:5a:
9f:54:6d:d1:c5:e5:34:29:21:f4:54:9e:d1:fe:b9:
a4:02:80:a9:16:19:e3:f9:0c:44:67:a1:30:45:7c:
c5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:12:B6:24:8F:52:C8:18:E4:07:14:FF:E7:CA:23:8D:11:21:4E:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/970b7e04-01f1-3927-90a0-79d7a904fce7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl
X509v3 Authority Key Identifier:
keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:10f:400e::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:43:17:6a:fe:e7:b6:f9:b1:63:51:41:7f:c2:da:ba:6e:d8:
67:70:87:7b:aa:cd:0e:be:cc:99:c1:3d:93:4a:d6:15:c5:45:
10:0e:7d:c9:ad:32:b1:0b:08:c9:1b:00:db:c7:6c:a5:6f:c7:
1e:fe:ad:a4:45:4f:12:c4:27:ef:28:83:d4:ee:50:46:48:c1:
bf:ac:46:33:1d:d0:98:02:71:c9:d5:78:e1:9d:7d:4b:f2:d9:
a0:dc:d7:31:20:f6:54:c0:c5:63:99:05:14:aa:16:b3:0d:02:
01:9d:ce:5c:b2:b4:40:c2:71:51:f2:bd:3b:e8:8e:a2:51:38:
8b:6b:df:b3:79:7c:02:95:25:5e:5c:0e:d5:87:01:27:10:b2:
84:41:54:c0:d7:86:3a:70:84:28:9b:df:f7:f5:e9:be:95:30:
6b:1c:ea:20:e3:35:6b:65:b3:65:55:d2:5d:57:0b:55:1a:d5:
47:48:88:00:ab:cf:a6:6d:fc:47:48:d6:e6:e7:26:75:6c:a0:
6b:e5:2b:2b:06:ee:84:59:bc:d9:40:27:8d:d8:70:18:0b:c7:
20:c8:e7:01:4c:20:35:c5:67:40:ec:a3:86:6d:79:d4:14:9a:
ba:6c:1c:98:3d:45:03:3a:00:67:33:64:a1:72:fd:9f:9d:27:
0c:4a:94:dd
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjLFlFGs1Z6r+0rX6gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjhhZWVlNzItYmM5Yy00YTAxLWE5ZjUtMzhhODBhYzg0
ZDUyMB4XDTI1MDIwNjE0MDA1MloXDTI1MDUwNzEzMDA1MlowLzEtMCsGA1UEAxMk
MTQ5OGRjMDktMzVhZS00MzMzLTkzYjAtNDRkM2I2NTNjMTBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgE5bSA9kPEB1PJJK/aCq+4d/+c4K8Reh6Jv
9/KD55l2LG9VB43WObMA12WnS5WsokFI4VXnvJrCCrx2C6e+mYLSab/thyNuzEiI
Te/6TcHreWnWQS7VftRJ4zajxhtnkRgwFWcWUTPHpDHzq28n66yypxYcJOK/Y/e0
czEqjXUbZhfJw54T91Hf76amnepzhXNvHIUFSx6oNGWXDPAMDuEyr9GgRg9RuxYg
qsuDN2LeOecbPKqZFR89RFRVKUnozFJx6Ry7ZfXLKNXKF4t9VmBW3MK8MLwRcSmK
qejdTVqfVG3RxeU0KSH0VJ7R/rmkAoCpFhnj+QxEZ6EwRXzFjQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMEStiSPUsgY5AcU/+fKI40RIU7oMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFl
ZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4MGFjODRkNTIvOTcwYjdlMDQtMDFmMS0z
OTI3LTkwYTAtNzlkN2E5MDRmY2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjhhZWVlNzItYmM5Yy00YTAxLWE5
ZjUtMzhhODBhYzg0ZDUyLzI4YWVlZTcyLWJjOWMtNGEwMS1hOWY1LTM4YTgwYWM4
NGQ1Mi5jcmwwHwYDVR0jBBgwFoAUBlg76lfW1Hc6X/ENdO9tmux2QfUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFlZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4
MGFjODRkNTIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABD0AO
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEJDF2r+57b5sWNRQX/C2rpu2Gdwh3uqzQ6+zJnBPZNK1hXFRRAO
fcmtMrELCMkbANvHbKVvxx7+raRFTxLEJ+8og9TuUEZIwb+sRjMd0JgCccnVeOGd
fUvy2aDc1zEg9lTAxWOZBRSqFrMNAgGdzlyytEDCcVHyvTvojqJROItr37N5fAKV
JV5cDtWHAScQsoRBVMDXhjpwhCib3/f16b6VMGsc6iDjNWtls2VV0l1XC1Ua1UdI
iACrz6Zt/EdI1ubnJnVsoGvlKysG7oRZvNlAJ43YcBgLxyDI5wFMIDXFZ0Dso4Zt
edQUmrpsHJg9RQM6AGczZKFy/Z+dJwxKlN0=
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:35:44 2025 by rpki-client