Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854/b9fed38b-7833-339a-a34b-0e0e40f943aa.roa
File: b9fed38b-7833-339a-a34b-0e0e40f943aa.roa (raw, json)
Hash identifier: zLpgfA1ilsVidDFVaVNmiViviju9GuiC+OrKIiwAgIA=
Subject key identifier: 28:04:34:F7:DB:63:22:CD:0B:BD:55:68:3A:FC:A5:82:6E:35:55:B9
Certificate issuer: /CN=7245cdbf-97d7-4376-9d8d-298cda5d3854
Certificate serial: 010D0C9F43285848854B42D246F088FAD4061460
Authority key identifier: 16:E1:82:B0:4E:45:0C:2A:9E:DD:0D:F0:AA:AC:06:28:3E:D9:97:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854/b9fed38b-7833-339a-a34b-0e0e40f943aa.roa
Signing time: Sun 12 Jan 2025 14:00:53 +0000
ROA not before: Sun 12 Jan 2025 14:00:53 +0000
ROA not after: Sat 12 Apr 2025 13:00:53 +0000
asID: 32726
IP address blocks: 2620:12f:2000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:85:4b:42:d2:46:f0:88:fa:d4:06:14:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7245cdbf-97d7-4376-9d8d-298cda5d3854
Validity
Not Before: Jan 12 14:00:53 2025 GMT
Not After : Apr 12 13:00:53 2025 GMT
Subject: CN=4d21fce6-bb0d-49b2-8c28-c60fa144cc76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c7:c3:db:0c:39:c3:c6:ba:8c:13:46:d4:84:
24:9e:6e:78:3d:7d:fb:7e:fb:3a:16:fa:46:91:3b:
f8:56:5f:a2:db:42:45:31:5a:7f:ba:78:a0:1f:a2:
d5:75:4a:46:95:fa:14:2f:4f:8c:30:39:5b:7c:63:
de:f3:90:6b:2e:ab:8d:5d:86:60:5e:d9:ff:a7:9c:
16:f8:bb:ad:80:cd:26:5d:aa:fa:f9:6a:97:d5:c5:
40:6c:fa:5d:b0:a1:ad:8d:16:7e:05:69:57:80:89:
0c:b5:09:4f:9d:0f:57:3b:bb:69:a0:d1:e6:ee:ed:
af:0e:e9:8e:63:72:d1:97:a5:8e:c6:da:8b:ea:7b:
ba:22:6e:02:44:29:6e:bb:45:f6:d7:ce:86:ac:dd:
30:22:b1:a1:df:ed:b6:c5:86:09:ee:9a:0e:65:ab:
d8:c6:3b:e7:02:b6:bb:31:d1:6f:58:58:3f:9d:88:
6b:ea:33:b7:d6:3b:e2:fe:b1:76:4c:5e:64:fb:1e:
f0:79:f0:a5:cc:2a:ad:cb:ee:0e:9a:6d:1a:b7:96:
3d:cd:61:49:fe:c7:8a:9f:7a:b9:be:2e:93:d6:26:
ae:fc:96:f8:43:91:fb:6d:47:cc:80:8c:6f:fc:31:
6c:8e:19:be:57:7d:60:59:9a:dd:84:2f:c2:59:82:
81:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:04:34:F7:DB:63:22:CD:0B:BD:55:68:3A:FC:A5:82:6E:35:55:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854/b9fed38b-7833-339a-a34b-0e0e40f943aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854/7245cdbf-97d7-4376-9d8d-298cda5d3854.crl
X509v3 Authority Key Identifier:
keyid:16:E1:82:B0:4E:45:0C:2A:9E:DD:0D:F0:AA:AC:06:28:3E:D9:97:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:12f:2000::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:e8:29:4d:5f:dc:6e:9a:eb:d3:45:ca:e1:60:3a:91:c2:0e:
96:cd:cd:a1:33:42:28:10:5c:91:99:5c:ee:0a:92:01:e4:0f:
cf:bb:b9:8d:5c:76:68:7b:67:d9:91:89:dc:e2:31:1c:a3:42:
ae:55:02:7a:9c:f1:d0:d8:68:3b:c9:a7:45:4b:3a:33:a5:52:
de:1d:0b:55:51:68:da:ec:e9:65:df:7a:23:ad:f0:be:a3:c2:
df:28:a3:78:cb:40:30:21:19:48:4b:2f:fa:53:6c:aa:9e:a9:
32:c4:9a:38:ab:df:56:20:3b:dd:c1:81:e6:a5:31:0e:ff:ee:
4d:cb:55:49:b6:20:8f:57:7d:b1:3d:7b:4e:17:9d:ae:1b:60:
b5:5b:d8:02:96:2a:ed:ff:9b:f3:f5:1e:1a:91:a7:13:bc:18:
43:23:67:c3:27:5f:ae:3c:8b:eb:e4:7c:fb:3a:4e:0c:33:21:
ba:dc:e1:09:28:44:88:b6:c5:58:1a:f7:28:9e:9e:20:10:e6:
80:ea:74:1b:ae:53:dd:79:07:b9:4b:8b:80:a9:1e:9d:b2:36:
7d:97:40:3f:9c:6d:6e:fd:26:df:74:dd:8b:43:8a:56:31:94:
5a:25:66:7c:1f:bf:be:d2:d1:4a:82:27:45:99:76:1f:df:94:
07:e8:5d:07
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEiFS0LSRvCI+tQGFGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzI0NWNkYmYtOTdkNy00Mzc2LTlkOGQtMjk4Y2RhNWQz
ODU0MB4XDTI1MDExMjE0MDA1M1oXDTI1MDQxMjEzMDA1M1owLzEtMCsGA1UEAxMk
NGQyMWZjZTYtYmIwZC00OWIyLThjMjgtYzYwZmExNDRjYzc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMfD2ww5w8a6jBNG1IQknm54PX37fvs6FvpG
kTv4Vl+i20JFMVp/unigH6LVdUpGlfoUL0+MMDlbfGPe85BrLquNXYZgXtn/p5wW
+LutgM0mXar6+WqX1cVAbPpdsKGtjRZ+BWlXgIkMtQlPnQ9XO7tpoNHm7u2vDumO
Y3LRl6WOxtqL6nu6Im4CRCluu0X2186GrN0wIrGh3+22xYYJ7poOZavYxjvnAra7
MdFvWFg/nYhr6jO31jvi/rF2TF5k+x7wefClzCqty+4Omm0at5Y9zWFJ/seKn3q5
vi6T1iau/Jb4Q5H7bUfMgIxv/DFsjhm+V31gWZrdhC/CWYKBbwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFCgENPfbYyLNC71VaDr8pYJuNVW5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83MjQ1
Y2RiZi05N2Q3LTQzNzYtOWQ4ZC0yOThjZGE1ZDM4NTQvYjlmZWQzOGItNzgzMy0z
MzlhLWEzNGItMGUwZTQwZjk0M2FhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNzI0NWNkYmYtOTdkNy00Mzc2LTlk
OGQtMjk4Y2RhNWQzODU0LzcyNDVjZGJmLTk3ZDctNDM3Ni05ZDhkLTI5OGNkYTVk
Mzg1NC5jcmwwHwYDVR0jBBgwFoAUFuGCsE5FDCqe3Q3wqqwGKD7Zlz8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83MjQ1Y2RiZi05N2Q3LTQzNzYtOWQ4ZC0yOThj
ZGE1ZDM4NTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABLyAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEANOgpTV/cbprr00XK4WA6kcIOls3NoTNCKBBckZlc7gqSAeQPz7u5
jVx2aHtn2ZGJ3OIxHKNCrlUCepzx0NhoO8mnRUs6M6VS3h0LVVFo2uzpZd96I63w
vqPC3yijeMtAMCEZSEsv+lNsqp6pMsSaOKvfViA73cGB5qUxDv/uTctVSbYgj1d9
sT17ThedrhtgtVvYApYq7f+b8/UeGpGnE7wYQyNnwydfrjyL6+R8+zpODDMhutzh
CShEiLbFWBr3KJ6eIBDmgOp0G65T3XkHuUuLgKkenbI2fZdAP5xtbv0m33Tdi0OK
VjGUWiVmfB+/vtLRSoInRZl2H9+UB+hdBw==
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:10:43 2025 by rpki-client