Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/da961be0-5ca6-3f34-bfd8-fd807fa8d53e.roa
File: da961be0-5ca6-3f34-bfd8-fd807fa8d53e.roa (raw, json)
Hash identifier: 0ZwXoF8GlRXljMahzKuBA9hWqv+pK22HOUUQkbehZgM=
Subject key identifier: 57:59:B0:08:CC:DB:92:56:05:EB:00:AC:9E:B7:96:76:35:A0:6A:0C
Certificate issuer: /CN=6bf65f5a-6dd3-4c5d-9a94-33050d9022d6
Certificate serial: 010D0C9F43285848C6E636A1694F40541B988500
Authority key identifier: F2:A4:2B:DE:FA:FE:77:93:4E:14:AF:9C:ED:16:EC:DD:01:9F:E4:C4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/da961be0-5ca6-3f34-bfd8-fd807fa8d53e.roa
Signing time: Wed 05 Feb 2025 02:00:39 +0000
ROA not before: Wed 05 Feb 2025 02:00:39 +0000
ROA not after: Tue 06 May 2025 01:00:39 +0000
asID: 0
IP address blocks: 2001:504:40::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c6:e6:36:a1:69:4f:40:54:1b:98:85:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bf65f5a-6dd3-4c5d-9a94-33050d9022d6
Validity
Not Before: Feb 5 02:00:39 2025 GMT
Not After : May 6 01:00:39 2025 GMT
Subject: CN=af255c62-f82a-47ef-b750-aaf752758064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ba:bb:34:9d:38:81:fb:bd:c3:79:d6:7b:e2:
0d:d6:e6:43:89:d1:df:09:3e:47:31:f8:58:64:8c:
0d:eb:09:01:de:f4:e6:83:5a:54:c5:80:51:82:26:
88:83:fd:d0:93:80:52:d4:fd:2c:07:0a:60:fd:d2:
07:6b:00:13:18:99:5a:24:55:1a:3b:e1:b6:2d:bc:
4d:14:61:5e:5e:96:1c:64:96:58:1c:83:67:14:a9:
b2:a3:77:fb:53:b9:46:72:58:07:47:23:e7:d8:5c:
38:f6:03:08:57:b8:dd:88:34:c7:15:22:01:00:0b:
3b:f7:cd:31:70:46:bb:ff:75:5d:39:24:be:47:ad:
e3:01:a8:46:04:3d:c3:f7:4e:e3:48:6f:53:68:ef:
5d:37:92:f1:47:af:14:96:27:09:73:d6:a6:2e:40:
cc:9e:d1:81:b7:fc:1a:da:26:f0:8b:c1:4c:54:10:
18:64:bd:18:ec:30:89:47:d9:c9:1a:41:b8:5f:23:
0f:66:94:c8:09:ab:91:ef:6e:2e:58:91:42:16:d4:
b5:b0:45:9b:a4:de:b0:20:a1:7e:bc:54:77:cc:07:
89:5e:f5:c0:c5:62:3b:ef:5e:76:70:6f:2b:de:9b:
e0:46:55:b3:89:4f:7f:2d:d5:0e:27:02:aa:43:b8:
8d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:59:B0:08:CC:DB:92:56:05:EB:00:AC:9E:B7:96:76:35:A0:6A:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/da961be0-5ca6-3f34-bfd8-fd807fa8d53e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.crl
X509v3 Authority Key Identifier:
keyid:F2:A4:2B:DE:FA:FE:77:93:4E:14:AF:9C:ED:16:EC:DD:01:9F:E4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:504:40::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:c9:ca:0d:a2:00:4c:18:41:33:2f:e9:ec:10:1f:06:32:39:
02:5c:e9:ab:13:f2:2e:89:51:dd:c0:44:68:f9:6b:6d:c7:da:
f6:8b:4f:f9:d6:86:aa:50:3d:dd:18:b0:2d:e2:ed:c3:b6:ae:
1b:8e:ca:c7:f8:09:de:1b:5b:00:21:08:a7:b1:52:70:ff:b5:
6e:7c:aa:bf:3a:36:f8:c2:64:ce:fc:06:18:b0:80:39:b7:b3:
a4:46:e4:1a:6b:9b:c3:e1:17:bd:b8:31:b6:ca:d8:70:33:86:
75:86:6b:1d:9a:4b:0a:60:a6:e1:64:fd:b7:26:61:e3:66:57:
15:5a:4e:df:ec:da:6a:8a:e2:ba:7d:34:f7:85:1d:8d:78:20:
b5:75:84:9d:ea:6b:de:49:78:78:05:5d:09:28:e7:63:6f:74:
8e:b4:69:04:40:49:46:10:18:de:06:59:43:17:78:99:5d:c4:
20:5e:18:ec:c8:92:2c:68:12:c3:6b:2b:3a:7e:eb:bf:e3:ed:
ed:50:f7:b9:da:19:bf:8b:4b:7a:9d:3e:d8:f9:e4:85:72:89:
2e:1c:57:d0:db:24:64:ac:02:38:ae:8b:79:ef:28:0a:b9:35:
50:fe:0c:93:47:b8:9d:db:b4:16:a6:2d:04:e0:84:a2:1e:c2:
4d:94:05:a9
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjG5jahaU9AVBuYhQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmJmNjVmNWEtNmRkMy00YzVkLTlhOTQtMzMwNTBkOTAy
MmQ2MB4XDTI1MDIwNTAyMDAzOVoXDTI1MDUwNjAxMDAzOVowLzEtMCsGA1UEAxMk
YWYyNTVjNjItZjgyYS00N2VmLWI3NTAtYWFmNzUyNzU4MDY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bq7NJ04gfu9w3nWe+IN1uZDidHfCT5HMfhY
ZIwN6wkB3vTmg1pUxYBRgiaIg/3Qk4BS1P0sBwpg/dIHawATGJlaJFUaO+G2LbxN
FGFeXpYcZJZYHINnFKmyo3f7U7lGclgHRyPn2Fw49gMIV7jdiDTHFSIBAAs7980x
cEa7/3VdOSS+R63jAahGBD3D907jSG9TaO9dN5LxR68UlicJc9amLkDMntGBt/wa
2ibwi8FMVBAYZL0Y7DCJR9nJGkG4XyMPZpTICauR724uWJFCFtS1sEWbpN6wIKF+
vFR3zAeJXvXAxWI77152cG8r3pvgRlWziU9/LdUOJwKqQ7iNQQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFdZsAjM25JWBesArJ63lnY1oGoMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82YmY2
NWY1YS02ZGQzLTRjNWQtOWE5NC0zMzA1MGQ5MDIyZDYvZGE5NjFiZTAtNWNhNi0z
ZjM0LWJmZDgtZmQ4MDdmYThkNTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmJmNjVmNWEtNmRkMy00YzVkLTlh
OTQtMzMwNTBkOTAyMmQ2LzZiZjY1ZjVhLTZkZDMtNGM1ZC05YTk0LTMzMDUwZDkw
MjJkNi5jcmwwHwYDVR0jBBgwFoAU8qQr3vr+d5NOFK+c7Rbs3QGf5MQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82YmY2NWY1YS02ZGQzLTRjNWQtOWE5NC0zMzA1
MGQ5MDIyZDYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBABA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKvJyg2iAEwYQTMv6ewQHwYyOQJc6asT8i6JUd3ARGj5a23H2vaL
T/nWhqpQPd0YsC3i7cO2rhuOysf4Cd4bWwAhCKexUnD/tW58qr86NvjCZM78Bhiw
gDm3s6RG5Bprm8PhF724MbbK2HAzhnWGax2aSwpgpuFk/bcmYeNmVxVaTt/s2mqK
4rp9NPeFHY14ILV1hJ3qa95JeHgFXQko52NvdI60aQRASUYQGN4GWUMXeJldxCBe
GOzIkixoEsNrKzp+67/j7e1Q97naGb+LS3qdPtj55IVyiS4cV9DbJGSsAjiui3nv
KAq5NVD+DJNHuJ3btBamLQTghKIewk2UBak=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:46:44 2025 by rpki-client