Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/c8e59d5d-26d2-3644-b480-2e571c81f11c.roa
File: c8e59d5d-26d2-3644-b480-2e571c81f11c.roa (raw, json)
Hash identifier: hkzx23Lp7Dq47JceXwynlYe8RKuBsjxVz8LORTqod/w=
Subject key identifier: A4:4D:C2:EC:2A:DD:BD:AB:44:7B:46:1F:A9:47:22:3A:7E:EC:57:7F
Certificate issuer: /CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f
Certificate serial: 010D0C9F432858492CAE8CF45999E234B0B62DA0
Authority key identifier: 3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/c8e59d5d-26d2-3644-b480-2e571c81f11c.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 8070
IP address blocks: 2602:f9e7:2a::/47 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:ae:8c:f4:59:99:e2:34:b0:b6:2d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=1c0fdaad-d3dd-482a-a4c6-f4e8dab679bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:90:fa:ea:aa:82:6f:b6:5b:24:72:a1:0c:01:
4f:1c:26:f6:cf:2e:c3:58:79:a0:cd:a7:ff:eb:1d:
ec:b5:e6:60:95:92:cf:ea:66:50:b8:b9:4e:b1:96:
70:66:a1:2a:c9:b8:9d:92:84:b5:fd:84:88:fa:7f:
dd:f5:3d:8f:a0:84:32:a8:3c:b2:1c:2c:c4:97:35:
c2:c5:57:ba:94:fc:b8:8a:ec:ed:25:1a:8e:1c:25:
3a:30:0f:21:a6:89:80:ab:09:bd:8a:43:b9:82:65:
33:c3:03:ca:3b:9a:6c:e1:6c:a7:74:55:3b:4f:e4:
c9:4d:98:c1:5b:71:6d:ba:c2:db:7f:19:83:db:bf:
5b:86:e1:e7:6f:d5:08:71:94:c8:ca:ed:5d:a0:31:
99:3a:cf:fd:84:79:a2:d1:4e:26:ac:1b:05:b6:8c:
19:64:d0:42:13:e2:66:14:b7:14:bd:94:d4:da:a6:
ea:f8:01:fc:a7:db:34:01:dc:51:6f:6f:c1:74:84:
4c:33:7e:3f:34:1f:f2:a3:30:89:9c:b9:bc:e2:c9:
37:fa:5f:e7:3f:f6:10:54:71:d3:36:f0:11:1b:c6:
5d:da:b3:82:85:b6:23:c6:52:31:65:5a:3e:f6:1a:
0e:26:5f:9f:59:bc:47:38:6c:1a:a0:53:4a:7e:5c:
cf:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:4D:C2:EC:2A:DD:BD:AB:44:7B:46:1F:A9:47:22:3A:7E:EC:57:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/c8e59d5d-26d2-3644-b480-2e571c81f11c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl
X509v3 Authority Key Identifier:
keyid:3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f9e7:2a::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:df:06:c6:f8:78:d7:32:87:99:43:5c:98:7b:49:31:95:fb:
b1:5e:1c:0e:b5:49:ec:96:ba:77:ea:cb:ff:ae:fd:a3:e3:ef:
69:4b:6e:23:3a:35:88:7d:ab:45:75:59:8d:30:f2:9f:6e:4d:
25:a7:ff:4a:85:6b:1f:55:db:01:2d:b3:e4:ce:2e:03:5d:da:
5e:cd:90:df:e4:9e:d5:be:8b:3b:d4:ef:4c:09:5a:0e:f8:d4:
d1:50:11:2e:df:bb:bf:ea:e8:33:c4:70:7c:67:b3:7f:80:42:
40:97:fb:4e:df:20:b5:f3:59:f4:a6:1e:98:dc:86:eb:2c:e4:
10:b6:3e:dd:18:b7:43:0d:10:94:92:01:94:0e:f9:e4:3c:23:
e7:96:8c:d6:65:6c:47:96:99:be:48:23:4d:94:c1:55:82:4c:
e2:de:a5:81:b9:6d:29:02:a7:b7:ce:28:46:ca:60:25:ae:11:
c6:d0:81:a5:b5:8e:06:0a:05:29:ec:95:f6:19:52:b9:02:2f:
c0:1e:bb:79:47:0e:ab:9a:35:7b:df:6d:9a:11:1a:24:bf:c4:
d3:c1:50:5f:4c:b9:43:c4:1a:fd:7a:c1:93:26:cc:34:1f:40:
cb:82:b5:2b:98:55:10:7b:cb:df:37:40:4d:c6:c2:67:e4:12:
f2:f9:c3:33
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEksroz0WZniNLC2LaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWFkMDg2NWUtNzc4Ni00YzY2LTlmOTEtYmMxZjQ2ZjJj
MzRmMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
MWMwZmRhYWQtZDNkZC00ODJhLWE0YzYtZjRlOGRhYjY3OWJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZD66qqCb7ZbJHKhDAFPHCb2zy7DWHmgzaf/
6x3steZglZLP6mZQuLlOsZZwZqEqybidkoS1/YSI+n/d9T2PoIQyqDyyHCzElzXC
xVe6lPy4iuztJRqOHCU6MA8hpomAqwm9ikO5gmUzwwPKO5ps4WyndFU7T+TJTZjB
W3FtusLbfxmD279bhuHnb9UIcZTIyu1doDGZOs/9hHmi0U4mrBsFtowZZNBCE+Jm
FLcUvZTU2qbq+AH8p9s0AdxRb2/BdIRMM34/NB/yozCJnLm84sk3+l/nP/YQVHHT
NvARG8Zd2rOChbYjxlIxZVo+9hoOJl+fWbxHOGwaoFNKflzPRQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKRNwuwq3b2rRHtGH6lHIjp+7Fd/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81YWQw
ODY1ZS03Nzg2LTRjNjYtOWY5MS1iYzFmNDZmMmMzNGYvYzhlNTlkNWQtMjZkMi0z
NjQ0LWI0ODAtMmU1NzFjODFmMTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWFkMDg2NWUtNzc4Ni00YzY2LTlm
OTEtYmMxZjQ2ZjJjMzRmLzVhZDA4NjVlLTc3ODYtNGM2Ni05ZjkxLWJjMWY0NmYy
YzM0Zi5jcmwwHwYDVR0jBBgwFoAUOq+U75raoImJh13K6GCGyUDjDbgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy81YWQwODY1ZS03Nzg2LTRjNjYtOWY5MS1iYzFm
NDZmMmMzNGYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgL55wAq
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFHfBsb4eNcyh5lDXJh7STGV+7FeHA61SeyWunfqy/+u/aPj72lL
biM6NYh9q0V1WY0w8p9uTSWn/0qFax9V2wEts+TOLgNd2l7NkN/kntW+izvU70wJ
Wg741NFQES7fu7/q6DPEcHxns3+AQkCX+07fILXzWfSmHpjchuss5BC2Pt0Yt0MN
EJSSAZQO+eQ8I+eWjNZlbEeWmb5II02UwVWCTOLepYG5bSkCp7fOKEbKYCWuEcbQ
gaW1jgYKBSnslfYZUrkCL8Aeu3lHDquaNXvfbZoRGiS/xNPBUF9MuUPEGv16wZMm
zDQfQMuCtSuYVRB7y983QE3GwmfkEvL5wzM=
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:08:18 2025 by rpki-client