Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/b8d397c7-de40-30e1-bcae-8b78956f87ff.roa
File: b8d397c7-de40-30e1-bcae-8b78956f87ff.roa (raw, json)
Hash identifier: VzAcx1gdyVa/KqwfJxE1DI7UEeZFSk8Hd8kQEX4zCEM=
Subject key identifier: 22:7B:E9:70:DE:F0:12:57:B0:44:76:A4:F0:A5:B6:22:F7:6E:B2:36
Certificate issuer: /CN=7c313e39-91f1-41fc-bc5c-d213a429e287
Certificate serial: 010D0C9F432858489340B47118936E02700EE380
Authority key identifier: 7D:97:39:68:D8:16:C7:26:14:7E:9A:B9:25:05:92:E9:5D:3B:14:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/b8d397c7-de40-30e1-bcae-8b78956f87ff.roa
Signing time: Fri 17 Jan 2025 14:00:53 +0000
ROA not before: Fri 17 Jan 2025 14:00:53 +0000
ROA not after: Thu 17 Apr 2025 13:00:53 +0000
asID: 40401
IP address blocks: 2605:72c0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:93:40:b4:71:18:93:6e:02:70:0e:e3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c313e39-91f1-41fc-bc5c-d213a429e287
Validity
Not Before: Jan 17 14:00:53 2025 GMT
Not After : Apr 17 13:00:53 2025 GMT
Subject: CN=cfbc3c00-48a0-45f4-9392-6989a5b9ca83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7f:69:44:1e:f9:6c:f0:aa:b6:d9:46:08:49:
d9:48:23:fa:2d:4d:5a:cc:e7:64:91:48:e6:c0:98:
1b:b9:91:1d:17:93:fe:26:71:90:9e:e6:52:7a:b9:
c3:e6:a6:27:6c:6f:ff:b0:14:c1:cb:25:20:2a:a9:
78:5f:04:36:08:6d:ec:4b:c6:c6:2f:b3:07:b9:16:
1a:7f:76:8b:62:9c:d7:ba:69:4e:ed:50:ec:8f:88:
7f:97:29:2a:db:11:3a:b5:d2:cb:bc:fe:ff:62:77:
64:e5:c9:55:85:a3:17:17:0e:87:97:c3:7a:28:87:
ae:7e:48:82:b2:17:aa:79:da:5b:98:55:c3:d6:dc:
a3:e5:0a:9d:b6:83:eb:9b:53:e5:73:27:09:d4:23:
58:a5:fe:fe:45:b7:46:14:c6:b9:5c:28:79:e8:e1:
66:7d:b1:f4:c2:3c:95:04:95:f1:0e:7a:c9:af:8b:
a0:25:40:57:3e:a0:68:f4:97:b7:00:88:8a:f4:35:
6d:5f:e3:ca:79:a5:d8:bb:01:82:62:d0:5d:66:62:
a2:78:82:f8:a8:25:ac:1f:05:d9:28:1e:04:ca:e0:
07:68:7d:b4:6b:2e:2d:b5:8f:dc:25:02:cc:d4:d9:
f4:98:85:77:b3:9b:70:75:f4:b2:ec:cf:cb:0c:a2:
d7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:7B:E9:70:DE:F0:12:57:B0:44:76:A4:F0:A5:B6:22:F7:6E:B2:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/b8d397c7-de40-30e1-bcae-8b78956f87ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/7c313e39-91f1-41fc-bc5c-d213a429e287.crl
X509v3 Authority Key Identifier:
keyid:7D:97:39:68:D8:16:C7:26:14:7E:9A:B9:25:05:92:E9:5D:3B:14:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:72c0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:1b:07:9b:7a:88:75:a8:32:ab:b4:69:82:f0:18:e5:62:36:
88:04:00:56:20:a2:f4:66:7e:18:01:49:50:5f:f3:a1:f5:6a:
1b:5b:f0:7d:06:7d:cc:75:0a:6f:aa:9c:39:2e:38:5f:d7:14:
96:05:c4:4d:95:db:24:25:bf:75:35:e0:1d:8d:78:57:59:65:
e1:50:0a:31:a1:f0:20:db:42:1d:38:59:6a:f5:4a:9f:c3:19:
7c:98:8b:88:7d:c8:9c:28:71:86:a3:ef:58:f7:cf:b9:8d:39:
09:c4:4c:75:96:d3:65:08:3b:5b:43:11:76:2f:33:a0:b3:14:
81:f0:b6:7e:31:7c:7f:ad:04:14:95:bf:37:9c:44:91:34:25:
ed:38:42:da:2b:82:07:b2:f9:01:c9:19:fd:2e:5a:7f:52:97:
d4:3d:8a:7d:79:5a:95:d0:01:61:ad:a1:6b:65:81:90:e3:90:
47:af:a0:f2:bb:0d:e7:06:04:88:5d:d1:c3:d3:ed:ae:9a:28:
b8:e4:7a:c4:05:e0:be:e9:70:02:be:ea:0d:2f:db:b5:65:d2:
7f:36:ac:c6:50:3e:c1:9c:52:da:f6:9a:99:29:70:15:4e:90:
2b:8e:a7:75:f4:88:98:bf:f5:ae:9a:92:9c:52:91:4c:ba:f8:
22:b3:1c:13
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEiTQLRxGJNuAnAO44AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2MzMTNlMzktOTFmMS00MWZjLWJjNWMtZDIxM2E0Mjll
Mjg3MB4XDTI1MDExNzE0MDA1M1oXDTI1MDQxNzEzMDA1M1owLzEtMCsGA1UEAxMk
Y2ZiYzNjMDAtNDhhMC00NWY0LTkzOTItNjk4OWE1YjljYTgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt39pRB75bPCqttlGCEnZSCP6LU1azOdkkUjm
wJgbuZEdF5P+JnGQnuZSernD5qYnbG//sBTByyUgKql4XwQ2CG3sS8bGL7MHuRYa
f3aLYpzXumlO7VDsj4h/lykq2xE6tdLLvP7/Yndk5clVhaMXFw6Hl8N6KIeufkiC
sheqedpbmFXD1tyj5QqdtoPrm1PlcycJ1CNYpf7+RbdGFMa5XCh56OFmfbH0wjyV
BJXxDnrJr4ugJUBXPqBo9Je3AIiK9DVtX+PKeaXYuwGCYtBdZmKieIL4qCWsHwXZ
KB4EyuAHaH20ay4ttY/cJQLM1Nn0mIV3s5twdfSy7M/LDKLXhwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFCJ76XDe8BJXsER2pPCltiL3brI2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83YzMx
M2UzOS05MWYxLTQxZmMtYmM1Yy1kMjEzYTQyOWUyODcvYjhkMzk3YzctZGU0MC0z
MGUxLWJjYWUtOGI3ODk1NmY4N2ZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2MzMTNlMzktOTFmMS00MWZjLWJj
NWMtZDIxM2E0MjllMjg3LzdjMzEzZTM5LTkxZjEtNDFmYy1iYzVjLWQyMTNhNDI5
ZTI4Ny5jcmwwHwYDVR0jBBgwFoAUfZc5aNgWxyYUfpq5JQWS6V07FCEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83YzMxM2UzOS05MWYxLTQxZmMtYmM1Yy1kMjEz
YTQyOWUyODcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgVywDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAvGwebeoh1qDKrtGmC8BjlYjaIBABWIKL0Zn4YAUlQX/Oh9WobW/B9
Bn3MdQpvqpw5Ljhf1xSWBcRNldskJb91NeAdjXhXWWXhUAoxofAg20IdOFlq9Uqf
wxl8mIuIfcicKHGGo+9Y98+5jTkJxEx1ltNlCDtbQxF2LzOgsxSB8LZ+MXx/rQQU
lb83nESRNCXtOELaK4IHsvkByRn9Llp/UpfUPYp9eVqV0AFhraFrZYGQ45BHr6Dy
uw3nBgSIXdHD0+2umii45HrEBeC+6XACvuoNL9u1ZdJ/NqzGUD7BnFLa9pqZKXAV
TpArjqd19IiYv/WumpKcUpFMuvgisxwT
-----END CERTIFICATE-----
Generated at Fri Apr 4 15:59:48 2025 by rpki-client