Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/dc8b4841-4648-3afc-93d8-17cafe748add.roa
File: dc8b4841-4648-3afc-93d8-17cafe748add.roa (raw, json)
Hash identifier: tf5OdrcFXxrrMSZ+BhobO/OLnoT5Rwq6WX+HXNJTZys=
Subject key identifier: 22:E2:76:FD:7B:E9:F4:04:4A:3E:A9:33:7C:B1:BB:0E:F1:1B:E9:DE
Certificate issuer: /CN=158d5f15-a892-4134-840b-026e68357d71
Certificate serial: 010D0C9F4328584891DB2F5252775489A1DCA200
Authority key identifier: 2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/dc8b4841-4648-3afc-93d8-17cafe748add.roa
Signing time: Fri 17 Jan 2025 02:00:40 +0000
ROA not before: Fri 17 Jan 2025 02:00:40 +0000
ROA not after: Thu 17 Apr 2025 01:00:40 +0000
asID: 55116
IP address blocks: 2602:2c9:4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:91:db:2f:52:52:77:54:89:a1:dc:a2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=158d5f15-a892-4134-840b-026e68357d71
Validity
Not Before: Jan 17 02:00:40 2025 GMT
Not After : Apr 17 01:00:40 2025 GMT
Subject: CN=258aac32-78b7-4680-adb8-0a48406422d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ae:9a:f5:6f:26:07:7b:9e:67:f5:31:25:fe:
0c:c1:ae:64:29:71:2a:d1:eb:e4:27:99:ca:3f:a7:
22:57:01:16:52:0b:2f:7d:ee:77:54:ad:c1:63:d9:
48:11:08:c0:b9:b0:f5:5c:96:1e:cc:d3:4e:00:28:
3e:48:72:45:0d:1b:b2:99:41:bf:28:ec:94:0b:58:
5d:df:79:5c:95:63:a3:b6:3b:11:7d:82:6c:e2:fd:
50:a7:84:2b:15:50:8c:83:95:9c:9c:ea:2f:41:51:
23:4d:cc:60:45:89:4c:4d:ce:11:0c:fe:f5:53:41:
45:8b:3b:25:2c:a2:ff:9c:cd:2e:68:b5:15:67:15:
83:0d:48:96:6b:b7:09:bf:32:8b:5a:05:3c:42:fe:
d8:c7:23:9e:97:3d:99:6b:c7:35:20:ef:ca:56:2e:
33:8e:01:b9:06:95:bc:83:45:6a:3f:7e:96:bd:67:
0a:5a:76:ae:ac:c9:bc:9c:fa:69:e3:73:e0:94:d0:
33:5e:d4:fb:da:29:12:47:6e:47:50:76:e4:d3:8d:
e6:22:ad:d2:da:77:3b:3a:11:fa:ad:ae:1f:b8:d1:
1d:91:90:10:2f:4d:d1:f6:7e:64:33:4d:c8:2d:0f:
88:91:1e:2e:06:48:95:c0:26:51:00:fe:5f:bd:13:
b9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E2:76:FD:7B:E9:F4:04:4A:3E:A9:33:7C:B1:BB:0E:F1:1B:E9:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/dc8b4841-4648-3afc-93d8-17cafe748add.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl
X509v3 Authority Key Identifier:
keyid:2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:2c9:4::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:d9:d4:98:77:d0:27:b4:23:b2:88:07:5b:88:d8:9e:81:23:
2b:f9:56:05:3d:ce:3d:84:2c:34:41:0b:7b:57:4c:19:a8:7c:
b5:d6:ea:35:52:0a:16:4a:cd:1f:29:05:c5:fa:0e:00:e1:82:
b8:d8:ad:54:75:8f:a4:b5:df:0a:38:29:c6:9b:b1:94:62:6e:
ab:51:00:6c:03:d9:ac:b2:be:34:b5:9e:2f:bf:f1:28:2b:d0:
df:c5:87:14:74:4a:42:8f:3e:6e:2e:08:21:df:a7:79:95:2e:
59:99:aa:b8:53:a1:3f:1d:7d:bb:93:8a:9e:5d:37:68:4c:7f:
25:59:1d:c2:ab:86:b9:3e:78:df:28:bf:2a:ff:b0:fe:b8:6e:
aa:0b:cb:53:d7:ba:15:6d:32:a3:ab:26:a9:ab:d2:5a:e0:34:
17:34:35:28:05:2e:e9:49:5b:c5:3c:fd:f7:7d:a5:05:42:7f:
3e:67:32:60:2e:81:d8:80:62:b9:4f:83:aa:fe:eb:f2:ff:50:
c2:ed:39:8a:88:2b:8b:41:30:e4:4d:a6:63:31:14:f4:e2:0e:
ae:83:83:66:51:0c:23:7e:fd:95:d9:9f:b8:6d:eb:ce:f7:eb:
8d:76:1d:31:cd:b6:3c:3a:82:e8:28:19:a2:e0:c4:ee:eb:7b:
94:85:7b:20
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiR2y9SUndUiaHcogAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTU4ZDVmMTUtYTg5Mi00MTM0LTg0MGItMDI2ZTY4MzU3
ZDcxMB4XDTI1MDExNzAyMDA0MFoXDTI1MDQxNzAxMDA0MFowLzEtMCsGA1UEAxMk
MjU4YWFjMzItNzhiNy00NjgwLWFkYjgtMGE0ODQwNjQyMmQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoK6a9W8mB3ueZ/UxJf4Mwa5kKXEq0evkJ5nK
P6ciVwEWUgsvfe53VK3BY9lIEQjAubD1XJYezNNOACg+SHJFDRuymUG/KOyUC1hd
33lclWOjtjsRfYJs4v1Qp4QrFVCMg5WcnOovQVEjTcxgRYlMTc4RDP71U0FFizsl
LKL/nM0uaLUVZxWDDUiWa7cJvzKLWgU8Qv7YxyOelz2Za8c1IO/KVi4zjgG5BpW8
g0VqP36WvWcKWnaurMm8nPpp43PglNAzXtT72ikSR25HUHbk043mIq3S2nc7OhH6
ra4fuNEdkZAQL03R9n5kM03ILQ+IkR4uBkiVwCZRAP5fvRO5gwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCLidv176fQESj6pM3yxuw7xG+neMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xNThk
NWYxNS1hODkyLTQxMzQtODQwYi0wMjZlNjgzNTdkNzEvZGM4YjQ4NDEtNDY0OC0z
YWZjLTkzZDgtMTdjYWZlNzQ4YWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTU4ZDVmMTUtYTg5Mi00MTM0LTg0
MGItMDI2ZTY4MzU3ZDcxLzE1OGQ1ZjE1LWE4OTItNDEzNC04NDBiLTAyNmU2ODM1
N2Q3MS5jcmwwHwYDVR0jBBgwFoAULiFVEdwKOzYMzfIG1J3m38nHObowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8xNThkNWYxNS1hODkyLTQxMzQtODQwYi0wMjZl
NjgzNTdkNzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICyQAE
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEzZ1Jh30Ce0I7KIB1uI2J6BIyv5VgU9zj2ELDRBC3tXTBmofLXW
6jVSChZKzR8pBcX6DgDhgrjYrVR1j6S13wo4KcabsZRibqtRAGwD2ayyvjS1ni+/
8Sgr0N/FhxR0SkKPPm4uCCHfp3mVLlmZqrhToT8dfbuTip5dN2hMfyVZHcKrhrk+
eN8ovyr/sP64bqoLy1PXuhVtMqOrJqmr0lrgNBc0NSgFLulJW8U8/fd9pQVCfz5n
MmAugdiAYrlPg6r+6/L/UMLtOYqIK4tBMORNpmMxFPTiDq6Dg2ZRDCN+/ZXZn7ht
68736412HTHNtjw6gugoGaLgxO7re5SFeyA=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:29:20 2025 by rpki-client