Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/fd8fc722-6aa9-306a-ae00-97cae3ebf37c.roa
File: fd8fc722-6aa9-306a-ae00-97cae3ebf37c.roa (raw, json)
Hash identifier: mNrP0pSfWsWezhJnsiJKWDk5LI6u///B+bMFI4SJfkU=
Subject key identifier: 1A:B7:43:D9:96:7D:C4:47:8B:8E:5F:F9:34:BD:86:D0:AC:4C:7B:09
Certificate issuer: /CN=d184e471-080a-4e54-bf94-60dd0c8beb48
Certificate serial: 010D0C9F43285848A400B7B914464A02D1C95E80
Authority key identifier: 82:2A:C6:5F:05:77:96:D6:12:FB:24:86:E6:72:C6:12:A5:B6:41:51
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/fd8fc722-6aa9-306a-ae00-97cae3ebf37c.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 22926
IP address blocks: 2607:f5e8::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:b7:b9:14:46:4a:02:d1:c9:5e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d184e471-080a-4e54-bf94-60dd0c8beb48
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=7548662e-209f-4cc4-b6ed-5c1e92d4ef05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:62:8b:56:9c:ea:bd:0a:c7:da:d6:08:20:81:
2a:ad:86:f5:93:39:aa:b1:8c:91:4d:82:f2:34:c6:
89:69:05:f6:6a:44:74:c0:c2:95:41:c5:a3:9a:83:
88:7f:0e:66:5a:00:69:9d:16:58:f8:bb:38:c3:8e:
04:82:77:e0:6f:a5:2c:83:47:68:24:56:3f:45:f9:
7a:26:5d:d4:45:2f:0c:6e:67:d3:77:68:fe:d2:aa:
99:d0:1e:16:49:df:17:06:57:a1:06:b5:71:66:4b:
a6:03:30:dd:5d:fb:c9:99:5e:bd:73:67:b7:fe:28:
e0:c3:15:1d:e9:09:4a:d6:ac:db:2b:9e:ea:ae:fc:
7f:57:59:8e:42:c8:63:96:66:e0:36:a7:cb:b2:a3:
27:1b:4b:20:42:01:56:15:9d:6e:01:b1:72:83:29:
23:3c:c8:39:a4:67:42:f5:d3:d8:00:a2:71:db:f1:
6f:c7:cd:66:bc:77:f5:49:f6:ee:dc:11:b0:5e:be:
49:90:57:12:9c:e9:fe:f6:22:3e:0b:4c:40:9d:70:
48:f6:10:29:19:cf:bf:80:80:2c:3e:bc:52:6e:a2:
fa:2a:f9:bd:28:14:64:78:bc:e5:62:82:36:e9:41:
9c:c1:27:64:a1:9c:b9:07:3c:ff:a0:1e:91:74:47:
52:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B7:43:D9:96:7D:C4:47:8B:8E:5F:F9:34:BD:86:D0:AC:4C:7B:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/fd8fc722-6aa9-306a-ae00-97cae3ebf37c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.crl
X509v3 Authority Key Identifier:
keyid:82:2A:C6:5F:05:77:96:D6:12:FB:24:86:E6:72:C6:12:A5:B6:41:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:f5e8::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:79:5a:dd:5d:41:d0:de:8d:bf:82:7a:91:bb:c4:5f:aa:5d:
8b:c4:3f:42:46:0b:42:6b:38:8e:a2:00:75:b9:2b:cd:68:7f:
2d:1b:cc:d1:1e:9c:cb:55:6e:53:e5:7d:b2:51:7d:e9:27:aa:
7c:86:c1:c7:6a:d4:e2:12:74:ab:44:b7:12:26:7f:b3:da:46:
16:00:b2:2e:5f:5e:fd:38:17:52:4e:b0:35:de:2a:de:da:c2:
ff:cf:41:08:db:1d:86:b3:2d:31:c2:78:ff:bc:91:b5:65:b3:
89:68:43:31:40:d8:51:28:75:f4:20:6a:21:42:0d:af:88:d8:
9a:01:de:6a:92:c6:4b:65:b1:47:83:7e:93:a5:a3:f5:60:fd:
eb:63:b1:9f:a8:62:9b:01:a1:12:d6:30:ef:82:6b:60:b7:9b:
12:4a:45:00:19:bc:1c:87:96:dd:20:10:47:45:16:03:6d:a9:
3c:7b:b2:9c:16:71:39:42:27:17:8c:e9:05:05:44:c4:de:dd:
d4:45:ea:ec:e1:cb:77:18:c3:30:fa:74:c6:fe:fb:fa:a3:ba:
b7:92:a4:b5:75:fd:50:6a:49:b3:18:4d:d3:20:7d:73:2f:9f:
f6:d2:44:9d:6b:f6:4e:d6:c7:e6:5f:bf:5f:07:38:9a:19:ca:
d6:29:31:97
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEikALe5FEZKAtHJXoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDE4NGU0NzEtMDgwYS00ZTU0LWJmOTQtNjBkZDBjOGJl
YjQ4MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk
NzU0ODY2MmUtMjA5Zi00Y2M0LWI2ZWQtNWMxZTkyZDRlZjA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA72KLVpzqvQrH2tYIIIEqrYb1kzmqsYyRTYLy
NMaJaQX2akR0wMKVQcWjmoOIfw5mWgBpnRZY+Ls4w44Egnfgb6Usg0doJFY/Rfl6
Jl3URS8MbmfTd2j+0qqZ0B4WSd8XBlehBrVxZkumAzDdXfvJmV69c2e3/ijgwxUd
6QlK1qzbK57qrvx/V1mOQshjlmbgNqfLsqMnG0sgQgFWFZ1uAbFygykjPMg5pGdC
9dPYAKJx2/Fvx81mvHf1Sfbu3BGwXr5JkFcSnOn+9iI+C0xAnXBI9hApGc+/gIAs
PrxSbqL6Kvm9KBRkeLzlYoI26UGcwSdkoZy5Bzz/oB6RdEdSjwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFBq3Q9mWfcRHi45f+TS9htCsTHsJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kMTg0
ZTQ3MS0wODBhLTRlNTQtYmY5NC02MGRkMGM4YmViNDgvZmQ4ZmM3MjItNmFhOS0z
MDZhLWFlMDAtOTdjYWUzZWJmMzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDE4NGU0NzEtMDgwYS00ZTU0LWJm
OTQtNjBkZDBjOGJlYjQ4L2QxODRlNDcxLTA4MGEtNGU1NC1iZjk0LTYwZGQwYzhi
ZWI0OC5jcmwwHwYDVR0jBBgwFoAUgirGXwV3ltYS+ySG5nLGEqW2QVEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9kMTg0ZTQ3MS0wODBhLTRlNTQtYmY5NC02MGRk
MGM4YmViNDguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf16DBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAKeVrdXUHQ3o2/gnqRu8Rfql2LxD9CRgtCaziOogB1uSvNaH8tG8zR
HpzLVW5T5X2yUX3pJ6p8hsHHatTiEnSrRLcSJn+z2kYWALIuX179OBdSTrA13ire
2sL/z0EI2x2Gsy0xwnj/vJG1ZbOJaEMxQNhRKHX0IGohQg2viNiaAd5qksZLZbFH
g36TpaP1YP3rY7GfqGKbAaES1jDvgmtgt5sSSkUAGbwch5bdIBBHRRYDbak8e7Kc
FnE5QicXjOkFBUTE3t3URers4ct3GMMw+nTG/vv6o7q3kqS1df1QakmzGE3TIH1z
L5/20kSda/ZO1sfmX79fBziaGcrWKTGX
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:43:49 2025 by rpki-client