Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/ffad3f0d-df61-36b2-bf0b-ab3759c78ec0.roa
File: ffad3f0d-df61-36b2-bf0b-ab3759c78ec0.roa (raw, json)
Hash identifier: TeKna/s2WmecP/r1d8WIKDVLd65n0v+4vkL3b6hmaI8=
Subject key identifier: 28:74:16:F2:EB:AF:9D:A6:9B:20:79:20:81:F2:51:80:89:78:F0:AD
Certificate issuer: /CN=a4e67936-c857-487d-93df-2dff7fa79988
Certificate serial: 010D0C9F432858491D7171A01D9015E64E3596E0
Authority key identifier: 16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/ffad3f0d-df61-36b2-bf0b-ab3759c78ec0.roa
Signing time: Sat 08 Mar 2025 02:00:39 +0000
ROA not before: Sat 08 Mar 2025 02:00:39 +0000
ROA not after: Fri 06 Jun 2025 01:00:39 +0000
asID: 19940
IP address blocks: 2606:8800::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1d:71:71:a0:1d:90:15:e6:4e:35:96:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4e67936-c857-487d-93df-2dff7fa79988
Validity
Not Before: Mar 8 02:00:39 2025 GMT
Not After : Jun 6 01:00:39 2025 GMT
Subject: CN=18e2de35-34de-4e72-af5d-512af30cefb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ee:12:e7:a8:ca:be:d7:1e:de:56:55:e6:eb:
36:33:69:68:3b:70:8e:7d:1e:7a:c9:ba:1d:e2:86:
8d:bf:da:7f:c7:4f:9e:1f:cf:51:77:50:4d:80:8c:
24:64:9d:dc:e6:74:d3:f3:40:e9:95:11:7c:f5:e8:
ab:99:eb:af:55:0e:96:3f:d5:9a:eb:0e:f1:ce:3b:
88:68:74:f8:e2:62:4c:6b:02:bf:60:d9:5d:56:3f:
d0:50:e5:3d:a0:f7:53:4f:cf:12:59:6f:0f:0b:4f:
93:69:13:56:2e:bc:4e:c5:3e:6b:4e:b8:8f:39:d3:
63:98:dd:b7:0c:96:bf:51:b1:d4:93:09:07:c3:8f:
22:92:79:d8:0b:63:78:31:85:0c:d0:34:d3:ce:29:
65:54:35:eb:94:f8:76:f8:7b:ce:4e:ef:fc:aa:7b:
c7:da:57:e4:b9:24:49:60:7d:f3:dd:d5:7e:fc:c3:
31:d2:cf:6f:ac:6c:4e:f2:84:0e:9c:ba:9b:d7:33:
86:33:c6:35:52:c6:84:3c:4e:d8:24:6a:b2:1d:e6:
bc:d4:e2:64:a2:db:96:11:7e:43:95:96:90:50:3e:
ae:03:75:86:0c:e1:79:de:66:ca:64:f9:45:ee:55:
64:0c:45:d0:2d:f0:6d:5f:aa:63:cf:a0:b2:87:99:
0b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:74:16:F2:EB:AF:9D:A6:9B:20:79:20:81:F2:51:80:89:78:F0:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/ffad3f0d-df61-36b2-bf0b-ab3759c78ec0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.crl
X509v3 Authority Key Identifier:
keyid:16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:8800::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:f5:c6:79:9f:cc:a5:ff:2d:02:ac:9c:1f:0a:fd:d2:25:b3:
94:0f:51:bd:07:3b:45:b1:e2:b7:53:b8:ab:89:f4:8d:d0:64:
d5:33:39:b2:5b:e2:c2:a5:c0:97:94:41:59:b2:c3:ce:7a:32:
7c:52:97:fa:aa:85:ee:07:35:c0:05:29:44:b5:e1:50:63:23:
51:93:78:73:4b:4a:c5:3a:7c:ed:8f:88:4e:46:0b:5d:88:59:
7a:4b:73:34:de:00:e9:38:8f:ca:10:97:d2:2d:3c:dc:d5:60:
f1:3a:1f:35:7e:0a:ee:82:bc:e1:55:58:09:2a:a6:86:1e:8a:
60:14:7f:7b:33:5c:0b:48:13:65:d8:e8:27:52:cc:f9:10:48:
bd:dc:7c:63:0a:47:ee:96:9f:f5:cc:27:53:11:cd:15:d3:80:
f0:57:ae:e6:53:ec:eb:5e:eb:db:17:2d:db:41:4f:c7:f2:77:
6e:35:5c:e3:a4:29:62:4d:0b:60:22:dd:86:7b:d7:69:ba:72:
a7:e6:34:17:ac:f1:1d:02:3d:d9:09:5a:68:82:42:8b:3d:a4:
1b:f5:aa:7e:4f:01:7f:d9:77:78:c6:71:fa:4f:0e:75:69:5d:
a4:ff:92:49:9b:8b:26:cf:85:3c:17:a1:cc:84:26:5a:a0:17:
0c:d5:cb:28
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkdcXGgHZAV5k41luAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTRlNjc5MzYtYzg1Ny00ODdkLTkzZGYtMmRmZjdmYTc5
OTg4MB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk
MThlMmRlMzUtMzRkZS00ZTcyLWFmNWQtNTEyYWYzMGNlZmIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvO4S56jKvtce3lZV5us2M2loO3COfR56ybod
4oaNv9p/x0+eH89Rd1BNgIwkZJ3c5nTT80DplRF89eirmeuvVQ6WP9Wa6w7xzjuI
aHT44mJMawK/YNldVj/QUOU9oPdTT88SWW8PC0+TaRNWLrxOxT5rTriPOdNjmN23
DJa/UbHUkwkHw48iknnYC2N4MYUM0DTTzillVDXrlPh2+HvOTu/8qnvH2lfkuSRJ
YH3z3dV+/MMx0s9vrGxO8oQOnLqb1zOGM8Y1UsaEPE7YJGqyHea81OJkotuWEX5D
lZaQUD6uA3WGDOF53mbKZPlF7lVkDEXQLfBtX6pjz6Cyh5kL3QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFCh0FvLrr52mmyB5IIHyUYCJePCtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNGU2
NzkzNi1jODU3LTQ4N2QtOTNkZi0yZGZmN2ZhNzk5ODgvZmZhZDNmMGQtZGY2MS0z
NmIyLWJmMGItYWIzNzU5Yzc4ZWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTRlNjc5MzYtYzg1Ny00ODdkLTkz
ZGYtMmRmZjdmYTc5OTg4L2E0ZTY3OTM2LWM4NTctNDg3ZC05M2RmLTJkZmY3ZmE3
OTk4OC5jcmwwHwYDVR0jBBgwFoAUFqXjOhIoly6fUjQBp27hlpzf6Y4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNGU2NzkzNi1jODU3LTQ4N2QtOTNkZi0yZGZm
N2ZhNzk5ODguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgaIADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA99cZ5n8yl/y0CrJwfCv3SJbOUD1G9BztFseK3U7irifSN0GTVMzmy
W+LCpcCXlEFZssPOejJ8Upf6qoXuBzXABSlEteFQYyNRk3hzS0rFOnztj4hORgtd
iFl6S3M03gDpOI/KEJfSLTzc1WDxOh81fgrugrzhVVgJKqaGHopgFH97M1wLSBNl
2OgnUsz5EEi93HxjCkfulp/1zCdTEc0V04DwV67mU+zrXuvbFy3bQU/H8nduNVzj
pCliTQtgIt2Ge9dpunKn5jQXrPEdAj3ZCVpogkKLPaQb9ap+TwF/2Xd4xnH6Tw51
aV2k/5JJm4smz4U8F6HMhCZaoBcM1cso
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:40:06 2025 by rpki-client