Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/faf5c4eb-8cde-3c07-be5a-b96ab533ca41.roa
File: faf5c4eb-8cde-3c07-be5a-b96ab533ca41.roa (raw, json)
Hash identifier: wA9F0S2Uhwblj1+y2ht6EWTgjri7khk70Q81IskMcPw=
Subject key identifier: E9:F6:CE:BF:24:5A:2E:C5:40:DF:B5:FB:E8:27:6E:E3:12:14:7F:05
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285849218437C56521C2DFC91F8100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/faf5c4eb-8cde-3c07-be5a-b96ab533ca41.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 22394
IP address blocks: 2001:4888:8064::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:84:37:c5:65:21:c2:df:c9:1f:81:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=9564774e-3fd9-4d90-bfed-92b0a0fa83cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f7:f8:2a:5a:a4:76:74:4b:00:71:e9:c6:4e:
42:d8:83:26:1b:ea:dc:e0:bd:17:67:7e:8d:40:6f:
05:7d:d1:66:51:e0:65:af:4b:1d:54:72:e7:66:d0:
98:c5:42:86:6f:d5:11:bc:88:87:04:f3:5e:bb:a1:
73:60:2d:bb:ec:ad:3b:ed:81:05:ab:76:eb:9d:3c:
d0:ab:13:0f:1e:46:1e:52:c4:db:59:15:ca:8f:5e:
21:1b:9f:78:4e:b5:a0:7b:09:e9:ac:9a:3b:c0:72:
c3:07:86:33:c2:e7:a3:f0:7b:ed:27:b4:b7:d5:a5:
cb:cc:c7:67:75:33:de:80:ad:01:3f:6e:58:06:ed:
61:a4:79:a0:cb:bd:d4:16:1f:17:04:dd:d0:f2:ae:
e3:69:73:46:57:31:5f:cd:07:37:9e:c6:15:4c:9e:
17:a3:7f:70:56:43:86:94:37:b2:4c:b4:72:55:01:
0e:34:2c:d2:27:25:51:d9:d8:15:26:13:18:41:9e:
2f:55:29:97:c5:71:b2:a7:bd:76:d7:a8:f0:82:d6:
fe:f7:a4:8a:07:af:8b:e0:3a:f4:8d:57:75:9c:fb:
60:7c:0d:ed:c4:03:dc:8c:53:ab:2c:3e:da:5e:80:
4f:f3:98:cd:46:d9:79:84:15:79:66:a3:29:92:80:
85:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F6:CE:BF:24:5A:2E:C5:40:DF:B5:FB:E8:27:6E:E3:12:14:7F:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/faf5c4eb-8cde-3c07-be5a-b96ab533ca41.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4888:8064::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:4f:9a:2c:af:00:04:3f:86:7e:b4:a1:0f:b5:0f:7c:87:97:
bb:8e:71:d0:01:f2:c3:bc:25:33:86:2b:83:ca:e6:db:ef:06:
7c:8a:ef:b7:84:9f:61:36:63:bd:f5:a7:94:a3:7b:11:5c:4d:
aa:91:88:22:28:68:ac:86:6e:60:8f:eb:ab:ea:c7:1d:a8:98:
15:cc:a4:a0:b5:38:78:e9:c7:9a:68:de:01:3c:78:31:f0:fb:
75:d1:e0:4c:79:c2:d4:83:85:49:c8:81:38:9d:91:fb:9c:4b:
70:88:37:76:ed:10:7e:91:7d:34:d1:35:d2:04:3c:7a:40:0e:
62:38:55:9d:f3:8e:58:de:4a:e4:f4:ce:30:dc:5e:30:5a:82:
ee:ad:70:cf:ea:be:67:fd:6c:50:2b:25:c3:fd:f8:bf:bf:eb:
91:28:32:ef:1f:1b:64:52:b5:a2:5f:0b:c0:30:10:55:53:76:
39:d8:e2:c0:65:1f:8f:98:e7:09:dd:ac:16:38:f9:91:49:71:
54:85:9b:2c:20:f4:ea:6e:df:d4:3f:3a:3c:96:00:c3:19:d2:
d4:d4:65:11:c7:eb:fe:97:5d:3b:56:73:d2:f5:6e:64:73:1a:
b9:1d:e6:9e:47:74:55:4f:6d:5b:9a:e4:41:f5:b0:9f:00:87:
80:e4:54:2a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkhhDfFZSHC38kfgQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk
OTU2NDc3NGUtM2ZkOS00ZDkwLWJmZWQtOTJiMGEwZmE4M2NmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvf4KlqkdnRLAHHpxk5C2IMmG+rc4L0XZ36N
QG8FfdFmUeBlr0sdVHLnZtCYxUKGb9URvIiHBPNeu6FzYC277K077YEFq3brnTzQ
qxMPHkYeUsTbWRXKj14hG594TrWgewnprJo7wHLDB4Yzwuej8HvtJ7S31aXLzMdn
dTPegK0BP25YBu1hpHmgy73UFh8XBN3Q8q7jaXNGVzFfzQc3nsYVTJ4Xo39wVkOG
lDeyTLRyVQEONCzSJyVR2dgVJhMYQZ4vVSmXxXGyp71216jwgtb+96SKB6+L4Dr0
jVd1nPtgfA3txAPcjFOrLD7aXoBP85jNRtl5hBV5ZqMpkoCFDQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOn2zr8kWi7FQN+1++gnbuMSFH8FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZmFmNWM0ZWItOGNkZS0z
YzA3LWJlNWEtYjk2YWI1MzNjYTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIiIBk
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABVPmiyvAAQ/hn60oQ+1D3yHl7uOcdAB8sO8JTOGK4PK5tvvBnyK
77eEn2E2Y731p5SjexFcTaqRiCIoaKyGbmCP66vqxx2omBXMpKC1OHjpx5po3gE8
eDHw+3XR4Ex5wtSDhUnIgTidkfucS3CIN3btEH6RfTTRNdIEPHpADmI4VZ3zjlje
SuT0zjDcXjBagu6tcM/qvmf9bFArJcP9+L+/65EoMu8fG2RStaJfC8AwEFVTdjnY
4sBlH4+Y5wndrBY4+ZFJcVSFmywg9Opu39Q/OjyWAMMZ0tTUZRHH6/6XXTtWc9L1
bmRzGrkd5p5HdFVPbVua5EH1sJ8Ah4DkVCo=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:20:44 2025 by rpki-client