Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/ae87ef36-6fbc-35ed-9adc-6585fddb1361.roa
File: ae87ef36-6fbc-35ed-9adc-6585fddb1361.roa (raw, json)
Hash identifier: J7kbLdQ0dbnUQKLejl3YUjokzBTsFB3reo9G9SKWUAU=
Subject key identifier: 53:9E:92:68:B7:98:E6:5E:BA:78:49:AE:39:EC:7C:85:58:E5:C3:99
Certificate issuer: /CN=7746dca1-2236-41ce-ab1a-952e06f4769c
Certificate serial: 010D0C9F43285848F65BE26F91377A48CD101580
Authority key identifier: 0A:E6:84:83:00:60:D5:76:67:3F:01:3B:83:A3:7B:45:F1:C2:1B:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/ae87ef36-6fbc-35ed-9adc-6585fddb1361.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 0
IP address blocks: 2001:504:90::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:e2:6f:91:37:7a:48:cd:10:15:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7746dca1-2236-41ce-ab1a-952e06f4769c
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=621633f6-dac6-43ea-9ddd-63f30bccd66b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d7:f0:2d:0a:fa:18:14:1f:08:22:a1:0e:b3:
79:b6:da:f9:66:6e:5c:7b:c8:2a:f1:e1:33:41:d1:
19:1e:99:7d:d6:63:d9:ac:19:a2:cd:ce:d5:fb:10:
8e:65:c7:e7:a2:a3:f0:19:10:16:6a:ae:95:9d:93:
e9:fa:35:d7:6f:73:e8:c5:e1:8c:de:f3:d4:a1:d3:
9c:ec:c3:4d:98:17:8f:2b:40:85:36:96:e7:50:4a:
59:d4:09:e5:0f:8e:c9:7d:6c:41:04:e5:e9:c9:71:
db:a6:8e:e0:30:c4:2a:4d:4c:fd:a8:d7:c6:aa:46:
30:93:d8:b3:67:c9:ee:28:ce:64:f0:a9:3d:7a:66:
cb:4d:c4:e5:21:34:f6:6e:77:5c:a8:23:27:b4:68:
7b:f2:02:64:20:24:2c:01:77:3c:6a:bf:1c:04:44:
dc:31:31:28:87:3f:59:82:6a:75:af:55:30:8c:37:
84:3f:e4:5d:93:2e:7e:97:85:cb:84:e1:86:d7:5c:
bc:7d:24:6b:2f:80:1d:79:a1:13:a5:e1:52:50:9f:
61:eb:13:46:05:5d:77:66:3d:49:12:f5:bb:6a:50:
30:71:35:0b:5b:c3:c3:76:df:18:29:70:f0:13:a7:
00:e5:2d:9c:18:26:20:53:61:6a:9c:ad:58:67:ae:
52:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:9E:92:68:B7:98:E6:5E:BA:78:49:AE:39:EC:7C:85:58:E5:C3:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/ae87ef36-6fbc-35ed-9adc-6585fddb1361.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/7746dca1-2236-41ce-ab1a-952e06f4769c.crl
X509v3 Authority Key Identifier:
keyid:0A:E6:84:83:00:60:D5:76:67:3F:01:3B:83:A3:7B:45:F1:C2:1B:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:504:90::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:3f:c3:4d:5d:b6:9e:ac:9d:92:6e:40:10:2c:8a:d4:e2:5b:
55:84:fe:c8:d6:ac:99:14:a9:a9:71:6a:e1:2a:04:e3:2d:ea:
46:94:e9:b5:f8:e0:5e:80:31:13:90:56:cd:59:ff:57:d2:da:
00:1e:49:b4:9e:2d:99:ac:84:4d:92:b0:9d:2f:6d:32:73:43:
db:3f:e8:12:60:8d:b1:c7:b5:88:d5:c2:55:9d:88:aa:56:10:
46:0c:c3:9e:ea:0c:f4:be:0d:4f:7d:54:e5:d2:dd:b8:b5:c6:
0c:59:79:83:60:82:0c:3b:8a:58:d2:59:ec:82:bf:be:89:42:
77:77:dc:3d:88:b2:6e:88:49:a1:22:9e:f9:46:0d:76:cc:a6:
8e:03:ad:6f:f3:05:56:79:55:b0:cd:64:82:5a:97:a8:48:54:
fd:75:ed:1c:ec:de:af:41:98:1c:47:e6:90:16:54:ad:07:8f:
e8:55:e7:d1:cb:b7:c3:0f:d2:ce:d6:1d:c0:84:08:c5:4a:a1:
a8:c2:dd:e7:9f:d6:b0:e2:22:79:dd:1e:5d:56:e9:4e:83:a4:
06:08:37:e1:5d:1f:42:03:3c:1c:2b:d7:38:e5:fd:26:df:2e:
ca:6f:cb:c9:28:58:e9:26:eb:a5:cb:3d:51:06:16:d0:ea:b1:
c5:a3:3b:76
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj2W+JvkTd6SM0QFYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc0NmRjYTEtMjIzNi00MWNlLWFiMWEtOTUyZTA2ZjQ3
NjljMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk
NjIxNjMzZjYtZGFjNi00M2VhLTlkZGQtNjNmMzBiY2NkNjZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstfwLQr6GBQfCCKhDrN5ttr5Zm5ce8gq8eEz
QdEZHpl91mPZrBmizc7V+xCOZcfnoqPwGRAWaq6VnZPp+jXXb3PoxeGM3vPUodOc
7MNNmBePK0CFNpbnUEpZ1AnlD47JfWxBBOXpyXHbpo7gMMQqTUz9qNfGqkYwk9iz
Z8nuKM5k8Kk9embLTcTlITT2bndcqCMntGh78gJkICQsAXc8ar8cBETcMTEohz9Z
gmp1r1UwjDeEP+Rdky5+l4XLhOGG11y8fSRrL4AdeaETpeFSUJ9h6xNGBV13Zj1J
EvW7alAwcTULW8PDdt8YKXDwE6cA5S2cGCYgU2FqnK1YZ65SjQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFOekmi3mOZeunhJrjnsfIVY5cOZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NzQ2
ZGNhMS0yMjM2LTQxY2UtYWIxYS05NTJlMDZmNDc2OWMvYWU4N2VmMzYtNmZiYy0z
NWVkLTlhZGMtNjU4NWZkZGIxMzYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzc0NmRjYTEtMjIzNi00MWNlLWFi
MWEtOTUyZTA2ZjQ3NjljLzc3NDZkY2ExLTIyMzYtNDFjZS1hYjFhLTk1MmUwNmY0
NzY5Yy5jcmwwHwYDVR0jBBgwFoAUCuaEgwBg1XZnPwE7g6N7RfHCG/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NzQ2ZGNhMS0yMjM2LTQxY2UtYWIxYS05NTJl
MDZmNDc2OWMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBACQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEk/w01dtp6snZJuQBAsitTiW1WE/sjWrJkUqalxauEqBOMt6kaU
6bX44F6AMROQVs1Z/1fS2gAeSbSeLZmshE2SsJ0vbTJzQ9s/6BJgjbHHtYjVwlWd
iKpWEEYMw57qDPS+DU99VOXS3bi1xgxZeYNgggw7iljSWeyCv76JQnd33D2Ism6I
SaEinvlGDXbMpo4DrW/zBVZ5VbDNZIJal6hIVP117Rzs3q9BmBxH5pAWVK0Hj+hV
59HLt8MP0s7WHcCECMVKoajC3eef1rDiInndHl1W6U6DpAYIN+FdH0IDPBwr1zjl
/SbfLspvy8koWOkm66XLPVEGFtDqscWjO3Y=
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:30:25 2025 by rpki-client