Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/b8eafb21-360c-3a19-bb7e-88d44624594b.roa
File: b8eafb21-360c-3a19-bb7e-88d44624594b.roa (raw, json)
Hash identifier: vjEZkxtW2e3TdpEp4u9WqAIL5F31Ue5V1FFsveApJU4=
Subject key identifier: 55:B9:37:C6:BA:85:DA:24:1D:23:84:60:DF:29:16:F9:8D:8A:29:08
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F4328584902EC2E82350EF5BA11C383C0
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/b8eafb21-360c-3a19-bb7e-88d44624594b.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 30238
IP address blocks: 2620:101:2009::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:2e:82:35:0e:f5:ba:11:c3:83:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=36f8f991-3dd1-43ea-9042-3d9de25f2a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3b:91:23:ab:50:85:df:a1:f7:bd:ba:74:7d:
26:ee:8f:45:76:97:9f:15:62:8b:7c:d9:c5:42:0f:
c0:a2:58:d9:0b:cd:c2:82:9a:8d:80:2d:70:8e:27:
53:a9:26:ee:4e:27:da:d0:11:a6:f8:54:56:33:f4:
17:82:f3:a5:eb:4f:84:ef:2b:ca:98:14:a6:8b:d4:
74:ad:df:a9:b8:28:5e:7e:4d:5e:38:d9:be:8a:35:
dc:d9:7f:2b:e6:86:77:f7:f3:ab:f0:54:6f:30:d5:
f4:13:38:35:9b:26:7e:4c:35:1a:f4:05:be:2c:78:
a7:ae:71:40:0b:17:8e:7f:64:b1:30:e4:c3:b8:02:
59:88:f9:b2:10:92:f1:c3:fa:da:69:2d:e1:40:39:
3b:dd:64:04:53:e4:7a:d0:f3:6b:4a:48:a6:66:cf:
f9:19:63:40:af:d9:5d:67:99:7d:68:66:5f:47:61:
d1:82:29:db:24:b2:62:36:df:ed:e1:e3:35:fc:94:
57:14:a7:30:67:e0:2d:04:7d:ad:fe:3c:c0:ab:51:
1c:5a:e1:ce:29:ff:2d:92:41:17:22:ca:31:2a:53:
30:64:19:c3:ef:fc:ab:39:ea:33:84:7a:10:64:70:
12:e0:03:14:f2:f8:ff:a1:3f:8c:45:43:af:2f:36:
34:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B9:37:C6:BA:85:DA:24:1D:23:84:60:DF:29:16:F9:8D:8A:29:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/b8eafb21-360c-3a19-bb7e-88d44624594b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:101:2009::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:4f:1d:fc:c1:0a:ef:b0:e6:76:3a:a7:d9:e7:ae:ff:1f:d3:
58:c9:cc:ce:2e:4d:50:5b:4c:8b:4f:b5:c1:c7:84:8b:7e:91:
c0:ed:8b:29:39:7c:31:1a:4e:76:0d:12:41:d0:22:76:58:c8:
12:6a:03:d6:3a:ef:cf:63:05:96:2d:7d:46:06:93:5d:a2:f4:
48:83:3f:af:85:dc:4c:33:a6:1b:12:14:10:1d:f0:90:7d:84:
2f:d2:de:ec:30:16:ae:da:09:07:50:f4:33:b9:07:e9:00:cc:
8c:bc:80:b1:a9:70:0f:5a:fe:0d:14:3d:e3:1b:66:20:0d:69:
30:00:30:35:42:ce:c3:4a:0a:15:e5:c9:be:a5:00:9a:63:bb:
e7:d1:d0:86:91:7f:ba:05:54:0d:76:85:a8:28:42:be:d9:89:
f8:05:5a:17:ff:db:6c:03:13:1d:ec:12:49:81:af:94:aa:3e:
27:8c:ab:f4:25:63:f4:19:37:21:aa:8c:f6:70:12:26:bf:d1:
79:75:0f:16:59:85:ca:db:a4:4d:f2:36:2c:db:05:42:bb:76:
e0:fe:45:19:41:46:b3:40:d8:88:75:fe:e9:d4:5b:f2:73:eb:
4b:6e:23:ca:d2:90:98:d2:b2:be:f7:f1:bf:8f:3f:7f:3b:49:
89:d5:89:02
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkC7C6CNQ71uhHDg8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm
NGM5MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk
MzZmOGY5OTEtM2RkMS00M2VhLTkwNDItM2Q5ZGUyNWYyYTllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TuRI6tQhd+h9726dH0m7o9FdpefFWKLfNnF
Qg/AoljZC83CgpqNgC1wjidTqSbuTifa0BGm+FRWM/QXgvOl60+E7yvKmBSmi9R0
rd+puChefk1eONm+ijXc2X8r5oZ39/Or8FRvMNX0Ezg1myZ+TDUa9AW+LHinrnFA
CxeOf2SxMOTDuAJZiPmyEJLxw/raaS3hQDk73WQEU+R60PNrSkimZs/5GWNAr9ld
Z5l9aGZfR2HRginbJLJiNt/t4eM1/JRXFKcwZ+AtBH2t/jzAq1EcWuHOKf8tkkEX
IsoxKlMwZBnD7/yrOeozhHoQZHAS4AMU8vj/oT+MRUOvLzY0VQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFW5N8a6hdokHSOEYN8pFvmNiikIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4
OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYjhlYWZiMjEtMzYwYy0z
YTE5LWJiN2UtODhkNDQ2MjQ1OTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4
NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm
ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0
ZTBiZmY0YzkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABASAJ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHxPHfzBCu+w5nY6p9nnrv8f01jJzM4uTVBbTItPtcHHhIt+kcDt
iyk5fDEaTnYNEkHQInZYyBJqA9Y6789jBZYtfUYGk12i9EiDP6+F3EwzphsSFBAd
8JB9hC/S3uwwFq7aCQdQ9DO5B+kAzIy8gLGpcA9a/g0UPeMbZiANaTAAMDVCzsNK
ChXlyb6lAJpju+fR0IaRf7oFVA12hagoQr7ZifgFWhf/22wDEx3sEkmBr5SqPieM
q/QlY/QZNyGqjPZwEia/0Xl1DxZZhcrbpE3yNizbBUK7duD+RRlBRrNA2Ih1/unU
W/Jz60tuI8rSkJjSsr738b+PP387SYnViQI=
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:54:12 2025 by rpki-client