Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d3baaff6-9184-3e90-aed6-78e8be196ba7.roa
File: d3baaff6-9184-3e90-aed6-78e8be196ba7.roa (raw, json)
Hash identifier: mIIEtt+BGmz8htYeQRLqbqXeXyMzTrQ6xOf1ygiseus=
Subject key identifier: 55:3A:A0:15:3B:AB:BD:53:26:ED:C6:96:10:55:49:EA:45:56:27:45
Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial: 010D0C9F432858495ABEC64E5DD0B63C2DB29280
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d3baaff6-9184-3e90-aed6-78e8be196ba7.roa
Signing time: Sun 30 Mar 2025 01:00:47 +0000
ROA not before: Sun 30 Mar 2025 01:00:47 +0000
ROA not after: Sat 28 Jun 2025 01:00:47 +0000
asID: 62651
IP address blocks: 2604:ea80:2400::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5a:be:c6:4e:5d:d0:b6:3c:2d:b2:92:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Validity
Not Before: Mar 30 01:00:47 2025 GMT
Not After : Jun 28 01:00:47 2025 GMT
Subject: CN=47397b5c-f4b8-4393-a9fd-aed1b63a7789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:3f:c1:ff:94:76:f8:11:d5:64:31:eb:4e:a4:
45:81:47:a1:42:3a:01:35:21:54:77:ea:ac:3d:d0:
90:b5:6b:85:84:1b:38:ce:92:88:93:a9:73:0e:58:
a1:22:5f:8e:bd:b7:b2:a7:55:a7:d1:1c:12:52:43:
53:48:4c:b9:a0:34:e5:da:ff:2d:46:f4:1b:e6:c8:
1f:25:ee:1a:ff:e7:c9:cf:0e:72:f4:ff:e7:9b:75:
ad:fb:4a:cd:94:cd:cc:71:3e:80:d0:4d:cc:8f:cd:
96:a4:c9:6f:27:6b:fe:ce:62:27:c0:41:4d:6b:41:
03:2d:cf:59:43:f4:df:52:8e:69:f2:d5:f2:09:13:
2c:42:7c:2d:e9:ad:14:eb:0a:ce:71:50:38:25:e7:
be:f9:a9:73:9c:bf:a5:03:1e:2d:fc:2c:09:23:7b:
55:3a:f0:a6:fa:24:05:44:37:42:7d:00:55:1c:82:
8e:41:60:40:93:5f:d1:10:10:05:d0:9d:b8:23:59:
35:a1:a0:6e:a3:65:39:ae:86:cd:5f:24:f1:aa:c1:
fc:79:77:f3:e0:49:09:0d:df:f1:05:e5:39:f5:1c:
90:1a:64:79:8a:10:3a:a4:8a:69:82:62:cc:e5:10:
1d:e3:69:38:d9:b7:1b:34:68:bb:ff:82:42:c6:ac:
3d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:3A:A0:15:3B:AB:BD:53:26:ED:C6:96:10:55:49:EA:45:56:27:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d3baaff6-9184-3e90-aed6-78e8be196ba7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
X509v3 Authority Key Identifier:
keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:ea80:2400::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:d9:29:52:61:c6:4f:ab:da:c2:1f:91:6f:86:18:a9:e0:b2:
9c:03:13:ff:e8:a2:b2:de:36:a4:b8:5a:c1:95:7c:2f:92:21:
d6:96:66:44:3a:3b:86:13:ff:7a:8c:ae:f2:96:42:d7:23:fb:
9d:75:a6:e4:8d:d5:e1:d7:44:35:57:c0:51:0b:67:21:ad:7a:
11:34:72:5e:95:ce:2f:b1:06:23:71:51:29:06:a6:d3:74:12:
60:4a:35:41:d7:3b:aa:22:b8:b6:a8:b2:48:6c:ea:a9:5d:85:
4f:f9:f5:c7:d2:29:8e:b9:da:0e:d3:16:81:60:65:4e:e2:5c:
5a:31:d7:79:6b:55:70:90:56:cf:1a:e5:ac:52:c6:c7:5f:6f:
8c:d7:f5:09:56:6c:07:d6:07:55:67:7f:0b:e3:3e:a8:42:17:
be:30:95:1f:8b:4f:c1:77:92:6c:9f:e0:a8:0f:7e:b9:d4:e8:
24:1c:29:b5:5a:39:67:33:63:ba:ad:d6:b3:92:6c:32:23:08:
5b:1e:44:b2:ea:e1:47:c8:5f:81:1e:6a:81:3d:d8:92:ad:f7:
a0:b8:c1:af:ed:e1:69:e4:e5:37:93:81:85:6f:88:7d:64:ae:
e6:db:a3:ba:8f:35:2b:ed:68:07:8b:7f:c9:b7:2f:27:2a:f3:
ae:4c:68:14
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWElavsZOXdC2PC2ykoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz
NmJhMB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk
NDczOTdiNWMtZjRiOC00MzkzLWE5ZmQtYWVkMWI2M2E3Nzg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8z/B/5R2+BHVZDHrTqRFgUehQjoBNSFUd+qs
PdCQtWuFhBs4zpKIk6lzDlihIl+Ovbeyp1Wn0RwSUkNTSEy5oDTl2v8tRvQb5sgf
Je4a/+fJzw5y9P/nm3Wt+0rNlM3McT6A0E3Mj82WpMlvJ2v+zmInwEFNa0EDLc9Z
Q/TfUo5p8tXyCRMsQnwt6a0U6wrOcVA4Jee++alznL+lAx4t/CwJI3tVOvCm+iQF
RDdCfQBVHIKOQWBAk1/REBAF0J24I1k1oaBuo2U5robNXyTxqsH8eXfz4EkJDd/x
BeU59RyQGmR5ihA6pIppgmLM5RAd42k42bcbNGi7/4JCxqw9UwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFFU6oBU7q71TJu3GlhBVSepFVidFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy
NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvZDNiYWFmZjYtOTE4NC0z
ZTkwLWFlZDYtNzhlOGJlMTk2YmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj
MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl
MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3
OGU4ZTM2YmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTqgCQw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAQNkpUmHGT6vawh+Rb4YYqeCynAMT/+iist42pLhawZV8L5Ih1pZm
RDo7hhP/eoyu8pZC1yP7nXWm5I3V4ddENVfAUQtnIa16ETRyXpXOL7EGI3FRKQam
03QSYEo1Qdc7qiK4tqiySGzqqV2FT/n1x9IpjrnaDtMWgWBlTuJcWjHXeWtVcJBW
zxrlrFLGx19vjNf1CVZsB9YHVWd/C+M+qEIXvjCVH4tPwXeSbJ/gqA9+udToJBwp
tVo5ZzNjuq3Ws5JsMiMIWx5EsurhR8hfgR5qgT3Ykq33oLjBr+3haeTlN5OBhW+I
fWSu5tujuo81K+1oB4t/ybcvJyrzrkxoFA==
-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:50 2025 by rpki-client on console.sobornost.net