Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73/b5688e20-5a18-31ad-8912-33c14a17342f.roa
File: b5688e20-5a18-31ad-8912-33c14a17342f.roa (raw, json)
Hash identifier: 2OUp5iqLe4ECpQm94xs/l5MQCz4gtn1Juz3hXiok7wY=
Subject key identifier: 06:DB:02:56:85:53:10:70:35:1F:01:7A:34:C3:98:A9:F8:E3:94:1D
Certificate issuer: /CN=23f3c964-aab2-4965-9f55-d270cc840a73
Certificate serial: 010D0C9F43285849446942E651AE6847CF3789C0
Authority key identifier: 3B:43:D9:DB:E1:64:AD:7E:55:75:B1:27:1E:19:FF:64:55:A0:42:F3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73/b5688e20-5a18-31ad-8912-33c14a17342f.roa
Signing time: Sat 22 Mar 2025 01:00:40 +0000
ROA not before: Sat 22 Mar 2025 01:00:40 +0000
ROA not after: Fri 20 Jun 2025 01:00:40 +0000
asID: 16509
IP address blocks: 2602:f86e:102::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:44:69:42:e6:51:ae:68:47:cf:37:89:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f3c964-aab2-4965-9f55-d270cc840a73
Validity
Not Before: Mar 22 01:00:40 2025 GMT
Not After : Jun 20 01:00:40 2025 GMT
Subject: CN=d64cfaef-dcf6-4283-8a60-cf722ee49ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9c:1e:e8:b4:e1:37:4b:1c:6a:78:6d:66:c9:
9e:eb:6e:3a:f6:97:52:56:23:5d:4a:49:8d:c9:4d:
1f:1c:ba:8d:9c:95:c9:16:ff:06:1a:46:4a:2f:74:
a0:18:78:99:be:d3:06:47:f1:6c:71:a3:a0:60:38:
1b:f3:55:ca:d6:c7:4e:1e:6a:2d:0f:88:c7:6f:86:
48:93:66:d0:59:94:e2:cc:36:61:ff:5a:74:9c:b2:
26:f9:7c:2a:dd:ae:e0:ee:67:c9:ae:5d:85:53:5f:
92:a7:f4:2b:22:15:0b:23:8c:6e:1b:64:64:6a:41:
04:9e:d3:bb:83:da:9e:10:8b:c2:68:e2:2f:12:96:
23:80:ef:18:6c:f1:ef:1d:81:d3:51:1c:8a:64:52:
90:32:30:26:56:22:27:bb:a8:6b:01:a4:02:12:c7:
29:e9:09:9c:a0:1a:de:db:8e:2f:17:99:01:1c:0e:
ea:a5:85:5d:ea:5a:b5:ea:6f:44:d7:3b:a3:20:a8:
6e:f9:b3:fc:b1:67:62:6f:3d:09:4c:1d:fd:d6:d9:
47:e0:b3:a8:52:05:fa:f6:a5:0a:eb:aa:a0:d4:05:
73:cc:dc:d4:46:07:6f:1f:15:8f:a5:34:c7:9f:a5:
49:17:94:a9:98:07:20:4e:09:48:60:22:03:b2:ff:
20:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:DB:02:56:85:53:10:70:35:1F:01:7A:34:C3:98:A9:F8:E3:94:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73/b5688e20-5a18-31ad-8912-33c14a17342f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73/23f3c964-aab2-4965-9f55-d270cc840a73.crl
X509v3 Authority Key Identifier:
keyid:3B:43:D9:DB:E1:64:AD:7E:55:75:B1:27:1E:19:FF:64:55:A0:42:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f86e:102::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:a6:7b:4a:ce:9f:a8:80:fb:64:ed:35:7b:42:6e:91:d1:70:
b8:80:5b:eb:bd:4c:c5:1e:be:89:ba:f6:ae:85:85:2b:71:03:
8f:1a:c5:8b:96:64:b7:55:1d:e3:1c:79:69:82:92:80:92:ea:
4c:21:c4:89:6b:56:1a:39:8d:a9:c3:dd:46:2d:52:6d:4c:2b:
87:3b:8f:31:9a:ea:ac:ac:a3:17:27:84:db:b4:78:57:63:35:
70:70:0d:97:66:56:08:c5:37:08:0d:8e:0b:52:a0:74:39:82:
13:23:95:d1:9a:bb:7f:6b:38:c9:9f:0d:63:56:77:4a:4e:a2:
4f:a7:c6:79:74:c4:0d:6b:48:1b:ea:57:12:8a:a7:1b:93:18:
36:5d:e5:a1:35:31:ee:e2:08:4d:37:b1:e2:22:d1:34:23:a6:
8d:fd:e7:2d:87:36:59:2c:ab:e9:d1:5f:ce:58:67:eb:80:26:
7e:44:09:ab:0c:e9:94:d7:05:16:c3:2b:77:52:88:df:d2:ab:
83:6d:e1:36:10:49:56:60:64:4a:8a:ab:a4:b2:00:5d:e1:ab:
f2:57:b1:63:21:dc:1c:20:28:8f:71:45:b4:fa:26:1d:33:99:
d1:4f:f2:c6:0b:9f:7d:42:00:56:d0:3e:01:93:6d:84:2c:5b:
84:12:17:54
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElEaULmUa5oR883icAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjNmM2M5NjQtYWFiMi00OTY1LTlmNTUtZDI3MGNjODQw
YTczMB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk
ZDY0Y2ZhZWYtZGNmNi00MjgzLThhNjAtY2Y3MjJlZTQ5ZWY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5we6LThN0scanhtZsme62469pdSViNdSkmN
yU0fHLqNnJXJFv8GGkZKL3SgGHiZvtMGR/FscaOgYDgb81XK1sdOHmotD4jHb4ZI
k2bQWZTizDZh/1p0nLIm+Xwq3a7g7mfJrl2FU1+Sp/QrIhULI4xuG2RkakEEntO7
g9qeEIvCaOIvEpYjgO8YbPHvHYHTURyKZFKQMjAmViInu6hrAaQCEscp6QmcoBre
244vF5kBHA7qpYVd6lq16m9E1zujIKhu+bP8sWdibz0JTB391tlH4LOoUgX69qUK
66qg1AVzzNzURgdvHxWPpTTHn6VJF5SpmAcgTglIYCIDsv8gkQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAbbAlaFUxBwNR8BejTDmKn445QdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8yM2Yz
Yzk2NC1hYWIyLTQ5NjUtOWY1NS1kMjcwY2M4NDBhNzMvYjU2ODhlMjAtNWExOC0z
MWFkLTg5MTItMzNjMTRhMTczNDJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMjNmM2M5NjQtYWFiMi00OTY1LTlm
NTUtZDI3MGNjODQwYTczLzIzZjNjOTY0LWFhYjItNDk2NS05ZjU1LWQyNzBjYzg0
MGE3My5jcmwwHwYDVR0jBBgwFoAUO0PZ2+FkrX5VdbEnHhn/ZFWgQvMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8yM2YzYzk2NC1hYWIyLTQ5NjUtOWY1NS1kMjcw
Y2M4NDBhNzMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL4bgEC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHyme0rOn6iA+2TtNXtCbpHRcLiAW+u9TMUevom69q6FhStxA48a
xYuWZLdVHeMceWmCkoCS6kwhxIlrVho5janD3UYtUm1MK4c7jzGa6qysoxcnhNu0
eFdjNXBwDZdmVgjFNwgNjgtSoHQ5ghMjldGau39rOMmfDWNWd0pOok+nxnl0xA1r
SBvqVxKKpxuTGDZd5aE1Me7iCE03seIi0TQjpo395y2HNlksq+nRX85YZ+uAJn5E
CasM6ZTXBRbDK3dSiN/Sq4Nt4TYQSVZgZEqKq6SyAF3hq/JXsWMh3BwgKI9xRbT6
Jh0zmdFP8sYLn31CAFbQPgGTbYQsW4QSF1Q=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:17:42 2025 by rpki-client