Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/ece050b4-dcf3-3746-99e1-7b9a425bdc1e.roa
File: ece050b4-dcf3-3746-99e1-7b9a425bdc1e.roa (raw, json)
Hash identifier: qzwnK9m10gJYvKgJ1tqlxjHWhbFSnSB7kT+LWxNWuL0=
Subject key identifier: A4:E0:83:B9:64:BA:E3:3D:54:5F:A0:5C:87:ED:D5:ED:A1:1C:81:F8
Certificate issuer: /CN=cc0eb2de-e5e8-4108-870e-8cbbff39885d
Certificate serial: 010D0C9F432858490E16C805B385E41E4E650100
Authority key identifier: 6C:28:11:4B:C2:E3:4A:9C:81:97:DA:33:48:7B:1E:AF:4E:77:F4:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/ece050b4-dcf3-3746-99e1-7b9a425bdc1e.roa
Signing time: Sun 02 Mar 2025 14:00:52 +0000
ROA not before: Sun 02 Mar 2025 14:00:52 +0000
ROA not after: Sat 31 May 2025 13:00:52 +0000
asID: 61350
IP address blocks: 2602:2db::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0e:16:c8:05:b3:85:e4:1e:4e:65:01:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc0eb2de-e5e8-4108-870e-8cbbff39885d
Validity
Not Before: Mar 2 14:00:52 2025 GMT
Not After : May 31 13:00:52 2025 GMT
Subject: CN=4ef8538d-5889-4ffc-a489-f00412907a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:8e:55:d7:d5:c8:32:38:40:34:64:49:e2:3d:
bd:5e:62:34:a6:0a:58:40:22:9e:ce:22:dc:1d:5e:
f0:eb:9b:38:01:2a:5d:4f:61:8b:f8:13:d1:73:19:
76:ec:7b:d0:91:a2:73:66:87:10:cd:72:2b:4e:45:
be:71:a3:90:c6:2b:40:d9:d1:42:a8:85:e6:60:d4:
1f:e5:c2:92:9f:b5:f5:bc:04:57:c5:74:66:da:0f:
06:11:e6:90:f7:33:f6:51:7c:54:6e:36:b3:42:50:
1a:5e:d1:c5:3c:0b:b8:e0:a7:7a:15:52:a8:15:3f:
2f:70:ab:04:2a:03:02:30:60:85:fd:2a:2b:55:c1:
c8:02:ea:62:a3:6e:a4:67:8b:73:0a:56:63:ec:b7:
1b:a2:58:fd:63:dc:e5:d0:88:97:9e:e1:85:92:d1:
20:94:02:fa:0d:13:d2:0f:a5:85:ac:dd:aa:f3:ef:
bc:f0:36:2b:35:57:21:d2:bd:ce:34:94:fc:35:a0:
b6:87:7b:10:7f:1d:94:0a:2c:04:1d:89:09:4a:a3:
58:1a:b6:89:50:e9:db:54:8d:ac:b9:c9:19:2c:c5:
05:83:2e:8e:5d:83:3f:13:c2:27:70:ca:71:dd:4d:
4a:4d:9b:9d:48:50:81:65:ef:61:51:49:20:01:6e:
50:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E0:83:B9:64:BA:E3:3D:54:5F:A0:5C:87:ED:D5:ED:A1:1C:81:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/ece050b4-dcf3-3746-99e1-7b9a425bdc1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.crl
X509v3 Authority Key Identifier:
keyid:6C:28:11:4B:C2:E3:4A:9C:81:97:DA:33:48:7B:1E:AF:4E:77:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:2db::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:8e:ba:a2:57:cf:d1:2a:57:ea:e8:33:bc:a5:60:63:88:d5:
56:38:a6:f1:5c:45:1d:f0:44:af:bd:8d:d9:0c:06:5b:36:4b:
86:7f:e5:ea:84:b7:04:f4:b4:1c:71:15:ad:08:0f:8a:28:ed:
0e:a4:fd:48:bc:59:32:f2:d2:2c:1f:83:10:88:34:fe:d5:b9:
4a:7c:45:1f:a0:56:e9:7f:fe:a0:3b:f3:b2:ca:9a:95:bb:39:
61:3c:1f:d2:a2:6b:b1:d2:97:bf:ff:67:5e:b5:93:57:9f:6e:
63:a3:0f:6f:fb:8b:6a:c4:7e:e2:a9:36:2f:b4:e4:86:dd:1c:
70:1b:bc:8e:22:01:84:ea:09:86:84:3d:a3:37:58:e8:b2:c0:
b2:17:02:8f:77:60:1d:b9:ab:2c:70:9d:51:f4:75:e5:5c:c4:
43:40:40:f6:57:18:d3:88:05:41:b8:93:a2:1d:58:65:af:87:
1e:b2:7c:4b:4c:45:db:42:ef:dd:c0:52:22:9a:2c:a1:8a:ee:
fd:70:ab:39:93:b7:f7:85:70:1b:7d:d3:68:6c:22:1f:4d:77:
92:75:32:09:ea:36:08:cb:07:cf:d1:ac:52:b8:77:dd:32:17:
d8:92:80:f6:60:d1:af:dc:60:01:2f:ea:a9:15:31:16:41:7f:
25:8b:58:c8
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkOFsgFs4XkHk5lAQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2MwZWIyZGUtZTVlOC00MTA4LTg3MGUtOGNiYmZmMzk4
ODVkMB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk
NGVmODUzOGQtNTg4OS00ZmZjLWE0ODktZjAwNDEyOTA3YTQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAho5V19XIMjhANGRJ4j29XmI0pgpYQCKeziLc
HV7w65s4ASpdT2GL+BPRcxl27HvQkaJzZocQzXIrTkW+caOQxitA2dFCqIXmYNQf
5cKSn7X1vARXxXRm2g8GEeaQ9zP2UXxUbjazQlAaXtHFPAu44Kd6FVKoFT8vcKsE
KgMCMGCF/SorVcHIAupio26kZ4tzClZj7Lcbolj9Y9zl0IiXnuGFktEglAL6DRPS
D6WFrN2q8++88DYrNVch0r3ONJT8NaC2h3sQfx2UCiwEHYkJSqNYGraJUOnbVI2s
uckZLMUFgy6OXYM/E8IncMpx3U1KTZudSFCBZe9hUUkgAW5QoQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFKTgg7lkuuM9VF+gXIft1e2hHIH4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jYzBl
YjJkZS1lNWU4LTQxMDgtODcwZS04Y2JiZmYzOTg4NWQvZWNlMDUwYjQtZGNmMy0z
NzQ2LTk5ZTEtN2I5YTQyNWJkYzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvY2MwZWIyZGUtZTVlOC00MTA4LTg3
MGUtOGNiYmZmMzk4ODVkL2NjMGViMmRlLWU1ZTgtNDEwOC04NzBlLThjYmJmZjM5
ODg1ZC5jcmwwHwYDVR0jBBgwFoAUbCgRS8LjSpyBl9ozSHser0539MkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9jYzBlYjJkZS1lNWU4LTQxMDgtODcwZS04Y2Ji
ZmYzOTg4NWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgIC2wAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAg466olfP0SpX6ugzvKVgY4jVVjim8VxFHfBEr72N2QwGWzZLhn/l
6oS3BPS0HHEVrQgPiijtDqT9SLxZMvLSLB+DEIg0/tW5SnxFH6BW6X/+oDvzssqa
lbs5YTwf0qJrsdKXv/9nXrWTV59uY6MPb/uLasR+4qk2L7Tkht0ccBu8jiIBhOoJ
hoQ9ozdY6LLAshcCj3dgHbmrLHCdUfR15VzEQ0BA9lcY04gFQbiToh1YZa+HHrJ8
S0xF20Lv3cBSIposoYru/XCrOZO394VwG33TaGwiH013knUyCeo2CMsHz9GsUrh3
3TIX2JKA9mDRr9xgAS/qqRUxFkF/JYtYyA==
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:06:59 2025 by rpki-client