Route Origin Authorization
$ rpki-client -vvf rpki-pp.com/repo/GOOFL/0/323630323a663833643a3a2f34342d3434203d3e203133353237.roa
File: 323630323a663833643a3a2f34342d3434203d3e203133353237.roa (raw, json)
Hash identifier: A2IZJtjJWiTn4o9Slm6XOrxIaQ07Fi6e2NkNTZtgRpc=
Subject key identifier: FC:5C:EF:7D:BB:F3:AF:FF:73:2F:74:76:D6:29:87:3F:93:DE:7C:0B
Certificate issuer: /CN=86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d
Certificate serial: 143294AB894E4E3737A7679EE5A0CCB47BEBA356
Authority key identifier: D4:60:6A:E6:F1:88:38:E2:25:7D:55:AB:B5:00:63:6F:50:92:36:E3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d.cer
Subject info access: rsync://rpki-pp.com/repo/GOOFL/0/323630323a663833643a3a2f34342d3434203d3e203133353237.roa
Signing time: Wed 26 Feb 2025 16:37:00 +0000
ROA not before: Wed 26 Feb 2025 16:32:00 +0000
ROA not after: Wed 25 Feb 2026 16:37:00 +0000
asID: 13527
IP address blocks: 2602:f83d::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:32:94:ab:89:4e:4e:37:37:a7:67:9e:e5:a0:cc:b4:7b:eb:a3:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d
Validity
Not Before: Feb 26 16:32:00 2025 GMT
Not After : Feb 25 16:37:00 2026 GMT
Subject: CN=FC5CEF7DBBF3AFFF732F7476D629873F93DE7C0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d4:24:62:a0:97:73:07:6c:d6:24:fa:e2:9b:
c1:c2:b2:f0:b3:c0:8f:b9:32:e1:c5:90:49:49:22:
88:b5:42:4c:58:b2:b7:a8:3c:5d:8d:11:65:a6:f0:
01:ee:9a:2b:57:cd:d2:97:85:b9:46:b3:c7:b7:a5:
27:c0:15:b6:5b:a2:01:38:f4:1f:f3:ef:23:f5:08:
67:e3:c5:a0:5a:b7:0c:19:f4:bb:99:bf:1a:1d:96:
f4:1c:12:35:87:c9:e8:c9:01:ba:d4:d4:c6:fa:17:
16:3f:a4:b5:d7:20:83:a1:8f:e5:21:92:b9:0e:bc:
e3:50:77:aa:a6:8a:d4:0d:51:ba:01:b0:f6:ba:1d:
68:3a:7f:04:47:37:6e:c4:f6:cc:57:48:fc:38:8e:
09:03:ac:82:85:d3:e0:cc:93:2d:ed:54:41:af:83:
8a:04:43:4f:ea:4e:e6:1e:40:eb:93:d8:b9:c5:12:
e0:30:70:bd:4a:9c:3d:63:93:a5:6c:f0:69:6f:03:
1f:a4:e7:67:8f:81:2d:c8:05:c0:b0:45:e4:e2:41:
2a:44:44:00:42:66:91:16:51:ac:6e:43:45:8f:d5:
77:2d:68:7c:3d:3c:42:37:e8:22:2a:5b:9a:fd:6b:
03:14:d1:a8:9a:78:87:ba:96:c6:55:76:8b:6a:ad:
07:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:5C:EF:7D:BB:F3:AF:FF:73:2F:74:76:D6:29:87:3F:93:DE:7C:0B
X509v3 Authority Key Identifier:
keyid:D4:60:6A:E6:F1:88:38:E2:25:7D:55:AB:B5:00:63:6F:50:92:36:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-pp.com/repo/GOOFL/0/D4606AE6F18838E2257D55ABB500636F509236E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-pp.com/repo/GOOFL/0/323630323a663833643a3a2f34342d3434203d3e203133353237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f83d::/44
Signature Algorithm: sha256WithRSAEncryption
b1:2e:c2:3d:a0:e9:1a:91:38:54:9b:aa:e2:e5:63:cc:f6:22:
80:9b:a8:94:dc:c5:a2:0f:0d:b8:15:b5:f2:23:fe:00:44:f1:
cc:7f:2a:57:c0:1c:63:3a:79:58:60:8d:98:da:03:fd:90:39:
4b:59:8f:6f:72:6c:fc:5e:30:89:16:1b:42:13:bf:79:50:9e:
66:f5:bd:db:76:40:76:2e:ae:b5:60:9c:47:28:cd:7e:e4:50:
f2:bb:be:c6:af:3f:d1:79:30:b0:cc:37:b1:9a:6c:e1:23:fb:
85:29:4f:48:a2:9e:27:30:c9:85:1a:bd:a1:da:e3:7c:12:0a:
52:42:f4:2b:cb:d5:39:c9:e6:d5:e9:39:be:6b:77:d2:f7:f0:
c7:b1:af:96:da:f0:ad:2f:8e:95:12:87:30:cb:c7:d8:4d:61:
0f:bd:a6:98:e3:2a:e1:52:3e:dc:08:88:6a:a3:07:99:07:32:
00:69:47:cf:9d:ff:63:0d:bb:20:9e:d3:5e:df:b2:53:58:68:
0a:d0:fc:4d:50:f8:07:b0:02:20:a8:78:5f:eb:9f:07:8d:06:
55:22:1c:a7:02:23:0b:67:54:99:52:f1:67:69:89:30:bf:19:
01:d0:34:43:b3:4a:5c:55:ac:3f:fb:83:2f:ef:df:32:14:e6:
fb:e8:9e:82
-----BEGIN CERTIFICATE-----
MIIFXzCCBEegAwIBAgIUFDKUq4lOTjc3p2ee5aDMtHvro1YwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyODZkZTk2NWQ3MTBhZWVlMTk4MTQyZjQ2MGY4MmQzMWJj
NWE4YWFlMmIyZjQ4ZTBjNWQwHhcNMjUwMjI2MTYzMjAwWhcNMjYwMjI1MTYzNzAw
WjAzMTEwLwYDVQQDEyhGQzVDRUY3REJCRjNBRkZGNzMyRjc0NzZENjI5ODczRjkz
REU3QzBCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9QkYqCXcwds
1iT64pvBwrLws8CPuTLhxZBJSSKItUJMWLK3qDxdjRFlpvAB7porV83Sl4W5RrPH
t6UnwBW2W6IBOPQf8+8j9Qhn48WgWrcMGfS7mb8aHZb0HBI1h8noyQG61NTG+hcW
P6S11yCDoY/lIZK5DrzjUHeqporUDVG6AbD2uh1oOn8ERzduxPbMV0j8OI4JA6yC
hdPgzJMt7VRBr4OKBENP6k7mHkDrk9i5xRLgMHC9Spw9Y5OlbPBpbwMfpOdnj4Et
yAXAsEXk4kEqREQAQmaRFlGsbkNFj9V3LWh8PTxCN+giKlua/WsDFNGomniHupbG
VXaLaq0HsQIDAQABo4ICXzCCAlswHQYDVR0OBBYEFPxc732786//cy90dtYphz+T
3nwLMB8GA1UdIwQYMBaAFNRgaubxiDjiJX1Vq7UAY29QkjbjMA4GA1UdDwEB/wQE
AwIHgDBeBgNVHR8EVzBVMFOgUaBPhk1yc3luYzovL3Jwa2ktcHAuY29tL3JlcG8v
R09PRkwvMC9ENDYwNkFFNkYxODgzOEUyMjU3RDU1QUJCNTAwNjM2RjUwOTIzNkUz
LmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9y
cGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4
MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1iYjFmLTQ4YjYtYmYz
Mi1jOTQ5MjI4NmYxOTUvN2M5YjE5NDctYjgxMy00M2IzLTkxNTItYzRjY2JmZjFj
ZGU3Lzg2ZGU5NjVkNzEwYWVlZTE5ODE0MmY0NjBmODJkMzFiYzVhOGFhZTJiMmY0
OGUwYzVkLmNlcjB1BggrBgEFBQcBCwRpMGcwZQYIKwYBBQUHMAuGWXJzeW5jOi8v
cnBraS1wcC5jb20vcmVwby9HT09GTC8wLzMyMzYzMDMyM2E2NjM4MzM2NDNhM2Ey
ZjM0MzQyZDM0MzQyMDNkM2UyMDMxMzMzNTMyMzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQmAvg9AAAw
DQYJKoZIhvcNAQELBQADggEBALEuwj2g6RqROFSbquLlY8z2IoCbqJTcxaIPDbgV
tfIj/gBE8cx/KlfAHGM6eVhgjZjaA/2QOUtZj29ybPxeMIkWG0ITv3lQnmb1vdt2
QHYurrVgnEcozX7kUPK7vsavP9F5MLDMN7GabOEj+4UpT0iinicwyYUavaHa43wS
ClJC9CvL1TnJ5tXpOb5rd9L38Mexr5ba8K0vjpUShzDLx9hNYQ+9ppjjKuFSPtwI
iGqjB5kHMgBpR8+d/2MNuyCe017fslNYaArQ/E1Q+AewAiCoeF/rnweNBlUiHKcC
IwtnVJlS8WdpiTC/GQHQNEOzSlxVrD/7gy/v3zIU5vvonoI=
-----END CERTIFICATE-----
Generated at Thu Apr 10 04:34:55 2025 by rpki-client