Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/2c021e5a-dd18-336a-95d4-6200a84396c5.roa
File: 2c021e5a-dd18-336a-95d4-6200a84396c5.roa (raw, json)
Hash identifier: Rt1SgJlX/1GaTSEPMkmR0YjN+oGMnt/lujDp0JP1IOk=
Subject key identifier: 22:FD:BD:36:63:46:2A:70:E4:0E:09:AA:C0:45:37:27:63:19:CF:11
Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial: 010D0C9F43285848CDB0364C06FC4A8BCDD7D240
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/2c021e5a-dd18-336a-95d4-6200a84396c5.roa
Signing time: Fri 07 Feb 2025 12:22:39 +0000
ROA not before: Fri 07 Feb 2025 12:22:39 +0000
ROA not after: Thu 08 May 2025 11:22:39 +0000
asID: 137409
IP address blocks: 2606:f18c::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cd:b0:36:4c:06:fc:4a:8b:cd:d7:d2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Validity
Not Before: Feb 7 12:22:39 2025 GMT
Not After : May 8 11:22:39 2025 GMT
Subject: CN=6d3959e7-e976-4d47-b41e-ed65547ac6fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bb:aa:22:3d:ae:5d:78:84:62:2c:6d:81:ee:
d8:e2:15:ff:aa:ca:ef:4b:8b:81:47:cf:90:e5:78:
ec:d2:ac:85:a8:cf:54:fc:cd:4b:99:9f:39:b6:da:
99:bc:a4:65:41:64:f2:39:4b:3f:fe:d3:6f:fd:5f:
42:d9:cc:16:c0:ac:c5:f2:58:4f:5e:a5:c1:10:7b:
a5:d5:94:ce:5a:45:e3:5b:35:8a:e0:77:1a:21:85:
86:75:02:08:f3:3f:b7:c1:de:34:ef:fb:83:2a:21:
db:2d:2b:06:ce:be:11:0e:3a:29:5b:83:2b:8d:fb:
c6:f2:55:c6:32:3e:4f:35:29:78:88:ca:b4:b7:3d:
74:66:ff:70:51:87:1c:0b:b3:be:b9:15:7c:55:77:
ab:85:8a:47:7f:00:57:67:02:5c:ec:bd:02:2c:c1:
e4:0a:d7:3e:1b:a0:b9:80:22:72:c3:3b:16:f6:d0:
fb:a9:2c:3d:62:84:55:a4:69:69:7d:75:22:fa:ee:
48:8f:cb:2e:70:b4:ab:d7:b4:02:7a:a3:35:90:5c:
ff:e2:65:22:b8:35:88:a8:a7:97:9a:8e:8c:6f:0b:
ac:4e:27:27:df:d7:af:b1:e3:74:ca:12:47:1e:22:
a8:9e:68:de:95:ac:0c:88:53:c8:65:77:4e:c5:36:
a5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:FD:BD:36:63:46:2A:70:E4:0E:09:AA:C0:45:37:27:63:19:CF:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/2c021e5a-dd18-336a-95d4-6200a84396c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
X509v3 Authority Key Identifier:
keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:f18c::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:00:9e:72:1e:f0:87:f5:54:8e:40:b4:19:7b:66:0a:ac:1e:
92:37:32:0c:1c:21:a7:9c:3a:4b:56:36:85:a4:38:b9:18:99:
d1:1f:c4:f9:2c:ac:5a:35:55:ea:3e:3e:3b:f9:c9:18:6b:16:
53:f8:cd:71:6a:42:eb:6b:d9:4e:84:77:ff:17:74:7a:69:d9:
df:1c:9e:76:01:dc:22:db:e7:17:a2:17:87:9f:f7:b4:9d:02:
d8:6e:5a:2c:b5:a7:16:b9:7f:3f:69:7e:9f:5d:5d:83:ea:b4:
2e:10:96:6d:2b:63:b7:fb:29:c5:87:d1:c0:d4:8e:05:3c:ba:
9a:66:09:97:0a:74:67:f6:ac:3b:82:95:18:45:3c:cf:6b:25:
7a:b1:16:e4:a9:e5:f2:d4:86:17:ce:7b:14:5f:3e:91:62:42:
74:8a:53:56:2c:d5:33:0b:4b:7b:e0:e6:a1:69:f2:ce:cc:b0:
fc:30:5b:53:4a:58:fb:9e:ad:98:72:7c:25:27:ec:d4:81:d7:
98:87:ad:66:15:9f:92:f7:f9:be:87:bd:96:35:bb:8c:f9:a4:
3b:e9:a3:b0:f0:76:5b:a3:62:b3:50:4e:c0:98:4f:54:82:f4:
12:fb:2a:f9:cd:b6:a5:19:37:16:5d:7d:1a:6b:08:14:0d:da:
d3:e2:56:aa
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjNsDZMBvxKi83X0kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx
NzNhMB4XDTI1MDIwNzEyMjIzOVoXDTI1MDUwODExMjIzOVowLzEtMCsGA1UEAxMk
NmQzOTU5ZTctZTk3Ni00ZDQ3LWI0MWUtZWQ2NTU0N2FjNmZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwruqIj2uXXiEYixtge7Y4hX/qsrvS4uBR8+Q
5Xjs0qyFqM9U/M1LmZ85ttqZvKRlQWTyOUs//tNv/V9C2cwWwKzF8lhPXqXBEHul
1ZTOWkXjWzWK4HcaIYWGdQII8z+3wd407/uDKiHbLSsGzr4RDjopW4MrjfvG8lXG
Mj5PNSl4iMq0tz10Zv9wUYccC7O+uRV8VXerhYpHfwBXZwJc7L0CLMHkCtc+G6C5
gCJywzsW9tD7qSw9YoRVpGlpfXUi+u5Ij8sucLSr17QCeqM1kFz/4mUiuDWIqKeX
mo6MbwusTicn39evseN0yhJHHiKonmjelawMiFPIZXdOxTalAQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFCL9vTZjRipw5A4JqsBFNydjGc8RMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx
ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvMmMwMjFlNWEtZGQxOC0z
MzZhLTk1ZDQtNjIwMGE4NDM5NmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh
M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm
MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk
MDFlZjE3M2EuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgbxjDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA2AJ5yHvCH9VSOQLQZe2YKrB6SNzIMHCGnnDpLVjaFpDi5GJnRH8T5
LKxaNVXqPj47+ckYaxZT+M1xakLra9lOhHf/F3R6adnfHJ52Adwi2+cXoheHn/e0
nQLYblostacWuX8/aX6fXV2D6rQuEJZtK2O3+ynFh9HA1I4FPLqaZgmXCnRn9qw7
gpUYRTzPayV6sRbkqeXy1IYXznsUXz6RYkJ0ilNWLNUzC0t74OahafLOzLD8MFtT
Slj7nq2YcnwlJ+zUgdeYh61mFZ+S9/m+h72WNbuM+aQ76aOw8HZbo2KzUE7AmE9U
gvQS+yr5zbalGTcWXX0aawgUDdrT4laq
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:06:07 2025 by rpki-client