Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a63e4741-f0d0-41ab-b0c9-866af37d6849/86d93acc-2536-31bf-8950-1dfaa1b48d16.roa
File: 86d93acc-2536-31bf-8950-1dfaa1b48d16.roa (raw, json)
Hash identifier: bdlMK0mbjDqb/NgqDWj+CCFiEdEiRssD4atCJ8FTqaw=
Subject key identifier: 82:D5:DD:32:FA:79:33:9C:A1:21:83:4F:F6:3E:6F:2D:1B:3D:06:BA
Certificate issuer: /CN=a63e4741-f0d0-41ab-b0c9-866af37d6849
Certificate serial: 010D0C9F43285848E2D10A9DAC236F1B77582580
Authority key identifier: 59:DF:EA:83:B8:E9:AF:13:F0:43:07:0E:6D:BE:F3:C7:D3:24:0D:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a63e4741-f0d0-41ab-b0c9-866af37d6849.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a63e4741-f0d0-41ab-b0c9-866af37d6849/86d93acc-2536-31bf-8950-1dfaa1b48d16.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 19694
IP address blocks: 2620:136:4000::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:0a:9d:ac:23:6f:1b:77:58:25:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63e4741-f0d0-41ab-b0c9-866af37d6849
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=aa15b4fc-9f21-468b-b340-b4398c30a9bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:fc:ce:c5:e3:ba:48:3c:9a:ec:b8:b4:c6:55:
25:45:01:66:f9:6f:dd:5b:f6:58:82:15:33:fc:db:
6c:3a:af:b8:1b:03:d0:95:ba:02:9f:7f:ef:b3:60:
24:6a:a9:77:77:62:c9:bd:81:fa:4f:4e:3d:77:97:
06:b2:d4:9e:77:cf:b5:56:9d:bc:ef:51:a2:85:02:
fd:71:90:8b:a0:80:08:66:b2:31:33:f5:51:3c:05:
03:fd:7a:f3:60:9e:33:26:18:5c:08:e5:1e:c2:34:
7b:00:c4:a0:c4:29:35:65:16:71:f4:3a:2d:88:63:
4c:8a:02:52:eb:f6:db:27:de:db:37:c6:ff:ab:34:
77:45:af:75:3c:6d:6a:87:55:de:f0:74:01:8e:04:
96:c3:02:fd:83:78:ac:6c:70:0f:55:77:e1:16:2e:
8b:d2:df:21:8d:8b:9b:7e:e2:00:54:5d:81:fc:29:
cf:3d:b4:84:29:ef:6d:cb:b4:5a:d9:57:9c:1b:13:
92:03:21:d6:bc:42:7d:6e:42:58:15:62:73:84:90:
81:17:04:5e:bd:b3:54:b9:98:48:18:73:f6:0d:3e:
d7:f0:12:3a:e6:02:76:ef:26:64:b9:c2:bf:36:69:
90:45:22:2a:cb:f8:2f:1f:13:bc:3c:dc:a3:15:22:
f0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D5:DD:32:FA:79:33:9C:A1:21:83:4F:F6:3E:6F:2D:1B:3D:06:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a63e4741-f0d0-41ab-b0c9-866af37d6849/86d93acc-2536-31bf-8950-1dfaa1b48d16.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a63e4741-f0d0-41ab-b0c9-866af37d6849/a63e4741-f0d0-41ab-b0c9-866af37d6849.crl
X509v3 Authority Key Identifier:
keyid:59:DF:EA:83:B8:E9:AF:13:F0:43:07:0E:6D:BE:F3:C7:D3:24:0D:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a63e4741-f0d0-41ab-b0c9-866af37d6849.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:136:4000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:0c:be:42:a5:1b:40:e9:75:bc:75:d7:5a:74:16:4a:8e:6e:
32:93:46:86:a6:09:af:29:af:be:74:2d:94:bc:ab:95:29:41:
32:b4:29:19:ec:b7:69:95:ad:f5:9f:7e:43:13:3b:82:b4:7c:
0f:a9:17:02:1a:e6:13:1a:7e:ad:15:2f:2a:73:e9:97:6e:52:
97:19:14:51:3f:ab:4c:30:54:c2:e4:57:9d:f9:c4:6a:76:e0:
40:85:ac:aa:a6:fb:f8:c8:e4:96:1b:b0:d1:4f:e4:02:ee:2a:
2a:55:0a:86:67:9d:ce:a0:02:36:c8:e4:78:a6:6a:21:a1:cf:
70:f9:ba:ad:7f:e3:24:f1:9e:7a:e4:27:97:d5:cc:41:bd:22:
3b:de:90:8f:c1:06:d4:0c:48:7a:a3:b1:76:b9:1c:f8:21:1c:
84:18:a4:1e:27:62:2c:dc:b3:20:c0:02:39:86:f5:07:41:3a:
8b:96:28:70:f4:de:a2:77:67:f6:83:dd:76:18:4a:63:ec:bb:
0b:75:a2:65:ae:6a:16:3b:7e:d7:d3:f0:db:fd:ed:d2:b0:0d:
3f:46:d0:c1:e6:7b:a8:ab:cb:92:bf:0a:59:8b:9a:5e:33:04:
bc:7d:07:be:0c:7e:cd:07:ab:d5:67:58:c3:55:c0:5b:83:cd:
8a:6b:21:b2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEji0QqdrCNvG3dYJYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTYzZTQ3NDEtZjBkMC00MWFiLWIwYzktODY2YWYzN2Q2
ODQ5MB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
YWExNWI0ZmMtOWYyMS00NjhiLWIzNDAtYjQzOThjMzBhOWJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvzOxeO6SDya7Li0xlUlRQFm+W/dW/ZYghUz
/NtsOq+4GwPQlboCn3/vs2Akaql3d2LJvYH6T049d5cGstSed8+1Vp2871GihQL9
cZCLoIAIZrIxM/VRPAUD/XrzYJ4zJhhcCOUewjR7AMSgxCk1ZRZx9DotiGNMigJS
6/bbJ97bN8b/qzR3Ra91PG1qh1Xe8HQBjgSWwwL9g3isbHAPVXfhFi6L0t8hjYub
fuIAVF2B/CnPPbSEKe9ty7Ra2VecGxOSAyHWvEJ9bkJYFWJzhJCBFwRevbNUuZhI
GHP2DT7X8BI65gJ27yZkucK/NmmQRSIqy/gvHxO8PNyjFSLwyQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFILV3TL6eTOcoSGDT/Y+by0bPQa6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hNjNl
NDc0MS1mMGQwLTQxYWItYjBjOS04NjZhZjM3ZDY4NDkvODZkOTNhY2MtMjUzNi0z
MWJmLTg5NTAtMWRmYWExYjQ4ZDE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTYzZTQ3NDEtZjBkMC00MWFiLWIw
YzktODY2YWYzN2Q2ODQ5L2E2M2U0NzQxLWYwZDAtNDFhYi1iMGM5LTg2NmFmMzdk
Njg0OS5jcmwwHwYDVR0jBBgwFoAUWd/qg7jprxPwQwcObb7zx9MkDeUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9hNjNlNDc0MS1mMGQwLTQxYWItYjBjOS04NjZh
ZjM3ZDY4NDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABNkAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADcMvkKlG0Dpdbx111p0FkqObjKTRoamCa8pr750LZS8q5UpQTK0
KRnst2mVrfWffkMTO4K0fA+pFwIa5hMafq0VLypz6ZduUpcZFFE/q0wwVMLkV535
xGp24ECFrKqm+/jI5JYbsNFP5ALuKipVCoZnnc6gAjbI5HimaiGhz3D5uq1/4yTx
nnrkJ5fVzEG9IjvekI/BBtQMSHqjsXa5HPghHIQYpB4nYizcsyDAAjmG9QdBOouW
KHD03qJ3Z/aD3XYYSmPsuwt1omWuahY7ftfT8Nv97dKwDT9G0MHme6iry5K/ClmL
ml4zBLx9B74Mfs0Hq9VnWMNVwFuDzYprIbI=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:11:13 2025 by rpki-client