Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/9ac5c3b2-2a0f-3c25-ac04-714701f8e873.roa
File: 9ac5c3b2-2a0f-3c25-ac04-714701f8e873.roa (raw, json)
Hash identifier: E3yxECPi56lWuGmRV5FC3mq0fkPi/dRCPLQVixlx6cM=
Subject key identifier: 9C:E8:48:ED:5C:B1:F5:36:92:FB:2B:8F:73:D1:D2:70:40:BB:D5:DD
Certificate issuer: /CN=ef3ec938-7b45-4c47-91d2-9f7d18411519
Certificate serial: 010D0C9F43285848E9CBDB2229B59C1EA92A1B00
Authority key identifier: 91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/9ac5c3b2-2a0f-3c25-ac04-714701f8e873.roa
Signing time: Mon 17 Feb 2025 14:00:52 +0000
ROA not before: Mon 17 Feb 2025 14:00:52 +0000
ROA not after: Sun 18 May 2025 13:00:52 +0000
asID: 139267
IP address blocks: 2602:fe12::/32 maxlen: 56
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e9:cb:db:22:29:b5:9c:1e:a9:2a:1b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef3ec938-7b45-4c47-91d2-9f7d18411519
Validity
Not Before: Feb 17 14:00:52 2025 GMT
Not After : May 18 13:00:52 2025 GMT
Subject: CN=18f07e8c-3066-4fd7-8f56-9674cbc01656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:be:ac:ee:65:c3:e6:dd:0a:8e:70:c1:16:9f:
76:f9:25:1c:c2:1b:a0:8e:4f:87:99:7d:c0:d3:a9:
23:de:3a:c2:6a:9a:8b:6f:48:cb:fa:91:6e:dc:da:
52:63:49:a7:24:35:52:26:ab:0f:05:4d:78:d9:e3:
0e:78:b1:d1:4a:68:fc:1a:0a:73:28:57:68:fd:69:
c0:78:4d:9f:d7:c4:6b:df:75:59:a5:c3:9a:f8:5e:
05:79:cf:7f:45:9a:02:37:1f:69:2c:10:26:4d:c9:
da:3f:06:46:53:17:10:94:1e:f9:59:d3:96:dc:66:
53:25:2a:d8:92:7a:e7:cf:fb:8a:ea:e2:9f:2c:8f:
bd:d3:a8:fb:d7:2f:33:3f:b3:9e:a8:17:de:b3:27:
d1:11:dc:4e:81:7a:e3:d5:e7:57:40:14:93:92:85:
ee:49:20:c4:ec:3d:c9:17:0c:80:56:63:2d:8a:9a:
d9:f3:80:1b:2a:4a:e5:5e:da:02:12:5d:58:6c:a5:
40:9b:6b:f2:0b:e0:58:ef:30:4e:84:74:91:f8:6b:
82:86:39:be:21:42:9f:e5:44:62:ed:07:28:67:97:
14:c8:57:6f:b5:94:0f:88:e2:eb:69:ee:27:7d:05:
de:e0:ac:b4:e6:09:84:17:77:2a:ba:71:70:e6:55:
1c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E8:48:ED:5C:B1:F5:36:92:FB:2B:8F:73:D1:D2:70:40:BB:D5:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/9ac5c3b2-2a0f-3c25-ac04-714701f8e873.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl
X509v3 Authority Key Identifier:
keyid:91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fe12::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:81:17:cb:12:93:d8:97:5b:07:61:30:8d:ff:86:dd:56:5b:
5c:c5:0d:69:7f:da:a2:15:a5:f3:d8:5d:a6:fa:01:0a:8c:49:
c0:67:73:6c:60:0e:ea:5b:13:3e:74:20:0d:af:fc:1c:d1:cf:
31:10:a2:88:7a:02:11:0a:80:29:e0:3c:2f:0e:e3:35:ef:ff:
a2:c9:ba:12:f4:c1:d5:a6:9d:da:b3:e9:23:32:90:24:f2:07:
ef:9e:ce:c1:40:b0:53:61:9b:bc:d0:7f:cd:d5:ac:f6:28:24:
c0:ab:28:dd:83:ac:d7:53:b8:2b:32:99:4c:fd:50:a0:5c:25:
a4:12:97:e5:a8:76:ec:37:fd:cc:9e:8b:91:70:31:78:00:38:
c8:9e:da:b8:d3:45:e7:89:38:8e:a6:1f:14:7e:03:00:2a:92:
fd:98:a8:79:91:d2:03:63:6c:1b:3b:b6:f5:13:82:92:53:30:
05:26:21:8c:43:33:fb:03:10:88:b2:a1:65:de:4d:f7:19:85:
35:23:ba:32:7d:71:61:e7:b1:b5:60:d8:1e:09:f2:29:dc:de:
8e:23:26:ab:bb:c2:fa:e7:3f:1b:ab:cd:43:03:e0:f9:61:04:
57:c3:b8:78:c9:b0:51:0d:37:c5:28:dd:db:f1:07:31:20:28:
81:6d:4b:53
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjpy9siKbWcHqkqGwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWYzZWM5MzgtN2I0NS00YzQ3LTkxZDItOWY3ZDE4NDEx
NTE5MB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk
MThmMDdlOGMtMzA2Ni00ZmQ3LThmNTYtOTY3NGNiYzAxNjU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgr6s7mXD5t0KjnDBFp92+SUcwhugjk+HmX3A
06kj3jrCapqLb0jL+pFu3NpSY0mnJDVSJqsPBU142eMOeLHRSmj8GgpzKFdo/WnA
eE2f18Rr33VZpcOa+F4Fec9/RZoCNx9pLBAmTcnaPwZGUxcQlB75WdOW3GZTJSrY
knrnz/uK6uKfLI+906j71y8zP7OeqBfesyfREdxOgXrj1edXQBSTkoXuSSDE7D3J
FwyAVmMtiprZ84AbKkrlXtoCEl1YbKVAm2vyC+BY7zBOhHSR+GuChjm+IUKf5URi
7QcoZ5cUyFdvtZQPiOLrae4nfQXe4Ky05gmEF3cqunFw5lUcqwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJzoSO1csfU2kvsrj3PR0nBAu9XdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZjNl
YzkzOC03YjQ1LTRjNDctOTFkMi05ZjdkMTg0MTE1MTkvOWFjNWMzYjItMmEwZi0z
YzI1LWFjMDQtNzE0NzAxZjhlODczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWYzZWM5MzgtN2I0NS00YzQ3LTkx
ZDItOWY3ZDE4NDExNTE5L2VmM2VjOTM4LTdiNDUtNGM0Ny05MWQyLTlmN2QxODQx
MTUxOS5jcmwwHwYDVR0jBBgwFoAUkanyxG7l5rwGtdG4Yq1QTfPopywwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZjNlYzkzOC03YjQ1LTRjNDctOTFkMi05Zjdk
MTg0MTE1MTkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgL+EjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBggRfLEpPYl1sHYTCN/4bdVltcxQ1pf9qiFaXz2F2m+gEKjEnAZ3Ns
YA7qWxM+dCANr/wc0c8xEKKIegIRCoAp4DwvDuM17/+iyboS9MHVpp3as+kjMpAk
8gfvns7BQLBTYZu80H/N1az2KCTAqyjdg6zXU7grMplM/VCgXCWkEpflqHbsN/3M
nouRcDF4ADjIntq400XniTiOph8UfgMAKpL9mKh5kdIDY2wbO7b1E4KSUzAFJiGM
QzP7AxCIsqFl3k33GYU1I7oyfXFh57G1YNgeCfIp3N6OIyaru8L65z8bq81DA+D5
YQRXw7h4ybBRDTfFKN3b8QcxICiBbUtT
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:59:47 2025 by rpki-client