Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6da7eb9a-1e72-3516-b74d-b83e19954db4.roa
File: 6da7eb9a-1e72-3516-b74d-b83e19954db4.roa (raw, json)
Hash identifier: O9/03E4MwT+n1E+NC7O/pwSdAxbnLxvByreQk4771No=
Subject key identifier: 52:A6:39:0C:F9:71:97:35:E2:82:94:B6:AA:C6:41:0D:B3:69:DB:12
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F432858494CC94B25F8B24585EEB94300
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6da7eb9a-1e72-3516-b74d-b83e19954db4.roa
Signing time: Tue 25 Mar 2025 01:00:40 +0000
ROA not before: Tue 25 Mar 2025 01:00:40 +0000
ROA not after: Mon 23 Jun 2025 01:00:40 +0000
asID: 0
IP address blocks: 2620:74:ec::/47 maxlen: 47
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:c9:4b:25:f8:b2:45:85:ee:b9:43:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Mar 25 01:00:40 2025 GMT
Not After : Jun 23 01:00:40 2025 GMT
Subject: CN=d3f12ba1-a80c-4a1c-8b77-c307b6077942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1e:e2:49:3c:a0:4c:ba:33:e0:7f:1c:25:d5:
c7:bf:40:f1:40:d7:3d:9e:8d:9e:23:ec:7b:e2:4a:
bc:1b:79:b0:38:59:e6:f6:d0:6d:fc:94:20:88:1e:
51:81:94:1e:d6:47:bc:2f:33:58:25:1a:e4:d8:66:
19:0d:3f:9d:ee:b0:6a:e1:ea:ee:df:86:85:99:4c:
c5:15:3e:7b:e6:00:90:0a:23:ee:31:95:67:22:44:
fc:9c:91:79:7b:46:73:3a:f9:5f:6b:2c:94:34:38:
ba:ed:5e:f8:35:51:54:34:18:b3:26:4d:1d:67:06:
b4:4c:8d:b7:4d:4b:68:3d:71:8a:4d:24:3b:91:ae:
e1:70:da:b5:a0:a7:ec:d9:65:5d:12:64:7b:39:50:
d8:8a:f9:75:4e:fc:1e:86:41:ae:49:d0:c0:5c:24:
59:07:57:89:02:01:dd:e0:a5:fa:ca:7c:54:8b:f8:
9a:08:d7:4e:93:86:6c:30:0b:6c:5c:b9:5f:d8:c7:
2e:7d:a7:0c:ed:9b:24:c0:49:5d:c2:bf:48:4f:da:
6b:6e:67:fd:f0:82:fa:97:3a:a6:bc:29:a8:43:39:
f9:5a:d5:57:5b:41:a0:b2:4f:01:af:ea:1d:2f:63:
77:ad:8b:08:46:2a:d8:eb:25:b7:e3:d0:44:7d:f3:
f6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A6:39:0C:F9:71:97:35:E2:82:94:B6:AA:C6:41:0D:B3:69:DB:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6da7eb9a-1e72-3516-b74d-b83e19954db4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:ec::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:c8:97:74:2d:f7:9c:9c:41:8b:1e:6b:87:d2:26:04:69:e9:
94:91:ae:02:2c:73:f3:79:7b:0e:9d:6c:70:9c:4e:b5:35:8c:
fb:3d:49:69:ed:0e:4c:47:ad:a1:1a:f9:39:1e:bd:99:fe:ee:
7d:d4:1a:6d:70:7c:4d:3b:d9:9b:ba:82:a7:8b:1c:1d:3e:e5:
d6:ee:76:32:10:dc:bd:4a:d5:f9:11:7b:4b:69:99:a9:52:44:
69:d6:4e:21:90:ef:fc:cb:ef:39:09:64:dc:6b:c2:fb:f9:9c:
51:f9:6f:34:a3:a8:a4:45:44:01:54:9a:ff:7e:78:ca:ec:6a:
86:b6:dc:da:ca:50:e7:5f:b1:4f:b2:4c:97:4f:0a:36:56:b3:
fd:c9:43:f6:61:9a:26:cc:84:07:80:1a:c4:d9:32:18:bf:b4:
08:5a:39:81:50:e2:bb:4b:c8:52:5d:67:d2:fe:2d:ff:b1:15:
a5:7d:37:8c:bc:2e:d0:7f:fb:bc:9f:53:18:f4:e7:cc:cf:30:
c3:ed:96:68:e9:ee:fd:6c:a9:f1:99:01:19:d5:65:90:e7:be:
d8:b7:03:c2:b6:ae:ec:0d:ee:0b:84:1d:89:20:87:08:ba:4b:
d5:76:19:94:83:eb:c1:69:85:1b:d6:cb:f0:15:45:ee:d9:f1:
59:a6:05:6f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElMyUsl+LJFhe65QwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk
ZDNmMTJiYTEtYTgwYy00YTFjLThiNzctYzMwN2I2MDc3OTQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvB7iSTygTLoz4H8cJdXHv0DxQNc9no2eI+x7
4kq8G3mwOFnm9tBt/JQgiB5RgZQe1ke8LzNYJRrk2GYZDT+d7rBq4eru34aFmUzF
FT575gCQCiPuMZVnIkT8nJF5e0ZzOvlfayyUNDi67V74NVFUNBizJk0dZwa0TI23
TUtoPXGKTSQ7ka7hcNq1oKfs2WVdEmR7OVDYivl1TvwehkGuSdDAXCRZB1eJAgHd
4KX6ynxUi/iaCNdOk4ZsMAtsXLlf2McufacM7ZskwEldwr9IT9prbmf98IL6lzqm
vCmoQzn5WtVXW0Ggsk8Br+odL2N3rYsIRirY6yW349BEffP29wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFKmOQz5cZc14oKUtqrGQQ2zadsSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNmRhN2ViOWEtMWU3Mi0z
NTE2LWI3NGQtYjgzZTE5OTU0ZGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJiAAdADs
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAE3Il3Qt95ycQYsea4fSJgRp6ZSRrgIsc/N5ew6dbHCcTrU1jPs9
SWntDkxHraEa+TkevZn+7n3UGm1wfE072Zu6gqeLHB0+5dbudjIQ3L1K1fkRe0tp
malSRGnWTiGQ7/zL7zkJZNxrwvv5nFH5bzSjqKRFRAFUmv9+eMrsaoa23NrKUOdf
sU+yTJdPCjZWs/3JQ/ZhmibMhAeAGsTZMhi/tAhaOYFQ4rtLyFJdZ9L+Lf+xFaV9
N4y8LtB/+7yfUxj058zPMMPtlmjp7v1sqfGZARnVZZDnvti3A8K2ruwN7guEHYkg
hwi6S9V2GZSD68FphRvWy/AVRe7Z8VmmBW8=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:51:57 2025 by rpki-client