Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9169bc31-6884-4381-b12c-1cc4d38ce1d1/0c2f52d7-9f14-34a3-b4ab-9f1e014c8588.roa
File: 0c2f52d7-9f14-34a3-b4ab-9f1e014c8588.roa (raw, json)
Hash identifier: MlqRTksmYNpzHS27yJvvR+ny1mkKOJQamvtHTVbdDqk=
Subject key identifier: 29:EE:6A:8B:04:CB:4B:0D:4B:36:5E:DB:5B:21:15:8A:93:A7:1A:A7
Certificate issuer: /CN=9169bc31-6884-4381-b12c-1cc4d38ce1d1
Certificate serial: 010D0C9F43285848A1361AB5A5CD288B4A3F4C40
Authority key identifier: 33:E0:96:67:97:F3:E8:D7:73:A3:F4:AD:37:FB:9A:19:7F:B9:D6:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9169bc31-6884-4381-b12c-1cc4d38ce1d1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9169bc31-6884-4381-b12c-1cc4d38ce1d1/0c2f52d7-9f14-34a3-b4ab-9f1e014c8588.roa
Signing time: Wed 22 Jan 2025 14:00:52 +0000
ROA not before: Wed 22 Jan 2025 14:00:52 +0000
ROA not after: Tue 22 Apr 2025 13:00:52 +0000
asID: 16612
IP address blocks: 2606:abc0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:36:1a:b5:a5:cd:28:8b:4a:3f:4c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9169bc31-6884-4381-b12c-1cc4d38ce1d1
Validity
Not Before: Jan 22 14:00:52 2025 GMT
Not After : Apr 22 13:00:52 2025 GMT
Subject: CN=74a19e1e-8f1a-4756-b7ec-d0be93e15ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:25:e6:69:94:2f:5d:94:82:30:44:0f:0e:47:
d0:6a:42:d7:b6:af:4a:b4:bb:dc:cf:8a:55:5d:0e:
ed:fe:09:77:bb:2a:d2:89:f5:95:1d:fa:1f:f1:7c:
28:66:46:74:84:a9:b1:72:60:ca:1c:86:95:41:82:
ad:e2:12:da:56:4f:9a:2a:f6:57:a0:be:06:e9:ca:
59:ad:16:9b:2a:1d:07:de:77:fa:37:ba:8f:10:6a:
37:e2:64:1d:b1:1a:bd:b9:16:2d:d5:0b:0e:1f:eb:
8a:f7:04:f2:0f:4c:7a:5e:fc:2e:50:ea:bf:33:fc:
e8:01:7d:f1:6f:a8:d3:c9:b4:a9:9b:57:27:e4:17:
d8:5a:37:bf:0e:77:eb:b6:4f:75:25:ad:da:46:d1:
08:7b:3f:eb:15:87:e5:a2:76:a2:d4:d1:32:64:f6:
8b:bf:70:27:0a:fe:58:4a:c9:53:3e:e0:f7:14:1e:
66:de:6a:4b:44:99:50:7f:03:2e:4d:a9:dd:2f:19:
20:1f:bf:9a:2c:ef:2d:42:d5:38:62:44:a0:54:18:
a7:f1:fb:99:9b:79:9a:c7:bb:26:86:76:fb:d4:1e:
64:64:43:23:3d:f1:ab:74:96:0e:73:02:a0:51:79:
95:16:aa:0f:34:89:c8:98:13:2e:a9:1e:ff:65:0b:
30:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:EE:6A:8B:04:CB:4B:0D:4B:36:5E:DB:5B:21:15:8A:93:A7:1A:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9169bc31-6884-4381-b12c-1cc4d38ce1d1/0c2f52d7-9f14-34a3-b4ab-9f1e014c8588.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9169bc31-6884-4381-b12c-1cc4d38ce1d1/9169bc31-6884-4381-b12c-1cc4d38ce1d1.crl
X509v3 Authority Key Identifier:
keyid:33:E0:96:67:97:F3:E8:D7:73:A3:F4:AD:37:FB:9A:19:7F:B9:D6:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9169bc31-6884-4381-b12c-1cc4d38ce1d1.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:abc0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:cf:43:5b:37:be:6c:f5:bb:80:41:73:5f:65:d2:90:e1:00:
18:bd:10:a8:f2:aa:d1:dc:2a:3c:40:de:c1:e3:a7:63:47:bd:
b1:96:db:6b:7d:86:79:bb:cb:60:19:21:b2:9a:d0:e1:b3:5d:
a4:bb:98:f8:a8:8d:c3:fc:5d:2c:76:1d:39:2f:ff:12:31:15:
75:49:fc:28:53:a3:96:58:b5:5f:68:a5:e2:80:ed:07:99:0e:
11:93:b8:49:20:9e:26:a2:70:83:98:52:41:3e:86:0f:dd:fd:
a8:6e:cd:d3:83:0d:34:1d:c4:02:11:39:94:ea:b3:c3:a3:f7:
cc:15:da:9c:e1:75:c9:37:c1:bf:1e:a1:1c:da:bf:0a:ac:01:
f1:af:de:14:f6:f7:e8:4a:35:2e:90:36:ef:6c:bd:5c:e1:bb:
c4:5b:9d:59:05:1a:49:0d:fa:97:ff:fa:04:3d:b4:df:93:a6:
19:43:aa:37:e6:32:ec:a0:b6:e5:87:10:c7:71:f4:f2:4a:32:
c4:68:ed:2e:25:95:f7:25:24:50:f8:31:e8:97:c2:3a:d0:83:
93:f6:c8:8e:20:49:fa:19:93:26:4f:15:06:f7:bb:5c:a0:79:
00:f5:e2:46:0a:85:47:a8:31:56:80:2c:a4:c3:eb:86:5a:7f:
68:de:64:d0
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEihNhq1pc0oi0o/TEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTE2OWJjMzEtNjg4NC00MzgxLWIxMmMtMWNjNGQzOGNl
MWQxMB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk
NzRhMTllMWUtOGYxYS00NzU2LWI3ZWMtZDBiZTkzZTE1ZWE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9yXmaZQvXZSCMEQPDkfQakLXtq9KtLvcz4pV
XQ7t/gl3uyrSifWVHfof8XwoZkZ0hKmxcmDKHIaVQYKt4hLaVk+aKvZXoL4G6cpZ
rRabKh0H3nf6N7qPEGo34mQdsRq9uRYt1QsOH+uK9wTyD0x6XvwuUOq/M/zoAX3x
b6jTybSpm1cn5BfYWje/Dnfrtk91Ja3aRtEIez/rFYflonai1NEyZPaLv3AnCv5Y
SslTPuD3FB5m3mpLRJlQfwMuTandLxkgH7+aLO8tQtU4YkSgVBin8fuZm3max7sm
hnb71B5kZEMjPfGrdJYOcwKgUXmVFqoPNInImBMuqR7/ZQswRwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFCnuaosEy0sNSzZe21shFYqTpxqnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MTY5
YmMzMS02ODg0LTQzODEtYjEyYy0xY2M0ZDM4Y2UxZDEvMGMyZjUyZDctOWYxNC0z
NGEzLWI0YWItOWYxZTAxNGM4NTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTE2OWJjMzEtNjg4NC00MzgxLWIx
MmMtMWNjNGQzOGNlMWQxLzkxNjliYzMxLTY4ODQtNDM4MS1iMTJjLTFjYzRkMzhj
ZTFkMS5jcmwwHwYDVR0jBBgwFoAUM+CWZ5fz6Ndzo/StN/uaGX+51o8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MTY5YmMzMS02ODg0LTQzODEtYjEyYy0xY2M0
ZDM4Y2UxZDEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgarwDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAGz0NbN75s9buAQXNfZdKQ4QAYvRCo8qrR3Co8QN7B46djR72xlttr
fYZ5u8tgGSGymtDhs12ku5j4qI3D/F0sdh05L/8SMRV1SfwoU6OWWLVfaKXigO0H
mQ4Rk7hJIJ4monCDmFJBPoYP3f2obs3Tgw00HcQCETmU6rPDo/fMFdqc4XXJN8G/
HqEc2r8KrAHxr94U9vfoSjUukDbvbL1c4bvEW51ZBRpJDfqX//oEPbTfk6YZQ6o3
5jLsoLblhxDHcfTySjLEaO0uJZX3JSRQ+DHol8I60IOT9siOIEn6GZMmTxUG97tc
oHkA9eJGCoVHqDFWgCykw+uGWn9o3mTQ
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:21:54 2025 by rpki-client