Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba/c2d2ca0b-f812-3101-ba90-0261d1b5768a.roa
File: c2d2ca0b-f812-3101-ba90-0261d1b5768a.roa (raw, json)
Hash identifier: 96nNzKVxM6ctA5jsnBq4Uu39Ul44/Lvb3reDA9Q98pA=
Subject key identifier: 61:38:D6:DB:BD:20:23:93:A1:38:D2:47:2D:F0:30:52:50:AB:7B:36
Certificate issuer: /CN=f601ba70-383e-4f5d-aacb-7e45e33ac6ba
Certificate serial: 010D0C9F4328584921840BDD74D97BADF4D4EA60
Authority key identifier: 63:E4:E1:0B:2B:65:78:FC:96:06:23:A2:03:18:67:8B:54:59:F4:DA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba/c2d2ca0b-f812-3101-ba90-0261d1b5768a.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 40846
IP address blocks: 2602:2e4:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:84:0b:dd:74:d9:7b:ad:f4:d4:ea:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f601ba70-383e-4f5d-aacb-7e45e33ac6ba
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=3cfab8ae-4fd2-4383-a55d-8d22018cba83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a7:63:49:2e:2a:3b:e8:ed:89:07:18:58:c1:
21:ff:72:ea:d1:da:df:fc:2a:ba:86:b4:ec:23:32:
93:70:f5:9c:3d:54:42:0a:2f:66:a3:61:b5:53:b8:
3b:73:2f:f1:31:87:73:e6:23:41:3d:3c:24:0a:55:
d4:06:c9:ce:ed:6f:82:05:c0:86:a8:79:16:7a:95:
1c:80:c2:2c:93:d1:fd:b7:e9:cc:8b:d6:4b:89:37:
e4:20:dd:ae:f6:01:65:8f:5a:59:08:26:91:99:5a:
b7:a7:3b:59:6f:a1:02:d9:71:f1:7e:10:b3:3f:86:
1d:80:be:d1:cc:2d:e3:47:14:64:de:f9:64:5d:ab:
57:92:92:41:5a:85:00:ab:ac:a3:0c:b5:8c:89:eb:
44:7a:ec:ba:d9:01:d0:f8:0c:e3:c5:76:27:cc:26:
7b:c2:a4:ea:ea:8c:4d:80:9b:10:8a:c5:69:ff:bc:
a0:b1:57:11:0a:44:e5:c1:9f:09:08:d8:24:f0:f7:
0c:65:d5:22:3e:a5:82:c2:f4:02:8c:8e:9f:20:82:
08:62:73:b3:8c:0d:8c:88:bc:53:9e:3f:4e:22:3f:
c8:18:c8:fb:7a:74:5c:96:40:1a:e1:66:52:c1:64:
55:45:f8:98:c5:e2:2b:d9:fb:dc:b5:d8:f4:45:3d:
5a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:38:D6:DB:BD:20:23:93:A1:38:D2:47:2D:F0:30:52:50:AB:7B:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba/c2d2ca0b-f812-3101-ba90-0261d1b5768a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba/f601ba70-383e-4f5d-aacb-7e45e33ac6ba.crl
X509v3 Authority Key Identifier:
keyid:63:E4:E1:0B:2B:65:78:FC:96:06:23:A2:03:18:67:8B:54:59:F4:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:2e4:1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c7:3d:f9:c9:d3:73:6e:bf:0e:75:15:74:fb:50:21:5c:1b:a5:
81:db:87:c1:a7:df:46:c3:23:09:f0:37:6b:4d:e9:e9:9a:2f:
37:b6:f4:fa:30:a8:f4:6a:ae:2a:d4:9b:dc:91:26:15:66:68:
88:db:46:78:d4:91:4c:c6:13:96:80:2e:0e:26:8e:bc:68:f8:
ac:ef:f2:8f:87:27:4d:15:86:36:99:3a:b8:be:4a:01:81:b3:
70:6e:28:38:ee:b5:ad:a4:da:44:c6:b4:95:8b:51:3a:1a:e8:
f6:c5:47:c5:ea:e4:c7:68:f7:da:4a:17:7b:ca:8c:7e:d1:d1:
a9:a7:cd:07:40:1c:70:85:83:cd:38:ad:32:fc:67:3f:c7:17:
54:32:25:08:33:09:80:e1:2b:05:1c:db:97:cc:e9:03:78:05:
4d:7a:a3:d9:55:b6:9c:ed:b6:3b:50:91:4c:f6:7b:11:c7:8f:
9b:78:b5:66:82:58:06:3c:0f:bb:8a:38:41:2d:4b:71:b4:02:
55:2d:7f:b0:80:45:4e:b1:2f:c2:2f:19:d4:72:3c:9f:95:58:
f5:a7:70:15:6d:d4:cf:27:99:e8:ff:a4:a6:3e:59:f8:cf:41:
f4:bb:bc:6f:29:9a:dd:b9:24:ff:1c:4d:02:ea:17:83:d8:e0:
e3:1f:3c:ec
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkhhAvddNl7rfTU6mAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYwMWJhNzAtMzgzZS00ZjVkLWFhY2ItN2U0NWUzM2Fj
NmJhMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk
M2NmYWI4YWUtNGZkMi00MzgzLWE1NWQtOGQyMjAxOGNiYTgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqdjSS4qO+jtiQcYWMEh/3Lq0drf/Cq6hrTs
IzKTcPWcPVRCCi9mo2G1U7g7cy/xMYdz5iNBPTwkClXUBsnO7W+CBcCGqHkWepUc
gMIsk9H9t+nMi9ZLiTfkIN2u9gFlj1pZCCaRmVq3pztZb6EC2XHxfhCzP4YdgL7R
zC3jRxRk3vlkXatXkpJBWoUAq6yjDLWMietEeuy62QHQ+AzjxXYnzCZ7wqTq6oxN
gJsQisVp/7ygsVcRCkTlwZ8JCNgk8PcMZdUiPqWCwvQCjI6fIIIIYnOzjA2MiLxT
nj9OIj/IGMj7enRclkAa4WZSwWRVRfiYxeIr2fvctdj0RT1aLQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGE41tu9ICOToTjSRy3wMFJQq3s2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjAx
YmE3MC0zODNlLTRmNWQtYWFjYi03ZTQ1ZTMzYWM2YmEvYzJkMmNhMGItZjgxMi0z
MTAxLWJhOTAtMDI2MWQxYjU3NjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYwMWJhNzAtMzgzZS00ZjVkLWFh
Y2ItN2U0NWUzM2FjNmJhL2Y2MDFiYTcwLTM4M2UtNGY1ZC1hYWNiLTdlNDVlMzNh
YzZiYS5jcmwwHwYDVR0jBBgwFoAUY+ThCytlePyWBiOiAxhni1RZ9NowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjAxYmE3MC0zODNlLTRmNWQtYWFjYi03ZTQ1
ZTMzYWM2YmEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIC5AAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAMc9+cnTc26/DnUVdPtQIVwbpYHbh8Gn30bDIwnwN2tN6emaLze2
9PowqPRqrirUm9yRJhVmaIjbRnjUkUzGE5aALg4mjrxo+Kzv8o+HJ00VhjaZOri+
SgGBs3BuKDjuta2k2kTGtJWLUToa6PbFR8Xq5Mdo99pKF3vKjH7R0amnzQdAHHCF
g804rTL8Zz/HF1QyJQgzCYDhKwUc25fM6QN4BU16o9lVtpzttjtQkUz2exHHj5t4
tWaCWAY8D7uKOEEtS3G0AlUtf7CARU6xL8IvGdRyPJ+VWPWncBVt1M8nmej/pKY+
WfjPQfS7vG8pmt25JP8cTQLqF4PY4OMfPOw=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:18:53 2025 by rpki-client