Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/97c027da-6d39-3b13-a764-2759d5652401.roa
File: 97c027da-6d39-3b13-a764-2759d5652401.roa (raw, json)
Hash identifier: e6WUTFN3TIzVopPZMIs/AcGBQwmoIXLjtWN7V8va8tU=
Subject key identifier: F2:39:BD:7C:96:6E:E5:19:61:26:43:80:1C:1C:47:2D:A2:F3:F9:3D
Certificate issuer: /CN=1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c
Certificate serial: 010D0C9F432858493E1EDB9F77C62BC74AB75660
Authority key identifier: 1B:2E:C9:32:69:C0:91:AD:78:83:F0:75:7E:D4:FB:FE:E0:3C:A6:0C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/97c027da-6d39-3b13-a764-2759d5652401.roa
Signing time: Wed 19 Mar 2025 18:56:07 +0000
ROA not before: Wed 19 Mar 2025 18:56:07 +0000
ROA not after: Tue 17 Jun 2025 18:56:07 +0000
asID: 62553
IP address blocks: 2602:f71e:41::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3e:1e:db:9f:77:c6:2b:c7:4a:b7:56:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c
Validity
Not Before: Mar 19 18:56:07 2025 GMT
Not After : Jun 17 18:56:07 2025 GMT
Subject: CN=52e5359f-2138-4124-aba6-c7f882e9ec1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:29:ec:a0:0e:8b:21:e4:58:5b:20:e4:ff:24:
30:60:76:17:ab:91:84:0f:a1:b5:66:28:d2:47:04:
19:fd:60:37:13:cc:8d:1a:be:ea:be:c8:57:f4:38:
f0:0f:26:60:56:33:4f:2e:a7:43:50:c4:02:6a:ac:
52:ba:88:cc:0f:87:ee:df:9a:2f:1f:d7:b2:e5:f3:
bf:3c:96:c0:e1:93:27:69:09:95:1b:f6:d7:76:b4:
2c:28:dc:7d:13:31:99:d1:33:34:cb:1c:0c:fd:11:
9e:03:cb:df:23:95:e5:53:b8:49:84:f1:df:c1:96:
34:5c:c2:0e:d3:be:a7:72:9b:13:89:46:29:7d:eb:
62:28:ce:63:4f:b8:da:68:95:70:0b:69:d8:40:79:
be:b0:02:ee:0a:48:3a:9d:57:58:86:9c:f0:99:ed:
92:2d:6f:41:cc:10:e8:c9:cf:5e:38:43:c8:7a:1e:
31:61:48:eb:fb:10:f9:54:79:2a:cf:c8:dd:93:d5:
50:4a:f5:67:c6:96:df:21:08:9b:e1:09:f5:3f:fc:
4b:8a:72:e8:37:52:37:28:eb:6d:c7:78:dc:a9:2a:
f7:d4:50:1f:a0:dd:4e:a6:76:8e:48:15:05:b9:78:
3b:b9:3a:2c:9f:be:b0:fd:76:07:d5:96:06:eb:76:
0a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:39:BD:7C:96:6E:E5:19:61:26:43:80:1C:1C:47:2D:A2:F3:F9:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/97c027da-6d39-3b13-a764-2759d5652401.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.crl
X509v3 Authority Key Identifier:
keyid:1B:2E:C9:32:69:C0:91:AD:78:83:F0:75:7E:D4:FB:FE:E0:3C:A6:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f71e:41::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:06:e1:a4:bc:5f:aa:69:16:31:f8:d5:72:4f:92:b4:7f:e6:
05:e1:7d:cb:35:51:26:b2:87:c6:d2:33:c0:94:06:50:ef:2b:
8e:b5:cf:4a:30:31:6e:4e:1e:b4:ab:d9:9e:60:35:1c:6b:5a:
ad:bd:57:df:d4:f4:78:50:02:11:4f:7c:23:06:dd:64:a3:42:
67:8c:5e:63:e4:d6:0c:70:9d:be:46:94:0f:f8:8d:a5:17:fd:
1b:e7:9c:ae:71:99:84:55:b9:87:04:a2:2f:c6:6f:ee:87:86:
09:bd:21:f8:49:b1:70:7d:97:7d:42:9e:03:8e:b8:d8:38:fd:
33:14:62:7e:68:cb:9c:ed:c1:80:02:78:6c:30:b5:2f:7e:3e:
22:9b:72:78:2c:53:4b:9b:fe:98:53:6e:07:9f:f4:7f:0e:47:
9f:ef:22:11:c0:68:82:15:00:bf:06:a5:05:b5:13:c3:64:74:
28:fa:fe:10:4a:f6:45:a3:54:11:51:d2:f5:18:d9:f1:78:5d:
f5:0c:14:4a:68:1b:a4:10:c7:87:66:2f:ca:30:bf:00:90:73:
2d:4f:11:35:a6:82:19:87:2d:98:ff:f6:8d:7f:e3:23:cc:7e:
39:ae:c6:82:58:a0:75:3f:d7:31:65:83:96:95:39:5c:66:5f:
9a:81:68:a2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEk+Htufd8Yrx0q3VmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZjN2YyM2YtYjBhMC00ZDJjLWE4YTItMzYwNWM2ZjA4
ZTljMB4XDTI1MDMxOTE4NTYwN1oXDTI1MDYxNzE4NTYwN1owLzEtMCsGA1UEAxMk
NTJlNTM1OWYtMjEzOC00MTI0LWFiYTYtYzdmODgyZTllYzFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCnsoA6LIeRYWyDk/yQwYHYXq5GED6G1ZijS
RwQZ/WA3E8yNGr7qvshX9DjwDyZgVjNPLqdDUMQCaqxSuojMD4fu35ovH9ey5fO/
PJbA4ZMnaQmVG/bXdrQsKNx9EzGZ0TM0yxwM/RGeA8vfI5XlU7hJhPHfwZY0XMIO
076ncpsTiUYpfetiKM5jT7jaaJVwC2nYQHm+sALuCkg6nVdYhpzwme2SLW9BzBDo
yc9eOEPIeh4xYUjr+xD5VHkqz8jdk9VQSvVnxpbfIQib4Qn1P/xLinLoN1I3KOtt
x3jcqSr31FAfoN1OpnaOSBUFuXg7uTosn76w/XYH1ZYG63YK0wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPI5vXyWbuUZYSZDgBwcRy2i8/k9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xZmM3
ZjIzZi1iMGEwLTRkMmMtYThhMi0zNjA1YzZmMDhlOWMvOTdjMDI3ZGEtNmQzOS0z
YjEzLWE3NjQtMjc1OWQ1NjUyNDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWZjN2YyM2YtYjBhMC00ZDJjLWE4
YTItMzYwNWM2ZjA4ZTljLzFmYzdmMjNmLWIwYTAtNGQyYy1hOGEyLTM2MDVjNmYw
OGU5Yy5jcmwwHwYDVR0jBBgwFoAUGy7JMmnAka14g/B1ftT7/uA8pgwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xZmM3ZjIzZi1iMGEwLTRkMmMtYThhMi0zNjA1
YzZmMDhlOWMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL3HgBB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADsG4aS8X6ppFjH41XJPkrR/5gXhfcs1USayh8bSM8CUBlDvK461
z0owMW5OHrSr2Z5gNRxrWq29V9/U9HhQAhFPfCMG3WSjQmeMXmPk1gxwnb5GlA/4
jaUX/RvnnK5xmYRVuYcEoi/Gb+6Hhgm9IfhJsXB9l31CngOOuNg4/TMUYn5oy5zt
wYACeGwwtS9+PiKbcngsU0ub/phTbgef9H8OR5/vIhHAaIIVAL8GpQW1E8NkdCj6
/hBK9kWjVBFR0vUY2fF4XfUMFEpoG6QQx4dmL8owvwCQcy1PETWmghmHLZj/9o1/
4yPMfjmuxoJYoHU/1zFlg5aVOVxmX5qBaKI=
-----END CERTIFICATE-----
Generated at Sat Apr 12 05:16:44 2025 by rpki-client