Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/9167a1d9-6cca-3665-87f7-ae9eebb6066a.roa
File: 9167a1d9-6cca-3665-87f7-ae9eebb6066a.roa (raw, json)
Hash identifier: XjVNujWuiN3Bne+jaXW9v0p65XG5sdnc+UAXfbPioMs=
Subject key identifier: 72:B7:DE:15:38:B5:6E:27:3F:19:F8:6F:4F:13:1A:31:F3:0A:4C:2F
Certificate issuer: /CN=3d291b6a-1b30-4fc0-b1dd-582ab98347d6
Certificate serial: 010D0C9F43285849419E7CB759EDE93E40042440
Authority key identifier: BC:F7:6D:C8:7E:F4:7A:0B:B2:C7:B8:46:A4:17:5E:45:ED:F8:72:11
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/9167a1d9-6cca-3665-87f7-ae9eebb6066a.roa
Signing time: Fri 21 Mar 2025 01:00:39 +0000
ROA not before: Fri 21 Mar 2025 01:00:39 +0000
ROA not after: Thu 19 Jun 2025 01:00:39 +0000
asID: 81
IP address blocks: 2600:2700::/28 maxlen: 28
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:41:9e:7c:b7:59:ed:e9:3e:40:04:24:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d291b6a-1b30-4fc0-b1dd-582ab98347d6
Validity
Not Before: Mar 21 01:00:39 2025 GMT
Not After : Jun 19 01:00:39 2025 GMT
Subject: CN=e851aba3-1ba1-4cfc-a166-5af6525dd9ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5c:7c:85:60:b1:3f:95:65:99:eb:03:79:6b:
91:67:cb:17:23:bd:af:f1:28:dc:a2:cc:52:29:f4:
e9:ae:83:5d:65:68:d6:28:93:be:47:bb:ec:72:07:
b5:c5:b3:74:77:c1:2f:f3:9e:24:6e:96:ea:5c:bb:
e2:48:f6:5c:11:55:99:0c:47:30:54:b2:b0:5a:94:
dd:18:18:88:32:7e:f8:f0:da:9f:1c:78:25:a9:31:
c2:7f:36:d4:3f:12:e6:af:8b:6d:dd:6b:63:44:b2:
fd:5b:ec:8a:e5:3c:8a:35:ab:10:2a:8e:63:00:f7:
f8:f1:2e:b5:88:37:d6:30:c0:75:b5:63:de:77:59:
53:a6:9b:80:b0:fd:f5:71:5e:a2:ca:11:62:84:9d:
8c:28:d0:d8:44:d5:fc:20:89:7c:6b:48:5c:5d:13:
dd:fd:c1:fe:7a:0a:79:28:e6:4e:d9:e6:3f:02:ab:
bc:b0:c5:64:ce:ad:bf:28:67:a3:fb:05:d1:18:79:
58:c4:a1:b4:a3:8b:55:50:c6:f8:32:41:0e:ef:6f:
5e:d2:56:db:0e:d8:d6:e0:5a:32:55:bd:26:27:0b:
09:c8:8e:1a:1a:04:57:f2:df:18:f3:da:fb:96:ed:
a7:ca:b8:5a:5c:a2:8e:a5:f8:08:0b:d2:d8:39:a8:
ce:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B7:DE:15:38:B5:6E:27:3F:19:F8:6F:4F:13:1A:31:F3:0A:4C:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/9167a1d9-6cca-3665-87f7-ae9eebb6066a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.crl
X509v3 Authority Key Identifier:
keyid:BC:F7:6D:C8:7E:F4:7A:0B:B2:C7:B8:46:A4:17:5E:45:ED:F8:72:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:2700::/28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:a5:c5:41:76:1b:66:23:21:26:60:c6:c3:c5:84:3a:de:ad:
74:e5:8c:a3:ce:cf:12:5b:bb:84:e9:ce:c4:0b:c9:e6:bd:71:
00:22:65:8b:c2:9d:db:af:bd:8d:c5:09:21:12:9d:12:9e:f9:
ab:a6:27:70:2f:e7:2c:a3:85:38:6e:86:94:56:a6:8d:26:61:
e0:f6:4a:97:e1:09:3e:19:16:b3:3d:1f:cf:f6:4c:93:f0:bf:
1b:01:4f:ae:ea:c5:ff:c0:da:5c:b6:fa:94:5c:61:d4:36:3a:
f9:1b:61:4f:e5:8a:78:60:9b:94:f4:0d:1a:f9:eb:70:8b:bd:
18:5b:41:a3:a2:c1:bd:0f:04:03:b6:6b:55:08:9d:1f:95:bd:
68:bd:6a:89:68:59:d2:35:be:d2:10:05:41:38:57:ce:97:4f:
fc:bc:b7:bf:74:28:fc:e4:ba:da:fc:1e:2c:e0:b7:12:63:76:
59:e7:41:2d:3c:e6:87:aa:af:ae:b7:96:cc:ed:f0:af:6c:6a:
39:02:06:30:a6:1a:8c:b7:2b:1f:b7:19:de:29:43:37:96:69:
f9:f2:26:8d:a0:82:94:c0:42:e6:75:85:53:38:54:48:72:f1:
03:0b:af:7a:78:6c:1e:35:3f:3b:c9:b3:5a:c8:e7:24:8f:b7:
af:90:a7:77
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElBnny3We3pPkAEJEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2QyOTFiNmEtMWIzMC00ZmMwLWIxZGQtNTgyYWI5ODM0
N2Q2MB4XDTI1MDMyMTAxMDAzOVoXDTI1MDYxOTAxMDAzOVowLzEtMCsGA1UEAxMk
ZTg1MWFiYTMtMWJhMS00Y2ZjLWExNjYtNWFmNjUyNWRkOWNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1x8hWCxP5VlmesDeWuRZ8sXI72v8SjcosxS
KfTproNdZWjWKJO+R7vscge1xbN0d8Ev854kbpbqXLviSPZcEVWZDEcwVLKwWpTd
GBiIMn748NqfHHglqTHCfzbUPxLmr4tt3WtjRLL9W+yK5TyKNasQKo5jAPf48S61
iDfWMMB1tWPed1lTppuAsP31cV6iyhFihJ2MKNDYRNX8IIl8a0hcXRPd/cH+egp5
KOZO2eY/Aqu8sMVkzq2/KGej+wXRGHlYxKG0o4tVUMb4MkEO729e0lbbDtjW4Foy
Vb0mJwsJyI4aGgRX8t8Y89r7lu2nyrhaXKKOpfgIC9LYOajOtwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFHK33hU4tW4nPxn4b08TGjHzCkwvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zZDI5
MWI2YS0xYjMwLTRmYzAtYjFkZC01ODJhYjk4MzQ3ZDYvOTE2N2ExZDktNmNjYS0z
NjY1LTg3ZjctYWU5ZWViYjYwNjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2QyOTFiNmEtMWIzMC00ZmMwLWIx
ZGQtNTgyYWI5ODM0N2Q2LzNkMjkxYjZhLTFiMzAtNGZjMC1iMWRkLTU4MmFiOTgz
NDdkNi5jcmwwHwYDVR0jBBgwFoAUvPdtyH70eguyx7hGpBdeRe34chEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zZDI5MWI2YS0xYjMwLTRmYzAtYjFkZC01ODJh
Yjk4MzQ3ZDYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgAnADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAbpcVBdhtmIyEmYMbDxYQ63q105Yyjzs8SW7uE6c7EC8nmvXEAImWL
wp3br72NxQkhEp0SnvmrpidwL+cso4U4boaUVqaNJmHg9kqX4Qk+GRazPR/P9kyT
8L8bAU+u6sX/wNpctvqUXGHUNjr5G2FP5Yp4YJuU9A0a+etwi70YW0GjosG9DwQD
tmtVCJ0flb1ovWqJaFnSNb7SEAVBOFfOl0/8vLe/dCj85Lra/B4s4LcSY3ZZ50Et
POaHqq+ut5bM7fCvbGo5AgYwphqMtysftxneKUM3lmn58iaNoIKUwELmdYVTOFRI
cvEDC696eGweNT87ybNayOckj7evkKd3
-----END CERTIFICATE-----
Generated at Fri Apr 11 05:21:50 2025 by rpki-client