Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/2455ae16-e22c-38fe-8c06-719fb9bee946.roa
File: 2455ae16-e22c-38fe-8c06-719fb9bee946.roa (raw, json)
Hash identifier: WT7ysAvpH7rNDubKJ2LAA9EyLjcqw0bEKFNWqs0/Uqo=
Subject key identifier: 0D:22:04:85:30:07:3C:72:E2:3D:32:78:05:B8:CE:EB:B0:BE:16:7E
Certificate issuer: /CN=4021c43f-b78a-496f-a8cc-814abc11a7e9
Certificate serial: 010D0C9F43285848B090B07FA7AA4DD573759D80
Authority key identifier: 19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/2455ae16-e22c-38fe-8c06-719fb9bee946.roa
Signing time: Tue 28 Jan 2025 02:00:39 +0000
ROA not before: Tue 28 Jan 2025 02:00:39 +0000
ROA not after: Mon 28 Apr 2025 01:00:39 +0000
asID: 49
IP address blocks: 2610:20:6000::/37 maxlen: 37
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b0:90:b0:7f:a7:aa:4d:d5:73:75:9d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4021c43f-b78a-496f-a8cc-814abc11a7e9
Validity
Not Before: Jan 28 02:00:39 2025 GMT
Not After : Apr 28 01:00:39 2025 GMT
Subject: CN=e8c84d75-8925-4095-80d4-be50eaa10e66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:74:6f:93:8f:f5:9f:62:0f:7f:5d:db:2d:f2:
fa:ce:cf:19:14:a2:74:35:a7:c2:cc:0e:65:02:e2:
1e:15:14:7d:c4:61:d8:92:a9:88:3b:29:54:0f:cb:
bc:65:ec:37:ce:48:fb:64:ee:f5:2e:1d:15:e7:97:
f8:80:67:b1:b2:db:43:32:ba:4f:19:dc:1d:a4:49:
a3:f6:72:5a:36:1a:a9:df:b2:59:ac:da:ca:80:14:
e0:bd:5d:12:95:fa:9c:a7:50:a4:12:69:3a:0e:12:
b1:be:59:0a:88:c5:2a:07:6a:51:e2:06:97:5a:a4:
82:33:1b:b8:72:02:a7:2d:ec:7f:44:a4:13:ce:ac:
87:2b:0e:65:53:d4:51:70:5f:bc:c2:39:2a:a2:61:
b0:7b:e3:54:ae:78:d0:fe:56:97:d1:06:c3:a9:9a:
c8:65:2a:26:3c:de:cc:e1:70:e7:62:37:1d:10:f2:
7e:87:91:db:48:21:ee:21:7e:5a:08:47:fd:77:d8:
14:d0:a2:42:cf:ef:54:9d:5f:74:ed:22:32:34:51:
7d:a7:65:66:81:19:ff:a5:f3:a4:7e:76:0a:3b:a0:
75:53:77:23:2f:1b:55:db:02:56:3d:c6:f5:d7:53:
99:da:4c:48:58:14:ca:f4:b4:13:2e:57:b8:a9:5b:
e6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:22:04:85:30:07:3C:72:E2:3D:32:78:05:B8:CE:EB:B0:BE:16:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/2455ae16-e22c-38fe-8c06-719fb9bee946.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.crl
X509v3 Authority Key Identifier:
keyid:19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer
sbgp-ipAddrBlock: critical
IPv6:
2610:20:6000::/37
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:bf:a9:bd:ff:cd:e9:dc:b4:b3:35:ef:2e:9c:cf:79:e5:82:
ce:64:ec:bc:a0:1e:39:7a:d1:03:78:51:18:cb:d0:79:03:83:
63:92:53:c9:77:21:ca:52:42:1c:9d:b4:f4:5c:20:58:5e:28:
27:18:d3:af:42:1f:be:ea:9c:57:50:a1:d4:54:44:be:b0:7d:
62:bb:b6:1d:bc:dd:0a:a4:47:99:bb:a0:5d:6c:8a:12:b9:d9:
52:1e:5d:82:b2:c4:b2:bf:4e:48:7a:52:13:bd:8c:4d:61:36:
86:0f:66:57:7e:14:e9:a1:44:27:28:2f:66:b0:3d:66:27:59:
54:95:0a:12:ee:95:7a:39:f3:4e:12:3e:11:3d:7e:1a:cf:b9:
60:95:b4:eb:5c:be:f8:80:05:c5:06:e7:ab:8a:0b:02:33:cd:
1e:c5:70:5e:6c:9c:2e:a9:9a:8f:0a:b4:7a:57:fe:11:5b:2f:
f5:90:9f:21:7c:32:df:4f:82:2f:40:2d:cf:aa:e2:18:27:18:
e1:d9:00:54:3e:ed:68:c2:69:1a:29:46:56:f8:e6:67:af:8c:
f6:3f:1d:f1:c1:58:b2:a2:26:21:8b:ba:3b:a0:a9:17:21:e0:
48:08:8e:0e:1c:9c:f0:c2:8e:8b:a4:c2:72:cf:f8:85:55:76:
96:40:93:80
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEiwkLB/p6pN1XN1nYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDAyMWM0M2YtYjc4YS00OTZmLWE4Y2MtODE0YWJjMTFh
N2U5MB4XDTI1MDEyODAyMDAzOVoXDTI1MDQyODAxMDAzOVowLzEtMCsGA1UEAxMk
ZThjODRkNzUtODkyNS00MDk1LTgwZDQtYmU1MGVhYTEwZTY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnRvk4/1n2IPf13bLfL6zs8ZFKJ0NafCzA5l
AuIeFRR9xGHYkqmIOylUD8u8Zew3zkj7ZO71Lh0V55f4gGexsttDMrpPGdwdpEmj
9nJaNhqp37JZrNrKgBTgvV0Slfqcp1CkEmk6DhKxvlkKiMUqB2pR4gaXWqSCMxu4
cgKnLex/RKQTzqyHKw5lU9RRcF+8wjkqomGwe+NUrnjQ/laX0QbDqZrIZSomPN7M
4XDnYjcdEPJ+h5HbSCHuIX5aCEf9d9gU0KJCz+9UnV907SIyNFF9p2VmgRn/pfOk
fnYKO6B1U3cjLxtV2wJWPcb111OZ2kxIWBTK9LQTLle4qVvm7wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFA0iBIUwBzxy4j0yeAW4zuuwvhZ+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80MDIx
YzQzZi1iNzhhLTQ5NmYtYThjYy04MTRhYmMxMWE3ZTkvMjQ1NWFlMTYtZTIyYy0z
OGZlLThjMDYtNzE5ZmI5YmVlOTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDAyMWM0M2YtYjc4YS00OTZmLWE4
Y2MtODE0YWJjMTFhN2U5LzQwMjFjNDNmLWI3OGEtNDk2Zi1hOGNjLTgxNGFiYzEx
YTdlOS5jcmwwHwYDVR0jBBgwFoAUGc1MW2xbN6s15QYAo+MXri+DU1wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS80MDIxYzQzZi1iNzhhLTQ5NmYtYThjYy04MTRh
YmMxMWE3ZTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYDJhAAIGAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAWr+pvf/N6dy0szXvLpzPeeWCzmTsvKAeOXrRA3hRGMvQeQODY5JT
yXchylJCHJ209FwgWF4oJxjTr0IfvuqcV1Ch1FREvrB9Yru2HbzdCqRHmbugXWyK
ErnZUh5dgrLEsr9OSHpSE72MTWE2hg9mV34U6aFEJygvZrA9ZidZVJUKEu6Vejnz
ThI+ET1+Gs+5YJW061y++IAFxQbnq4oLAjPNHsVwXmycLqmajwq0elf+EVsv9ZCf
IXwy30+CL0Atz6riGCcY4dkAVD7taMJpGilGVvjmZ6+M9j8d8cFYsqImIYu6O6Cp
FyHgSAiODhyc8MKOi6TCcs/4hVV2lkCTgA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:37:29 2025 by rpki-client