Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/b7848456-9ae9-33ac-ae99-b4fd1ee821c3.roa
File: b7848456-9ae9-33ac-ae99-b4fd1ee821c3.roa (raw, json)
Hash identifier: YRLjrJq1Ru2UzxPBc+KveuoVoQBEmpInrg6WuxOzQhA=
Subject key identifier: B0:C1:97:0A:0F:32:33:DE:90:07:96:37:57:2E:27:A4:7B:ED:71:C0
Certificate issuer: /CN=4021c43f-b78a-496f-a8cc-814abc11a7e9
Certificate serial: 010D0C9F43285848B090B12DB2671D25B1E3B000
Authority key identifier: 19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/b7848456-9ae9-33ac-ae99-b4fd1ee821c3.roa
Signing time: Tue 28 Jan 2025 02:00:39 +0000
ROA not before: Tue 28 Jan 2025 02:00:39 +0000
ROA not after: Mon 28 Apr 2025 01:00:39 +0000
asID: 49
IP address blocks: 2610:20:6f15::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b0:90:b1:2d:b2:67:1d:25:b1:e3:b0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4021c43f-b78a-496f-a8cc-814abc11a7e9
Validity
Not Before: Jan 28 02:00:39 2025 GMT
Not After : Apr 28 01:00:39 2025 GMT
Subject: CN=8cdd9c2a-bb6c-4652-81f7-be4f0d4e4d21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:12:f8:52:82:34:68:39:f6:b6:7e:b6:68:47:
f1:bb:e5:48:d3:c4:32:3f:0a:5d:de:5e:0f:26:1f:
84:b2:fa:b5:ea:ed:6a:1a:10:1f:3d:ec:d6:b5:a6:
58:b9:5f:51:d2:97:3a:e8:1e:af:f5:fe:ba:23:e1:
a4:6f:70:89:5c:dd:10:ae:b2:57:60:7c:47:af:58:
87:a7:8b:a5:e8:99:d2:a3:25:f7:24:ce:99:58:c0:
90:4f:05:8a:56:b0:e5:b4:c2:7f:6a:9e:37:78:5f:
76:a9:61:cd:61:a5:33:3f:7d:b5:d6:1c:38:b3:7a:
fc:aa:2a:a9:c7:d2:4f:94:f0:ad:c0:12:8e:53:2e:
84:f3:e7:a8:d9:1a:a7:f3:8b:a8:5f:1e:15:ed:81:
d1:be:67:60:3d:c7:2d:cf:92:48:e3:e4:d7:e3:cd:
50:46:4c:8b:ad:bf:94:ad:02:6c:e4:a3:84:f7:44:
61:be:e0:fc:4d:88:5f:32:15:02:4b:a1:33:6a:d0:
09:1b:80:8a:1a:8d:ac:c5:5a:a6:54:47:ad:4f:ca:
89:cb:2e:f6:85:d4:6e:c6:c7:9e:2c:0e:6d:d4:7a:
15:e8:84:32:83:87:5d:79:bc:3e:26:0d:86:7f:9b:
a2:0b:e6:d8:51:ea:a1:65:b6:42:44:dd:f0:0d:d1:
38:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C1:97:0A:0F:32:33:DE:90:07:96:37:57:2E:27:A4:7B:ED:71:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/b7848456-9ae9-33ac-ae99-b4fd1ee821c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.crl
X509v3 Authority Key Identifier:
keyid:19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer
sbgp-ipAddrBlock: critical
IPv6:
2610:20:6f15::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:13:47:ec:16:35:d5:5d:ca:bc:11:56:0b:b3:7e:fb:32:59:
98:fc:7a:8d:83:14:78:1d:73:14:dc:ef:92:a7:b3:c0:38:f5:
b9:f0:9b:cf:b4:1e:a0:b9:0b:44:30:b5:8f:fb:a2:1f:cf:30:
02:5e:79:35:49:7d:fa:f0:70:d6:80:c5:5a:80:f6:2b:6a:31:
ae:e3:5a:3b:ee:67:af:86:f0:2b:1d:d0:40:44:90:66:d6:48:
a4:bf:39:ea:71:6c:58:0f:a2:41:89:7f:fa:c4:74:54:1f:f5:
ad:c7:e5:1d:3a:97:b9:6c:e5:12:71:09:59:a6:cb:c6:94:65:
7e:7f:c2:b6:8e:ae:d9:2f:23:61:a3:2a:6c:92:5e:16:af:bb:
36:bb:79:27:50:e7:42:5c:a9:70:22:06:41:f8:14:09:38:b5:
f7:a9:f6:82:3a:45:ea:77:6e:38:e0:d9:7c:39:9e:16:b8:be:
c5:8c:f6:e3:80:7c:88:70:4e:c8:59:73:39:04:12:47:6c:a6:
62:fa:eb:8c:0f:6f:80:72:89:07:df:b4:8c:60:2f:a8:81:62:
0a:eb:12:b2:a8:80:f8:13:8f:3d:74:d3:3e:f9:56:c3:29:92:
c5:71:97:3e:0b:17:e5:e1:33:d6:b9:e4:5b:cc:75:d2:66:4f:
2f:3a:ad:f8
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiwkLEtsmcdJbHjsAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDAyMWM0M2YtYjc4YS00OTZmLWE4Y2MtODE0YWJjMTFh
N2U5MB4XDTI1MDEyODAyMDAzOVoXDTI1MDQyODAxMDAzOVowLzEtMCsGA1UEAxMk
OGNkZDljMmEtYmI2Yy00NjUyLTgxZjctYmU0ZjBkNGU0ZDIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRL4UoI0aDn2tn62aEfxu+VI08QyPwpd3l4P
Jh+Esvq16u1qGhAfPezWtaZYuV9R0pc66B6v9f66I+Gkb3CJXN0QrrJXYHxHr1iH
p4ul6JnSoyX3JM6ZWMCQTwWKVrDltMJ/ap43eF92qWHNYaUzP3211hw4s3r8qiqp
x9JPlPCtwBKOUy6E8+eo2Rqn84uoXx4V7YHRvmdgPcctz5JI4+TX481QRkyLrb+U
rQJs5KOE90RhvuD8TYhfMhUCS6EzatAJG4CKGo2sxVqmVEetT8qJyy72hdRuxsee
LA5t1HoV6IQyg4ddebw+Jg2Gf5uiC+bYUeqhZbZCRN3wDdE4QwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLDBlwoPMjPekAeWN1cuJ6R77XHAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80MDIx
YzQzZi1iNzhhLTQ5NmYtYThjYy04MTRhYmMxMWE3ZTkvYjc4NDg0NTYtOWFlOS0z
M2FjLWFlOTktYjRmZDFlZTgyMWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDAyMWM0M2YtYjc4YS00OTZmLWE4
Y2MtODE0YWJjMTFhN2U5LzQwMjFjNDNmLWI3OGEtNDk2Zi1hOGNjLTgxNGFiYzEx
YTdlOS5jcmwwHwYDVR0jBBgwFoAUGc1MW2xbN6s15QYAo+MXri+DU1wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS80MDIxYzQzZi1iNzhhLTQ5NmYtYThjYy04MTRh
YmMxMWE3ZTkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJhAAIG8V
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABATR+wWNdVdyrwRVguzfvsyWZj8eo2DFHgdcxTc75Kns8A49bnw
m8+0HqC5C0QwtY/7oh/PMAJeeTVJffrwcNaAxVqA9itqMa7jWjvuZ6+G8Csd0EBE
kGbWSKS/OepxbFgPokGJf/rEdFQf9a3H5R06l7ls5RJxCVmmy8aUZX5/wraOrtkv
I2GjKmySXhavuza7eSdQ50JcqXAiBkH4FAk4tfep9oI6Rep3bjjg2Xw5nha4vsWM
9uOAfIhwTshZczkEEkdspmL664wPb4ByiQfftIxgL6iBYgrrErKogPgTjz100z75
VsMpksVxlz4LF+XhM9a55FvMddJmTy86rfg=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:39:39 2025 by rpki-client