Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/33a1f25c-f011-36ac-b06b-3d041d9fbc60.roa
File: 33a1f25c-f011-36ac-b06b-3d041d9fbc60.roa (raw, json)
Hash identifier: SaJD9/XKWRfQPU2Nq0Xi1roc0hRyl4MvuDPxPY4ciWI=
Subject key identifier: 21:73:6F:12:84:4F:F0:0D:B9:FD:9B:56:A5:7A:73:D9:59:E0:7B:A3
Certificate issuer: /CN=1d8c9167-e816-4834-8fcc-f8b0f93fe6a0
Certificate serial: 010D0C9F43285848A6E452B5F3A77589D4F83BE0
Authority key identifier: 8A:66:59:66:BE:40:91:02:45:F8:94:B2:C8:4B:D3:E1:91:C7:0C:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/33a1f25c-f011-36ac-b06b-3d041d9fbc60.roa
Signing time: Fri 24 Jan 2025 14:51:07 +0000
ROA not before: Fri 24 Jan 2025 14:51:07 +0000
ROA not after: Thu 24 Apr 2025 13:51:07 +0000
asID: 40124
IP address blocks: 2602:299:41::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a6:e4:52:b5:f3:a7:75:89:d4:f8:3b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d8c9167-e816-4834-8fcc-f8b0f93fe6a0
Validity
Not Before: Jan 24 14:51:07 2025 GMT
Not After : Apr 24 13:51:07 2025 GMT
Subject: CN=2a666731-4d5b-4a62-8b75-3002cc91f2b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6c:8a:7b:03:e1:d7:7d:8b:dd:34:e8:a2:70:
57:b9:8c:ee:85:af:fd:3c:74:99:c9:fa:85:0d:8a:
84:81:3b:62:90:1f:a0:b2:c7:09:67:e6:ff:20:68:
3a:60:c2:3b:9a:45:6b:8c:5e:23:be:5d:25:72:4a:
b1:5f:d7:aa:dc:cb:68:d5:24:13:e1:c2:9c:75:3a:
95:4f:90:3b:37:94:13:69:24:c2:c8:7b:70:5f:fa:
a8:f1:e9:06:c4:ca:73:31:ca:64:2c:fa:0c:52:ab:
55:63:96:03:e8:dd:0d:33:2c:7a:0b:6a:1f:57:57:
9a:6a:a2:f0:d2:31:33:04:74:c7:f7:02:56:1f:c7:
6d:71:70:91:12:4a:3d:24:f2:60:42:0d:fa:d2:79:
67:a5:1f:77:40:bb:4c:c0:25:3a:98:4f:db:cd:1b:
5c:56:4f:dd:28:cf:f5:02:9d:a0:09:d5:5b:bf:85:
6d:7b:98:37:a7:ed:a1:ad:8b:eb:ec:57:bd:6f:ad:
d5:32:b3:71:52:37:c6:7b:9a:28:61:d9:68:96:c6:
42:96:98:51:9a:9f:95:82:72:66:ad:35:c9:43:92:
89:ab:67:58:a6:fe:93:90:2d:61:15:12:6a:66:eb:
e3:2e:a7:b9:29:ba:fa:f0:91:f3:74:5a:16:97:88:
a9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:73:6F:12:84:4F:F0:0D:B9:FD:9B:56:A5:7A:73:D9:59:E0:7B:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/33a1f25c-f011-36ac-b06b-3d041d9fbc60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.crl
X509v3 Authority Key Identifier:
keyid:8A:66:59:66:BE:40:91:02:45:F8:94:B2:C8:4B:D3:E1:91:C7:0C:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:299:41::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:c2:78:ee:6a:a6:9b:20:33:b7:c8:22:d3:f5:fa:65:f0:46:
ec:df:b8:27:ee:a7:1d:f4:ff:94:39:75:c2:1d:5a:e4:5f:93:
66:32:8b:22:33:3d:4d:a8:1e:44:2c:35:e9:73:a3:65:c5:d9:
d9:d9:9b:6c:39:d7:e6:51:f7:b3:ac:39:4c:02:ad:ba:dc:fc:
03:58:79:db:bf:c8:65:c1:12:f7:06:78:47:70:9b:44:65:a6:
c7:86:b2:6f:0c:4d:15:26:cc:aa:c8:11:14:f9:84:bb:b0:92:
5a:05:26:c3:fd:c0:84:06:d0:8f:1f:b4:e8:b3:96:69:42:94:
b9:cf:92:87:be:36:a7:b2:78:e6:65:60:4e:29:dd:5c:dd:ff:
dc:77:ef:8b:64:f1:4c:fa:de:63:b9:4a:4f:6f:80:3f:ea:50:
1a:cd:4f:1c:8d:a1:57:7a:b4:8c:e8:5a:0f:bf:22:44:2c:48:
c4:5b:84:ac:47:1f:05:ea:41:28:77:56:66:43:aa:f3:26:6b:
f9:a5:7c:58:9f:8b:01:2f:2c:0f:55:ce:85:26:61:8e:44:df:
af:41:24:c1:53:b3:10:3f:3f:d4:44:b8:e9:6f:bb:d4:ea:7e:
10:1a:17:8b:11:70:13:ad:fb:7a:0a:e4:72:ec:d8:55:19:88:
62:d3:24:9f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEim5FK186d1idT4O+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWQ4YzkxNjctZTgxNi00ODM0LThmY2MtZjhiMGY5M2Zl
NmEwMB4XDTI1MDEyNDE0NTEwN1oXDTI1MDQyNDEzNTEwN1owLzEtMCsGA1UEAxMk
MmE2NjY3MzEtNGQ1Yi00YTYyLThiNzUtMzAwMmNjOTFmMmIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGyKewPh132L3TToonBXuYzuha/9PHSZyfqF
DYqEgTtikB+gsscJZ+b/IGg6YMI7mkVrjF4jvl0lckqxX9eq3Mto1SQT4cKcdTqV
T5A7N5QTaSTCyHtwX/qo8ekGxMpzMcpkLPoMUqtVY5YD6N0NMyx6C2ofV1eaaqLw
0jEzBHTH9wJWH8dtcXCREko9JPJgQg360nlnpR93QLtMwCU6mE/bzRtcVk/dKM/1
Ap2gCdVbv4Vte5g3p+2hrYvr7Fe9b63VMrNxUjfGe5ooYdlolsZClphRmp+VgnJm
rTXJQ5KJq2dYpv6TkC1hFRJqZuvjLqe5Kbr68JHzdFoWl4ipZQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCFzbxKET/ANuf2bVqV6c9lZ4HujMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xZDhj
OTE2Ny1lODE2LTQ4MzQtOGZjYy1mOGIwZjkzZmU2YTAvMzNhMWYyNWMtZjAxMS0z
NmFjLWIwNmItM2QwNDFkOWZiYzYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWQ4YzkxNjctZTgxNi00ODM0LThm
Y2MtZjhiMGY5M2ZlNmEwLzFkOGM5MTY3LWU4MTYtNDgzNC04ZmNjLWY4YjBmOTNm
ZTZhMC5jcmwwHwYDVR0jBBgwFoAUimZZZr5AkQJF+JSyyEvT4ZHHDMAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8xZDhjOTE2Ny1lODE2LTQ4MzQtOGZjYy1mOGIw
ZjkzZmU2YTAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICmQBB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAF7CeO5qppsgM7fIItP1+mXwRuzfuCfupx30/5Q5dcIdWuRfk2Yy
iyIzPU2oHkQsNelzo2XF2dnZm2w51+ZR97OsOUwCrbrc/ANYedu/yGXBEvcGeEdw
m0RlpseGsm8MTRUmzKrIERT5hLuwkloFJsP9wIQG0I8ftOizlmlClLnPkoe+Nqey
eOZlYE4p3Vzd/9x374tk8Uz63mO5Sk9vgD/qUBrNTxyNoVd6tIzoWg+/IkQsSMRb
hKxHHwXqQSh3VmZDqvMma/mlfFifiwEvLA9VzoUmYY5E369BJMFTsxA/P9REuOlv
u9TqfhAaF4sRcBOt+3oK5HLs2FUZiGLTJJ8=
-----END CERTIFICATE-----
Generated at Sun Apr 6 21:28:22 2025 by rpki-client