Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/4304d6b0-4f61-30c9-a0ef-e3e83e94e659.roa
File: 4304d6b0-4f61-30c9-a0ef-e3e83e94e659.roa (raw, json)
Hash identifier: xc6Ubdyh26WV8LGu17kvPHDr+rUEP2tWW9uQt7mwbEk=
Subject key identifier: 1D:BF:B9:44:C4:6A:95:D2:16:FB:F0:1D:DB:00:05:FB:72:21:33:14
Certificate issuer: /CN=25397c33-84d1-4a95-9d4c-421c7d95d0f8
Certificate serial: 010D0C9F432858493673BE00C45EB6C9D88E6D40
Authority key identifier: DF:7C:B0:66:7B:40:6A:C8:44:70:8F:60:B1:C5:86:D9:97:B1:B3:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/4304d6b0-4f61-30c9-a0ef-e3e83e94e659.roa
Signing time: Mon 17 Mar 2025 01:00:37 +0000
ROA not before: Mon 17 Mar 2025 01:00:37 +0000
ROA not after: Sun 15 Jun 2025 01:00:37 +0000
asID: 400792
IP address blocks: 2602:f75b::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:36:73:be:00:c4:5e:b6:c9:d8:8e:6d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25397c33-84d1-4a95-9d4c-421c7d95d0f8
Validity
Not Before: Mar 17 01:00:37 2025 GMT
Not After : Jun 15 01:00:37 2025 GMT
Subject: CN=cbb4113f-904a-442f-8a21-a357a4725673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:2f:c6:c2:5d:1e:bb:b5:25:e5:03:d2:e0:96:
48:2c:f1:a6:55:05:e4:c0:b7:24:51:aa:41:6a:32:
8d:cf:f1:d9:29:f5:29:14:0c:87:00:c5:3a:a0:a2:
3f:9e:3c:40:0b:05:ae:15:12:5c:b2:9b:d1:10:d7:
9c:f7:6f:a1:4a:63:bb:74:95:e8:49:d3:0d:30:e1:
50:51:72:7c:65:30:99:6c:43:8f:7b:ce:ac:1f:35:
a2:69:c7:d0:ce:bd:9c:7e:13:a0:b6:63:04:af:38:
0a:15:c5:d7:d6:d6:ed:b6:36:b2:d2:aa:b4:dc:bf:
38:13:1f:06:7c:38:c6:c7:b8:a9:5c:03:7a:f2:07:
cd:3b:7d:54:34:c5:db:21:b8:9a:c5:3c:d0:00:7a:
5a:f6:6a:e9:2d:5f:e3:bf:65:7e:32:f7:60:ea:86:
09:ca:e9:c3:c5:6e:e9:5e:8c:41:9d:f5:28:41:b6:
36:09:2e:ee:29:16:af:08:9e:7b:29:12:24:73:5a:
b6:29:43:49:76:22:e5:b7:07:c3:6f:e7:15:6a:35:
f0:f0:19:3e:f6:87:4c:01:5c:d5:39:e7:64:dd:f3:
ae:50:78:19:83:91:e4:7f:3b:42:8a:88:d3:14:55:
22:cf:c0:b5:4b:8b:58:1b:05:8d:d2:3a:14:27:48:
b8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:BF:B9:44:C4:6A:95:D2:16:FB:F0:1D:DB:00:05:FB:72:21:33:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/4304d6b0-4f61-30c9-a0ef-e3e83e94e659.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.crl
X509v3 Authority Key Identifier:
keyid:DF:7C:B0:66:7B:40:6A:C8:44:70:8F:60:B1:C5:86:D9:97:B1:B3:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f75b::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:51:17:95:9a:01:74:16:2d:14:e1:0c:52:44:e1:8f:14:21:
6c:e1:3a:08:77:b1:bd:22:bf:55:d2:80:e3:a2:bd:c3:20:ae:
6c:99:2e:86:e8:c3:b9:c9:01:e0:a5:cc:5d:f8:0a:1e:f7:44:
97:10:01:cd:e1:7b:78:22:0b:29:c1:d6:30:62:69:6e:b9:57:
b4:a2:f4:3e:b2:4d:1f:42:8b:36:ef:d8:98:22:2b:b0:d5:73:
6e:86:b2:43:fc:d8:cc:a0:7c:40:c5:6b:e0:a0:a8:0a:d8:a1:
c4:5a:63:75:33:51:9f:e5:d8:d2:80:64:75:76:73:51:f2:4c:
4c:5e:78:d2:04:f8:f8:d7:81:7e:22:d7:55:3f:25:1f:c6:3d:
1e:f5:bd:31:bc:b1:f8:7c:a8:1e:b3:98:37:2e:cb:fc:40:9d:
32:ac:16:4a:66:00:f0:b0:57:29:f8:df:23:df:74:32:6a:51:
b0:bd:e7:d6:60:eb:5f:fe:31:6c:ba:55:19:c3:af:7b:1c:4a:
17:7a:96:49:e6:52:a9:53:5f:45:ea:d6:30:3a:9e:95:76:fd:
9c:aa:84:18:e7:c9:8a:6e:98:8b:72:c6:2f:c7:92:22:65:6f:
c1:82:c6:28:8f:ea:00:a6:3f:0e:7d:94:81:fd:4e:af:36:99:
fd:f0:d2:47
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEk2c74AxF62ydiObUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjUzOTdjMzMtODRkMS00YTk1LTlkNGMtNDIxYzdkOTVk
MGY4MB4XDTI1MDMxNzAxMDAzN1oXDTI1MDYxNTAxMDAzN1owLzEtMCsGA1UEAxMk
Y2JiNDExM2YtOTA0YS00NDJmLThhMjEtYTM1N2E0NzI1NjczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiC/Gwl0eu7Ul5QPS4JZILPGmVQXkwLckUapB
ajKNz/HZKfUpFAyHAMU6oKI/njxACwWuFRJcspvRENec92+hSmO7dJXoSdMNMOFQ
UXJ8ZTCZbEOPe86sHzWiacfQzr2cfhOgtmMErzgKFcXX1tbttjay0qq03L84Ex8G
fDjGx7ipXAN68gfNO31UNMXbIbiaxTzQAHpa9mrpLV/jv2V+Mvdg6oYJyunDxW7p
XoxBnfUoQbY2CS7uKRavCJ57KRIkc1q2KUNJdiLltwfDb+cVajXw8Bk+9odMAVzV
Oedk3fOuUHgZg5HkfztCiojTFFUiz8C1S4tYGwWN0joUJ0i4KwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFB2/uUTEapXSFvvwHdsABftyITMUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yNTM5
N2MzMy04NGQxLTRhOTUtOWQ0Yy00MjFjN2Q5NWQwZjgvNDMwNGQ2YjAtNGY2MS0z
MGM5LWEwZWYtZTNlODNlOTRlNjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjUzOTdjMzMtODRkMS00YTk1LTlk
NGMtNDIxYzdkOTVkMGY4LzI1Mzk3YzMzLTg0ZDEtNGE5NS05ZDRjLTQyMWM3ZDk1
ZDBmOC5jcmwwHwYDVR0jBBgwFoAU33ywZntAashEcI9gscWG2Zexsx4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi8yNTM5N2MzMy04NGQxLTRhOTUtOWQ0Yy00MjFj
N2Q5NWQwZjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL3WwAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAEVEXlZoBdBYtFOEMUkThjxQhbOE6CHexvSK/VdKA46K9wyCubJku
hujDuckB4KXMXfgKHvdElxABzeF7eCILKcHWMGJpbrlXtKL0PrJNH0KLNu/YmCIr
sNVzboayQ/zYzKB8QMVr4KCoCtihxFpjdTNRn+XY0oBkdXZzUfJMTF540gT4+NeB
fiLXVT8lH8Y9HvW9Mbyx+HyoHrOYNy7L/ECdMqwWSmYA8LBXKfjfI990MmpRsL3n
1mDrX/4xbLpVGcOvexxKF3qWSeZSqVNfRerWMDqelXb9nKqEGOfJim6Yi3LGL8eS
ImVvwYLGKI/qAKY/Dn2Ugf1OrzaZ/fDSRw==
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:34:10 2025 by rpki-client