Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/3b5f5588-b2d6-3b3c-afce-0ca173718c46.roa
File: 3b5f5588-b2d6-3b3c-afce-0ca173718c46.roa (raw, json)
Hash identifier: 5QDR1MEIHuqEweQehH5E5CDhYuAKOhbJDT46pa9RSI4=
Subject key identifier: 5C:5C:FB:05:8A:8F:A9:3B:CB:9E:F4:0B:8F:C1:09:2C:B9:D1:7D:98
Certificate issuer: /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
Certificate serial: 010D0C9F432858492CAE82868A2E82D2CA6CF300
Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/3b5f5588-b2d6-3b3c-afce-0ca173718c46.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 55195
IP address blocks: 2620:10a:8021::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:ae:82:86:8a:2e:82:d2:ca:6c:f3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=de84580d-6d76-4620-a3ea-e6aa9e9636cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c3:02:7a:85:e4:43:40:0b:ca:44:17:c7:84:
96:c0:32:0b:34:0f:40:32:cd:c2:a1:a3:67:98:5a:
26:02:98:70:ca:d0:94:79:61:70:cd:1e:b6:1e:f3:
b3:2c:27:70:fc:9b:f6:77:44:96:68:6b:0e:14:1f:
58:c7:5e:2b:3b:41:0a:61:83:8d:96:13:a0:4e:b4:
c9:bb:51:a4:5a:34:db:fd:17:d4:ab:98:0d:82:72:
03:51:02:ed:f2:17:fe:5c:3b:17:a2:b4:17:78:13:
82:f4:ce:fb:03:25:48:71:50:3e:50:40:2e:6c:af:
ca:53:53:e6:60:e2:00:e8:6c:af:20:30:3d:3b:b5:
d4:f3:7f:38:b7:61:79:bd:4c:eb:d5:5b:57:0e:ac:
81:4b:72:37:cb:0b:01:19:2d:24:ee:1d:05:0b:48:
b5:9e:ed:8f:eb:22:16:08:70:29:c9:5c:06:7c:a9:
0f:94:cb:6f:2c:1b:19:5e:b1:53:65:ad:74:05:e8:
aa:63:d8:ef:1b:fc:51:0b:49:00:5c:87:44:91:d6:
fd:0e:ba:c7:c8:52:87:f9:31:ed:2a:3f:ee:2b:bb:
1a:f1:1e:46:3f:a7:a6:09:eb:cc:ba:39:22:5a:c3:
d9:c9:2e:e7:89:9f:5b:1e:9c:10:86:40:58:65:0b:
be:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:5C:FB:05:8A:8F:A9:3B:CB:9E:F4:0B:8F:C1:09:2C:B9:D1:7D:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/3b5f5588-b2d6-3b3c-afce-0ca173718c46.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl
X509v3 Authority Key Identifier:
keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:10a:8021::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:89:fc:84:81:ad:7e:3d:3f:ec:c4:4b:03:7d:fb:60:05:d0:
21:9f:29:c7:26:55:39:b2:0c:81:b0:23:7d:ce:1f:9e:d7:2f:
3e:4d:70:01:07:fd:9a:3c:24:97:7c:94:49:45:26:a5:47:44:
57:dd:de:e5:e3:40:5e:a4:30:a8:2c:63:e2:08:93:be:6b:54:
49:f3:59:16:dc:3a:15:31:34:e3:78:94:23:d7:1e:dd:6d:66:
21:a4:10:52:cc:c6:3c:3d:4e:cf:0b:de:e7:61:16:f0:6d:4a:
2b:6f:3b:12:5c:a5:f9:1f:d6:ef:23:ea:4d:63:f3:15:0e:e1:
e6:e4:ec:38:57:d1:b5:13:b0:89:58:92:af:78:9a:07:d3:0a:
13:52:b8:bb:73:cb:db:f8:af:8f:16:3e:52:17:91:0f:7d:7d:
85:0d:5e:64:48:37:f9:34:81:11:15:23:62:2e:d8:58:3e:40:
65:5e:d1:42:46:84:a8:d7:d1:74:48:c6:da:b8:a2:9c:cc:a2:
1d:e4:02:3a:f8:d3:04:79:b8:18:09:5d:b9:b9:7e:7b:0d:e6:
21:4c:a9:09:0d:bb:f3:be:76:23:4d:35:0d:68:7d:ee:a3:c8:
91:cb:69:71:f7:24:f2:53:4e:80:b2:1e:60:e0:b3:94:70:fb:
8a:59:aa:77
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEksroKGii6C0sps8wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGJjNjA0ZGUtYWMyYi00OTIxLWI2MDEtYTJjOTc2YWIx
OGU4MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
ZGU4NDU4MGQtNmQ3Ni00NjIwLWEzZWEtZTZhYTllOTYzNmNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsMCeoXkQ0ALykQXx4SWwDILNA9AMs3CoaNn
mFomAphwytCUeWFwzR62HvOzLCdw/Jv2d0SWaGsOFB9Yx14rO0EKYYONlhOgTrTJ
u1GkWjTb/RfUq5gNgnIDUQLt8hf+XDsXorQXeBOC9M77AyVIcVA+UEAubK/KU1Pm
YOIA6GyvIDA9O7XU8384t2F5vUzr1VtXDqyBS3I3ywsBGS0k7h0FC0i1nu2P6yIW
CHApyVwGfKkPlMtvLBsZXrFTZa10BeiqY9jvG/xRC0kAXIdEkdb9DrrHyFKH+THt
Kj/uK7sa8R5GP6emCevMujkiWsPZyS7niZ9bHpwQhkBYZQu+qQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFxc+wWKj6k7y570C4/BCSy50X2YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YmM2
MDRkZS1hYzJiLTQ5MjEtYjYwMS1hMmM5NzZhYjE4ZTgvM2I1ZjU1ODgtYjJkNi0z
YjNjLWFmY2UtMGNhMTczNzE4YzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGJjNjA0ZGUtYWMyYi00OTIxLWI2
MDEtYTJjOTc2YWIxOGU4LzRiYzYwNGRlLWFjMmItNDkyMS1iNjAxLWEyYzk3NmFi
MThlOC5jcmwwHwYDVR0jBBgwFoAUXezCHp0HnbEJciCnXQk9+uP8rEAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS80YmM2MDRkZS1hYzJiLTQ5MjEtYjYwMS1hMmM5
NzZhYjE4ZTguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABCoAh
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAuJ/ISBrX49P+zESwN9+2AF0CGfKccmVTmyDIGwI33OH57XLz5N
cAEH/Zo8JJd8lElFJqVHRFfd3uXjQF6kMKgsY+IIk75rVEnzWRbcOhUxNON4lCPX
Ht1tZiGkEFLMxjw9Ts8L3udhFvBtSitvOxJcpfkf1u8j6k1j8xUO4ebk7DhX0bUT
sIlYkq94mgfTChNSuLtzy9v4r48WPlIXkQ99fYUNXmRIN/k0gREVI2Iu2Fg+QGVe
0UJGhKjX0XRIxtq4opzMoh3kAjr40wR5uBgJXbm5fnsN5iFMqQkNu/O+diNNNQ1o
fe6jyJHLaXH3JPJTToCyHmDgs5Rw+4pZqnc=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:13:40 2025 by rpki-client