Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2ba85a3c-4a26-3e16-8f9f-29e2cdbcfee4.roa
File: 2ba85a3c-4a26-3e16-8f9f-29e2cdbcfee4.roa (raw, json)
Hash identifier: bFv+kMpD6JaL3ewxRyhUZdPQjiy9fgC4/4kiMQC5g0s=
Subject key identifier: EB:13:74:C7:8C:96:29:17:67:F2:1C:E1:D1:7A:6B:45:B8:C3:3F:4D
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285849350EACA3FB2CA969EF572900
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2ba85a3c-4a26-3e16-8f9f-29e2cdbcfee4.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 32787
IP address blocks: 2606:6c00:20a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:ac:a3:fb:2c:a9:69:ef:57:29:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=98f75631-fb0c-417d-978e-a809be0ce4bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:83:f2:b4:c1:20:8d:df:3b:ec:57:01:93:eb:
18:b2:41:3c:26:4f:38:92:91:5e:7a:7c:fb:74:15:
c9:62:57:2c:0f:22:f6:ae:21:a5:b4:39:10:b5:b8:
b6:8d:c4:98:c4:55:c8:04:33:df:95:f0:00:69:d9:
93:5a:4f:a0:4c:36:c0:a8:60:0f:84:ee:c7:7d:8d:
81:ba:dd:41:2e:0b:b8:68:dd:19:ed:5f:d4:3d:7f:
9e:6e:e0:ca:ea:20:82:4d:bf:92:b0:b1:6e:93:ac:
0d:8a:29:6b:34:f5:a5:14:65:ab:c4:d5:73:34:5a:
2e:67:14:af:47:cd:e6:9b:b3:b9:c3:e6:19:a1:e3:
39:76:b1:e2:86:24:e2:b8:b2:97:a8:fc:83:b1:1c:
8e:e2:46:3e:ab:80:29:df:39:98:73:3b:6b:91:1c:
39:30:ab:f7:05:cb:35:2b:8a:20:a1:83:9d:8b:04:
a0:ba:60:51:42:75:43:4a:74:ac:ee:6c:5b:48:23:
5d:86:f5:15:70:a3:b8:3f:6c:a9:2e:a5:a4:fd:f6:
2e:69:f2:90:17:80:22:b4:bd:2a:4a:a7:02:f8:99:
c7:6b:d7:00:89:68:c2:ef:f8:0f:34:36:bc:f6:de:
c9:a8:e9:f3:a6:f8:7a:50:ed:84:45:2b:da:dd:26:
94:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:13:74:C7:8C:96:29:17:67:F2:1C:E1:D1:7A:6B:45:B8:C3:3F:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2ba85a3c-4a26-3e16-8f9f-29e2cdbcfee4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:6c00:20a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:90:ed:ae:03:7f:e5:65:bd:5d:3d:96:ef:08:9a:1a:12:6a:
22:d0:c5:da:92:88:05:29:e9:27:1f:ae:41:e8:d9:2a:62:ef:
3c:8f:36:b6:63:cd:38:f8:5a:ec:a8:4d:0b:ff:b6:01:74:f3:
70:ee:62:ca:89:02:00:d6:19:7c:ac:d7:89:56:52:a1:05:dd:
b9:19:b6:e4:67:11:15:55:30:74:1a:f3:d4:56:e2:d8:41:e6:
bd:d9:0f:4d:93:19:37:98:b9:7b:96:83:6a:1f:65:af:d9:42:
2a:59:3a:46:f9:a2:20:45:59:33:4b:ea:31:64:d3:95:44:fb:
69:4c:fa:e9:65:82:ae:0d:59:09:6a:d7:d7:69:cf:62:85:c8:
fb:63:46:99:1b:01:42:e7:bb:8a:f7:d8:eb:11:0b:19:d0:58:
2b:78:ad:81:12:66:8a:bb:59:38:08:2b:9c:05:f6:87:4f:33:
1c:d2:4a:ce:84:35:4f:e1:3f:4e:51:92:b6:49:b7:27:99:fa:
59:00:b6:73:dd:70:95:d5:7e:73:43:a5:4b:94:ad:b0:28:dc:
aa:7a:c2:f0:44:81:24:68:50:e8:76:81:52:fa:ae:04:0c:e2:
79:f7:9e:1b:c9:30:eb:58:1b:62:25:bd:b7:ae:71:50:a3:74:
74:58:d1:19
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEk1Dqyj+yypae9XKQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk
OThmNzU2MzEtZmIwYy00MTdkLTk3OGUtYTgwOWJlMGNlNGJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYPytMEgjd877FcBk+sYskE8Jk84kpFeenz7
dBXJYlcsDyL2riGltDkQtbi2jcSYxFXIBDPflfAAadmTWk+gTDbAqGAPhO7HfY2B
ut1BLgu4aN0Z7V/UPX+ebuDK6iCCTb+SsLFuk6wNiilrNPWlFGWrxNVzNFouZxSv
R83mm7O5w+YZoeM5drHihiTiuLKXqPyDsRyO4kY+q4Ap3zmYcztrkRw5MKv3Bcs1
K4ogoYOdiwSgumBRQnVDSnSs7mxbSCNdhvUVcKO4P2ypLqWk/fYuafKQF4AitL0q
SqcC+JnHa9cAiWjC7/gPNDa89t7JqOnzpvh6UO2ERSva3SaULQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOsTdMeMlikXZ/Ic4dF6a0W4wz9NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmJhODVhM2MtNGEyNi0z
ZTE2LThmOWYtMjllMmNkYmNmZWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZsAAIK
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIGQ7a4Df+VlvV09lu8ImhoSaiLQxdqSiAUp6ScfrkHo2Spi7zyP
NrZjzTj4WuyoTQv/tgF083DuYsqJAgDWGXys14lWUqEF3bkZtuRnERVVMHQa89RW
4thB5r3ZD02TGTeYuXuWg2ofZa/ZQipZOkb5oiBFWTNL6jFk05VE+2lM+ullgq4N
WQlq19dpz2KFyPtjRpkbAULnu4r32OsRCxnQWCt4rYESZoq7WTgIK5wF9odPMxzS
Ss6ENU/hP05RkrZJtyeZ+lkAtnPdcJXVfnNDpUuUrbAo3Kp6wvBEgSRoUOh2gVL6
rgQM4nn3nhvJMOtYG2IlvbeucVCjdHRY0Rk=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:09:58 2025 by rpki-client