Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2bcca323-da91-31f1-921e-8f7d01c2b786.roa
File: 2bcca323-da91-31f1-921e-8f7d01c2b786.roa (raw, json)
Hash identifier: 11u7tw9Sv4QzRGrVq3+Kuv9+JvFxcVBZdmGLnaq1y+A=
Subject key identifier: E3:AF:7C:CF:DA:12:75:5C:78:E1:0B:7F:C0:0B:7A:10:83:C1:50:E9
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858488DAB54643E8AE8ADEAEF7FC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2bcca323-da91-31f1-921e-8f7d01c2b786.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 20940
IP address blocks: 2600:1406:3c00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:54:64:3e:8a:e8:ad:ea:ef:7f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=fd233a47-0e22-42c7-a17a-6b7962def8e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:69:86:2f:d2:c4:3f:10:bb:65:e4:f3:c9:67:
1c:85:71:68:81:cb:89:45:c1:a6:72:f4:60:17:12:
ac:3f:e1:d2:8e:87:46:7d:da:20:3c:aa:8e:a3:7c:
e3:77:dc:d9:78:25:6d:13:55:cb:e1:80:ff:90:a9:
49:c1:49:7f:bf:1c:10:74:60:5d:b9:cb:0b:6e:fe:
e8:d2:db:e1:50:19:fd:a5:96:96:70:c8:2c:10:3d:
f4:32:9e:bc:1d:cc:49:e9:6a:4c:c5:e8:41:c0:66:
ec:82:cd:ce:5f:af:e0:2c:f4:10:48:0a:3d:5d:80:
a5:1e:cf:11:c2:3f:1d:6b:08:23:68:03:4c:0b:ec:
a2:c3:65:68:fe:5c:b0:03:4e:5d:e2:79:46:61:7a:
bb:81:1e:30:c9:01:bf:a2:26:13:3e:a7:f6:43:3c:
10:fb:97:e3:11:5c:36:19:2e:fe:a9:96:f8:7e:2a:
79:ba:82:3f:46:88:f5:74:f7:ef:26:bc:1f:2d:e6:
0d:a3:e3:3a:41:e2:ac:b0:ce:2a:ab:e8:6b:f3:7a:
44:dc:2f:23:75:b3:4c:54:f7:89:a0:b4:3b:3e:60:
04:ca:71:97:fa:8d:04:93:2d:73:dd:7d:f0:b3:4a:
c7:02:47:61:0f:b2:10:b4:cb:64:e1:de:21:70:dd:
a4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:AF:7C:CF:DA:12:75:5C:78:E1:0B:7F:C0:0B:7A:10:83:C1:50:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2bcca323-da91-31f1-921e-8f7d01c2b786.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1406:3c00::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:7f:88:8e:67:b0:06:7f:8f:d2:df:d6:a4:4a:50:d7:93:1f:
44:01:6e:0a:df:7c:83:78:ae:94:fc:d0:91:2c:ca:50:46:06:
72:2f:64:ac:ba:21:ab:9e:a2:54:72:8e:8e:b0:32:85:8a:34:
cf:5b:41:83:45:15:3c:7d:40:37:28:30:6c:6b:09:c8:e1:5b:
43:b9:39:c4:5c:d9:7f:11:d7:80:a7:9b:ab:c9:c4:29:be:28:
d4:d2:6d:ff:9c:90:1c:e0:fb:d5:78:8f:ce:df:23:6a:23:4c:
45:d2:09:bc:76:db:1f:02:4e:3b:e5:ef:de:de:db:45:2a:2a:
77:b8:b2:12:37:33:60:94:ae:0c:e4:97:01:91:db:0d:1e:90:
be:33:a2:9d:6a:c9:74:7e:98:48:f2:6e:71:64:0e:3c:51:a9:
77:c8:b0:99:df:47:f9:8a:bc:90:99:6f:72:51:3d:ad:cb:a6:
68:2c:6b:8e:d9:18:ca:25:71:e4:15:a6:c7:bb:a5:05:f5:f4:
08:95:ff:c9:b3:98:4e:70:71:f9:f9:dd:88:49:18:b9:6b:20:
72:01:c5:d0:8d:90:bf:8b:db:9d:d5:1e:c0:e8:4c:3e:a1:ad:
91:6a:45:17:b7:c4:92:67:98:f3:f7:37:ed:18:77:e0:08:8f:
81:d9:cc:2a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiNq1RkPororervf8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDExNTE0MDA1MVoXDTI1MDQxNTEzMDA1MVowLzEtMCsGA1UEAxMk
ZmQyMzNhNDctMGUyMi00MmM3LWExN2EtNmI3OTYyZGVmOGU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2mGL9LEPxC7ZeTzyWcchXFogcuJRcGmcvRg
FxKsP+HSjodGfdogPKqOo3zjd9zZeCVtE1XL4YD/kKlJwUl/vxwQdGBducsLbv7o
0tvhUBn9pZaWcMgsED30Mp68HcxJ6WpMxehBwGbsgs3OX6/gLPQQSAo9XYClHs8R
wj8dawgjaANMC+yiw2Vo/lywA05d4nlGYXq7gR4wyQG/oiYTPqf2QzwQ+5fjEVw2
GS7+qZb4fip5uoI/Roj1dPfvJrwfLeYNo+M6QeKssM4qq+hr83pE3C8jdbNMVPeJ
oLQ7PmAEynGX+o0Eky1z3X3ws0rHAkdhD7IQtMtk4d4hcN2kuwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOOvfM/aEnVceOELf8ALehCDwVDpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmJjY2EzMjMtZGE5MS0z
MWYxLTkyMWUtOGY3ZDAxYzJiNzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUBjwA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIB/iI5nsAZ/j9Lf1qRKUNeTH0QBbgrffIN4rpT80JEsylBGBnIv
ZKy6IaueolRyjo6wMoWKNM9bQYNFFTx9QDcoMGxrCcjhW0O5OcRc2X8R14Cnm6vJ
xCm+KNTSbf+ckBzg+9V4j87fI2ojTEXSCbx22x8CTjvl797e20UqKne4shI3M2CU
rgzklwGR2w0ekL4zop1qyXR+mEjybnFkDjxRqXfIsJnfR/mKvJCZb3JRPa3Lpmgs
a47ZGMolceQVpse7pQX19AiV/8mzmE5wcfn53YhJGLlrIHIBxdCNkL+L253VHsDo
TD6hrZFqRRe3xJJnmPP3N+0Yd+AIj4HZzCo=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:15:59 2025 by rpki-client