Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b445766e-c668-3af5-bf07-06b62b4a7ddd.roa
File: b445766e-c668-3af5-bf07-06b62b4a7ddd.roa (raw, json)
Hash identifier: 3NiL6IaQn0Z6S+ztI7sX6PgHAFOeJBBnv4pBFb7JGr0=
Subject key identifier: B6:D5:69:DF:B4:AF:05:9B:6E:5B:B3:C1:90:E2:C0:4B:7F:4F:55:34
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858488AE0AB6B04A4986DA3ACBEC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b445766e-c668-3af5-bf07-06b62b4a7ddd.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 20940
IP address blocks: 2600:1402:16::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:ab:6b:04:a4:98:6d:a3:ac:be:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=4913dbcc-e4f9-40e0-90ab-e231c9105733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:09:10:d0:41:6c:92:6c:00:fb:27:f8:04:35:
2c:92:4a:ab:4d:9c:b6:2b:20:5a:be:d0:7b:5a:4d:
c0:bc:d8:e2:8b:e1:da:8b:cf:74:b1:4c:2a:33:42:
80:e7:08:d3:80:35:fc:b7:1a:ca:ba:4a:fe:42:03:
bf:0e:74:e6:00:61:d5:b0:90:01:d4:b2:eb:57:15:
eb:b8:23:14:4b:c0:23:89:5d:f5:2c:a7:f8:21:e5:
fb:86:91:20:61:68:e2:db:de:74:88:63:9b:c4:3f:
bf:4f:bc:fa:8f:14:f0:e0:be:51:81:db:84:f0:e5:
34:0a:b9:0e:3d:b0:b1:e5:5f:c4:6e:b4:01:cc:e5:
6e:8c:e3:6a:13:ba:ec:0b:15:fe:f5:9c:2f:df:da:
e5:91:4d:d1:d3:e1:8b:f0:a4:49:f0:d3:d1:65:29:
ef:28:3a:53:f7:3c:ab:1f:83:61:09:a4:1a:7d:35:
7d:81:48:fd:e1:be:09:3d:92:4f:16:5e:38:28:7c:
ec:f6:c7:cd:34:fc:2e:a0:1e:98:ee:ff:3e:8e:99:
3e:ad:74:5a:02:00:7b:0c:4a:40:2a:fe:85:32:10:
9e:e1:57:4d:d2:e3:8c:c6:54:8c:f3:9c:55:04:1f:
96:cd:a5:8d:f0:5f:9a:24:e4:81:de:89:98:ad:97:
2e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D5:69:DF:B4:AF:05:9B:6E:5B:B3:C1:90:E2:C0:4B:7F:4F:55:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b445766e-c668-3af5-bf07-06b62b4a7ddd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1402:16::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:59:ad:fb:63:69:b1:ee:52:e4:56:56:f1:98:52:d5:ae:f9:
55:71:24:cd:93:53:dc:7f:a9:dc:36:2e:e4:a1:65:bb:95:02:
07:a7:75:3e:03:ce:3c:8d:00:1c:48:20:ce:08:3f:96:45:5f:
92:02:81:a7:f1:2f:da:42:7b:09:eb:97:77:b0:f7:41:1d:32:
f0:80:64:91:84:f5:e4:96:02:65:ea:8f:d7:e0:81:6a:74:17:
42:bd:95:f8:e4:01:9e:42:a9:a5:3d:b6:52:5c:0c:9a:b4:0b:
23:e4:20:f0:48:5d:f4:28:f2:14:2d:5b:8d:9f:03:6d:3e:d5:
02:7e:f9:8b:95:72:4d:ad:7d:63:fe:e8:28:ee:01:c8:42:24:
eb:80:a0:bf:4b:39:c4:08:6f:a5:97:9b:d5:5d:db:e0:25:a7:
90:83:a7:16:ba:23:45:a5:8e:f6:c3:bd:21:ed:61:e7:ec:e0:
37:a8:da:b0:42:6a:c1:8b:8a:f6:0f:3b:01:d5:2a:f2:61:83:
b4:ea:ce:0d:1a:17:6d:f8:6a:d3:c8:b7:63:5f:f5:97:c0:ba:
6b:92:b5:9e:e7:a2:bd:8b:6e:ea:b2:5e:5b:eb:5a:9a:fc:f9:
9c:75:35:90:66:b3:b0:c8:58:ba:ca:70:c1:b3:84:1d:76:6e:
ab:ec:1f:dd
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiK4KtrBKSYbaOsvsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDExNDE0MDA1MVoXDTI1MDQxNDEzMDA1MVowLzEtMCsGA1UEAxMk
NDkxM2RiY2MtZTRmOS00MGUwLTkwYWItZTIzMWM5MTA1NzMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngkQ0EFskmwA+yf4BDUskkqrTZy2KyBavtB7
Wk3AvNjii+Hai890sUwqM0KA5wjTgDX8txrKukr+QgO/DnTmAGHVsJAB1LLrVxXr
uCMUS8AjiV31LKf4IeX7hpEgYWji2950iGObxD+/T7z6jxTw4L5RgduE8OU0CrkO
PbCx5V/EbrQBzOVujONqE7rsCxX+9Zwv39rlkU3R0+GL8KRJ8NPRZSnvKDpT9zyr
H4NhCaQafTV9gUj94b4JPZJPFl44KHzs9sfNNPwuoB6Y7v8+jpk+rXRaAgB7DEpA
Kv6FMhCe4VdN0uOMxlSM85xVBB+WzaWN8F+aJOSB3omYrZcu5wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLbVad+0rwWbbluzwZDiwEt/T1U0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjQ0NTc2NmUtYzY2OC0z
YWY1LWJmMDctMDZiNjJiNGE3ZGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUAgAW
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAH9ZrftjabHuUuRWVvGYUtWu+VVxJM2TU9x/qdw2LuShZbuVAgen
dT4DzjyNABxIIM4IP5ZFX5ICgafxL9pCewnrl3ew90EdMvCAZJGE9eSWAmXqj9fg
gWp0F0K9lfjkAZ5CqaU9tlJcDJq0CyPkIPBIXfQo8hQtW42fA20+1QJ++YuVck2t
fWP+6CjuAchCJOuAoL9LOcQIb6WXm9Vd2+Alp5CDpxa6I0WljvbDvSHtYefs4Deo
2rBCasGLivYPOwHVKvJhg7Tqzg0aF234atPIt2Nf9ZfAumuStZ7nor2LbuqyXlvr
Wpr8+Zx1NZBms7DIWLrKcMGzhB12bqvsH90=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:53:29 2025 by rpki-client