Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0fa595a1-498d-348f-9f30-e36de6a3a3ec.roa
File: 0fa595a1-498d-348f-9f30-e36de6a3a3ec.roa (raw, json)
Hash identifier: eg2TCS/sEqngPdAMKXPl+cpcpPX/YjDxnZC1LoJ4BmQ=
Subject key identifier: 58:91:30:7A:F1:9F:4A:3D:E9:C6:47:1A:10:F2:4E:7C:F5:91:D9:BF
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584949FEA9F1AFB7D33944EA4770
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0fa595a1-498d-348f-9f30-e36de6a3a3ec.roa
Signing time: Mon 24 Mar 2025 01:00:38 +0000
ROA not before: Mon 24 Mar 2025 01:00:38 +0000
ROA not after: Sun 22 Jun 2025 01:00:38 +0000
asID: 6167
IP address blocks: 2600:1015:9100::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:49:fe:a9:f1:af:b7:d3:39:44:ea:47:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 24 01:00:38 2025 GMT
Not After : Jun 22 01:00:38 2025 GMT
Subject: CN=98756ef0-77d0-4ad1-9644-8eea018dcf66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b0:97:a1:76:08:70:16:e2:83:c8:59:a8:b2:
b5:83:37:3e:e2:b0:35:9d:16:ff:c6:46:9b:27:92:
dd:5e:8d:27:fc:aa:21:a7:2d:b7:e9:86:21:5d:49:
82:09:d6:60:8b:33:5a:47:41:d5:f0:ae:be:c0:3a:
de:fa:69:9d:54:9b:f8:5a:0c:d4:c4:48:19:8c:45:
15:1e:f6:cd:9c:28:0d:ed:be:49:23:e2:c8:6c:f3:
66:ec:73:a0:f8:96:59:86:50:5c:b1:e4:a7:86:57:
1a:1f:b3:d4:b8:a5:bb:39:6e:c0:7c:cf:14:56:55:
5b:a0:7c:17:13:39:81:88:19:6b:62:53:86:62:1e:
9f:dd:a2:de:ce:38:01:7c:f4:09:7f:fc:46:52:42:
e4:bd:17:fe:78:99:8e:f5:4c:d3:02:7e:ce:4d:e0:
77:16:b0:b4:26:20:05:e8:6b:f4:e6:9d:6d:b9:61:
a1:21:f9:97:78:2c:ba:23:c2:a5:fe:53:aa:f9:3a:
2d:25:f8:db:0d:06:80:fa:f2:20:b5:9f:c9:46:2a:
70:ee:8a:68:4d:4a:94:cd:e0:a7:44:65:71:e8:c2:
50:cb:9f:3d:8b:f0:61:f2:a7:5d:2e:51:cf:20:b9:
e3:c5:2e:72:88:fc:c1:ff:59:5b:fe:58:ec:39:c6:
06:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:91:30:7A:F1:9F:4A:3D:E9:C6:47:1A:10:F2:4E:7C:F5:91:D9:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0fa595a1-498d-348f-9f30-e36de6a3a3ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1015:9100::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:c5:01:59:7f:3d:eb:a4:d8:4d:d9:48:a9:72:49:0d:d3:32:
25:b1:0f:cb:3d:2a:6d:ee:85:cf:5a:12:09:5c:91:26:8f:73:
8d:25:0a:0a:9a:df:37:6a:a6:a7:ce:d5:33:71:55:58:c8:1c:
06:bb:bb:be:34:db:a3:2f:09:1c:ae:ca:0d:d0:ef:dd:8e:b7:
7f:b8:98:ac:a7:75:08:3f:b7:fc:da:ed:f4:43:99:ad:b5:45:
c2:72:6b:de:c5:d8:fd:4a:8a:3c:2b:b8:cd:d1:de:f9:fb:dc:
d8:e3:25:f0:29:17:37:49:98:04:a6:de:f8:cc:22:4c:09:17:
66:dc:7e:29:ab:3c:8a:10:dd:c5:e6:f4:5e:43:42:b3:c3:4c:
0d:b3:93:be:f1:df:ae:18:dd:a1:c0:ce:5e:43:26:68:6e:e8:
25:7f:2f:26:11:e7:ea:b3:6e:69:cd:c1:e3:1d:29:82:31:3f:
61:6e:91:7d:ce:45:06:f2:57:6e:aa:e7:14:81:75:35:fe:3d:
0d:3c:bb:57:2c:81:48:c5:00:b0:2c:24:c7:a0:ef:e3:dd:18:
fc:1a:ba:54:fe:aa:db:a7:f2:6c:55:8b:d7:c7:0a:b9:e0:81:
85:21:62:51:43:69:1a:27:fb:ab:84:4b:3f:08:ab:e3:4d:22:
7a:b5:96:7f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElJ/qnxr7fTOUTqR3AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk
OTg3NTZlZjAtNzdkMC00YWQxLTk2NDQtOGVlYTAxOGRjZjY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrCXoXYIcBbig8hZqLK1gzc+4rA1nRb/xkab
J5LdXo0n/Kohpy236YYhXUmCCdZgizNaR0HV8K6+wDre+mmdVJv4WgzUxEgZjEUV
HvbNnCgN7b5JI+LIbPNm7HOg+JZZhlBcseSnhlcaH7PUuKW7OW7AfM8UVlVboHwX
EzmBiBlrYlOGYh6f3aLezjgBfPQJf/xGUkLkvRf+eJmO9UzTAn7OTeB3FrC0JiAF
6Gv05p1tuWGhIfmXeCy6I8Kl/lOq+TotJfjbDQaA+vIgtZ/JRipw7opoTUqUzeCn
RGVx6MJQy589i/Bh8qddLlHPILnjxS5yiPzB/1lb/ljsOcYG3wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFiRMHrxn0o96cZHGhDyTnz1kdm/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMGZhNTk1YTEtNDk4ZC0z
NDhmLTlmMzAtZTM2ZGU2YTNhM2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQFZEA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEnFAVl/Peuk2E3ZSKlySQ3TMiWxD8s9Km3uhc9aEglckSaPc40l
Cgqa3zdqpqfO1TNxVVjIHAa7u74026MvCRyuyg3Q792Ot3+4mKyndQg/t/za7fRD
ma21RcJya97F2P1KijwruM3R3vn73NjjJfApFzdJmASm3vjMIkwJF2bcfimrPIoQ
3cXm9F5DQrPDTA2zk77x364Y3aHAzl5DJmhu6CV/LyYR5+qzbmnNweMdKYIxP2Fu
kX3ORQbyV26q5xSBdTX+PQ08u1csgUjFALAsJMeg7+PdGPwaulT+qtun8mxVi9fH
CrnggYUhYlFDaRon+6uESz8Iq+NNInq1ln8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:22:20 2025 by rpki-client