Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1a6c7cef-62e5-308b-b6a9-f82a49f7c483.roa
File: 1a6c7cef-62e5-308b-b6a9-f82a49f7c483.roa (raw, json)
Hash identifier: Ksi+K7lAfI9frmBLU8j3rMlDtHWhSx/X7SwcD1hPMTE=
Subject key identifier: 5E:D4:BA:E0:FC:CF:9D:C0:02:E5:63:79:86:9C:97:70:99:62:B4:D9
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584900D778EBBBA4807735EDE5C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1a6c7cef-62e5-308b-b6a9-f82a49f7c483.roa
Signing time: Tue 25 Feb 2025 20:07:58 +0000
ROA not before: Tue 25 Feb 2025 20:07:58 +0000
ROA not after: Mon 26 May 2025 19:07:58 +0000
asID: 6167
IP address blocks: 2600:1008:b320::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:00:d7:78:eb:bb:a4:80:77:35:ed:e5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 25 20:07:58 2025 GMT
Not After : May 26 19:07:58 2025 GMT
Subject: CN=454f39db-e888-4dbd-af7f-c383c8609bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c6:22:16:b5:f1:50:10:f8:bd:0d:09:b2:22:
30:ae:73:57:d1:93:52:97:e0:2e:53:6d:f4:98:13:
f2:97:43:67:12:ba:41:f8:c6:a9:70:e8:13:f4:33:
23:c2:b8:da:6b:0b:20:f9:c7:1a:68:1f:3e:40:af:
64:06:71:b9:f6:3e:5c:1a:2d:a5:cc:95:10:c2:7d:
1e:a9:62:07:ff:14:84:c6:85:8d:14:97:c2:31:de:
ff:bc:84:4a:1c:ac:4b:8f:a1:d9:4c:c5:13:e9:dd:
41:34:bc:5c:e0:57:8d:d7:dd:0d:22:40:b5:4f:01:
b4:5c:85:bd:72:e1:7e:ce:82:4a:dc:e4:c6:ef:66:
66:0d:16:8d:ec:a1:77:50:e9:09:81:df:74:c4:af:
61:86:03:4e:ac:ae:ef:f6:bc:33:fd:04:7e:85:23:
e5:92:4c:fb:ff:9d:97:26:25:a3:02:e8:f7:8a:80:
15:29:f2:0b:ab:5d:2f:b0:b9:f4:06:e3:d0:e9:53:
78:db:63:2c:82:b8:2c:6a:0e:f2:2e:b4:1d:16:99:
63:82:b2:f8:77:a1:50:02:e3:fe:15:e4:ad:19:62:
09:1a:0d:5b:99:ea:68:bb:5f:a2:f1:d9:59:b7:b2:
6e:0c:5b:f1:4a:3c:9e:90:b0:70:7e:86:23:62:27:
0a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D4:BA:E0:FC:CF:9D:C0:02:E5:63:79:86:9C:97:70:99:62:B4:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1a6c7cef-62e5-308b-b6a9-f82a49f7c483.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1008:b320::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:66:67:00:fe:30:59:bc:27:e7:a6:d1:11:5b:13:d9:51:a1:
29:d1:c5:ea:b3:8f:06:d6:86:f6:42:7d:1f:e6:1f:e7:ec:3d:
ee:1d:8a:ae:5a:b3:2b:49:d9:8c:72:45:f4:5c:bb:f5:de:2b:
32:07:e4:6b:d0:97:39:f1:f8:e4:a1:47:08:d5:69:f6:3e:24:
88:eb:ac:f3:30:bf:9f:54:a4:d4:8d:1e:40:c8:e8:53:6d:bd:
36:bb:83:ea:bf:9d:b0:62:ff:f5:f3:18:c7:86:e3:9e:2b:51:
9b:20:44:db:5a:8f:04:32:e4:be:77:da:69:19:cf:6b:35:f1:
7d:e9:92:3f:b9:5f:5c:1b:51:8e:2c:47:d9:ef:05:f8:1f:02:
95:1b:a0:7a:71:e1:3d:7d:69:8e:dd:ac:88:cb:bd:9e:9c:cb:
a4:0b:7f:1d:6d:34:e7:5d:76:dc:cb:02:96:4c:00:07:c0:cf:
6a:3f:5c:ab:31:a3:6d:be:d3:97:e5:5b:d8:e9:c8:85:b6:ad:
af:ce:dd:02:61:aa:3e:e1:ec:30:9e:b4:55:78:e8:9c:7c:52:
77:da:e0:70:e0:cb:1f:27:c1:9b:89:4e:04:ea:04:cc:b9:e7:
8f:0d:e6:a5:76:b0:a9:76:97:60:23:da:71:41:94:4c:88:c9:
f5:4c:d0:d8
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkA13jru6SAdzXt5cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDIyNTIwMDc1OFoXDTI1MDUyNjE5MDc1OFowLzEtMCsGA1UEAxMk
NDU0ZjM5ZGItZTg4OC00ZGJkLWFmN2YtYzM4M2M4NjA5YmYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5MYiFrXxUBD4vQ0JsiIwrnNX0ZNSl+AuU230
mBPyl0NnErpB+MapcOgT9DMjwrjaawsg+ccaaB8+QK9kBnG59j5cGi2lzJUQwn0e
qWIH/xSExoWNFJfCMd7/vIRKHKxLj6HZTMUT6d1BNLxc4FeN190NIkC1TwG0XIW9
cuF+zoJK3OTG72ZmDRaN7KF3UOkJgd90xK9hhgNOrK7v9rwz/QR+hSPlkkz7/52X
JiWjAuj3ioAVKfILq10vsLn0BuPQ6VN422Msgrgsag7yLrQdFpljgrL4d6FQAuP+
FeStGWIJGg1bmepou1+i8dlZt7JuDFvxSjyekLBwfoYjYicKJQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFF7UuuD8z53AAuVjeYacl3CZYrTZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMWE2YzdjZWYtNjJlNS0z
MDhiLWI2YTktZjgyYTQ5ZjdjNDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQCLMg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFxmZwD+MFm8J+em0RFbE9lRoSnRxeqzjwbWhvZCfR/mH+fsPe4d
iq5asytJ2YxyRfRcu/XeKzIH5GvQlznx+OShRwjVafY+JIjrrPMwv59UpNSNHkDI
6FNtvTa7g+q/nbBi//XzGMeG454rUZsgRNtajwQy5L532mkZz2s18X3pkj+5X1wb
UY4sR9nvBfgfApUboHpx4T19aY7drIjLvZ6cy6QLfx1tNOdddtzLApZMAAfAz2o/
XKsxo22+05flW9jpyIW2ra/O3QJhqj7h7DCetFV46Jx8Unfa4HDgyx8nwZuJTgTq
BMy5548N5qV2sKl2l2Aj2nFBlEyIyfVM0Ng=
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:02:37 2025 by rpki-client