Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2357474e-3774-375c-80ba-4139f0e8b8a4.roa
File: 2357474e-3774-375c-80ba-4139f0e8b8a4.roa (raw, json)
Hash identifier: JqgJTAqHmNEp74+wBo/cA5J7mGALwxvkPdPW0XwAz7U=
Subject key identifier: 0C:20:6F:EB:49:90:46:BD:AE:B3:57:91:66:52:05:B4:06:2B:F6:DB
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848A400E9FB577804CC9F15FA00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2357474e-3774-375c-80ba-4139f0e8b8a4.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:100c:b290::/45 maxlen: 45
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:e9:fb:57:78:04:cc:9f:15:fa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=7801f78c-103e-45e6-961d-d6041a4b69a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:70:51:5e:0b:45:bb:7f:c1:f4:1e:47:5b:81:
31:2f:80:99:ae:26:6b:3d:ae:4c:c9:da:50:fe:15:
d0:2d:83:9f:d7:e6:3b:c7:39:2b:06:9d:b6:35:0f:
47:d5:e0:90:87:87:66:31:a1:0a:a4:a5:0e:55:5e:
5b:e8:2b:12:20:b4:69:a2:4d:a5:b9:6e:e1:e2:5a:
f0:08:d9:e9:2c:07:9c:c6:d5:5e:b6:51:74:0b:59:
f1:7c:4e:1f:b0:00:44:61:41:13:07:c9:73:77:73:
78:56:53:01:5d:91:8a:d6:11:3d:14:72:ba:7e:0b:
73:ca:01:03:ff:79:1e:32:bd:01:59:b3:3b:72:95:
ec:a3:72:e7:b5:d1:06:fe:67:4f:24:fe:10:cb:b2:
13:c6:13:b5:38:ae:fc:81:2c:59:0c:34:9f:c6:88:
0d:7a:f6:91:16:0c:77:b5:00:84:0b:70:03:84:b6:
60:bf:90:2b:4e:a0:4c:05:14:eb:5c:96:cb:31:a5:
ce:72:1f:ce:1b:9c:6b:8c:4d:78:16:70:21:10:57:
b6:a4:c6:21:c4:61:c3:fa:f5:fa:d5:e7:80:cd:c2:
be:3b:2d:ac:3e:07:82:5e:c7:c5:3f:9a:64:5b:fd:
66:65:dc:ac:75:18:27:7e:4c:26:e3:3e:a1:34:8f:
4e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:20:6F:EB:49:90:46:BD:AE:B3:57:91:66:52:05:B4:06:2B:F6:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2357474e-3774-375c-80ba-4139f0e8b8a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:100c:b290::/45
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:fe:0b:82:9a:c0:79:a4:d3:0d:7c:1b:20:73:5e:f0:2e:36:
72:ee:73:6d:d0:fc:62:12:70:f8:e2:24:29:7e:eb:f8:23:59:
b0:6f:f6:30:06:b1:f5:eb:5f:42:c7:2d:13:f1:fb:61:7d:08:
27:0d:ad:bd:7a:58:ca:9e:08:29:c3:0a:0d:b9:db:3a:1b:85:
7b:68:01:b4:9d:c2:b3:55:fb:dd:a3:90:57:71:1a:ad:ef:90:
6b:3a:c0:c8:7e:59:2e:c3:3e:00:ab:aa:55:a2:8c:e1:67:6e:
64:fb:42:52:8c:bd:4e:35:83:37:56:ac:e1:20:54:66:92:e1:
0a:06:e8:b5:ea:57:2c:09:85:b6:c2:cb:38:5b:89:a1:5f:32:
93:41:cf:c7:55:1c:aa:fa:0d:56:71:ab:f9:e9:b1:fa:e0:64:
cd:e8:4e:9f:aa:13:9c:ab:69:66:79:15:65:ba:e3:dd:ba:3e:
dd:1f:4d:c5:45:cb:00:28:55:a8:76:73:fc:7d:94:c6:c0:07:
64:36:65:0f:40:93:35:d7:be:c8:16:ca:4b:d2:54:18:25:32:
00:7d:e8:82:59:bd:da:c5:82:ba:85:4e:4b:bd:d7:23:6e:9a:
ae:70:e1:ff:af:0c:c3:26:6e:9f:68:ef:36:34:0e:3b:dc:fe:
91:05:29:a1
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEikAOn7V3gEzJ8V+gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk
NzgwMWY3OGMtMTAzZS00NWU2LTk2MWQtZDYwNDFhNGI2OWE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXBRXgtFu3/B9B5HW4ExL4CZriZrPa5MydpQ
/hXQLYOf1+Y7xzkrBp22NQ9H1eCQh4dmMaEKpKUOVV5b6CsSILRpok2luW7h4lrw
CNnpLAecxtVetlF0C1nxfE4fsABEYUETB8lzd3N4VlMBXZGK1hE9FHK6fgtzygED
/3keMr0BWbM7cpXso3LntdEG/mdPJP4Qy7ITxhO1OK78gSxZDDSfxogNevaRFgx3
tQCEC3ADhLZgv5ArTqBMBRTrXJbLMaXOch/OG5xrjE14FnAhEFe2pMYhxGHD+vX6
1eeAzcK+Oy2sPgeCXsfFP5pkW/1mZdysdRgnfkwm4z6hNI9OhwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAwgb+tJkEa9rrNXkWZSBbQGK/bbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjM1NzQ3NGUtMzc3NC0z
NzVjLTgwYmEtNDEzOWYwZThiOGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgAQDLKQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKb+C4KawHmk0w18GyBzXvAuNnLuc23Q/GIScPjiJCl+6/gjWbBv
9jAGsfXrX0LHLRPx+2F9CCcNrb16WMqeCCnDCg252zobhXtoAbSdwrNV+92jkFdx
Gq3vkGs6wMh+WS7DPgCrqlWijOFnbmT7QlKMvU41gzdWrOEgVGaS4QoG6LXqVywJ
hbbCyzhbiaFfMpNBz8dVHKr6DVZxq/npsfrgZM3oTp+qE5yraWZ5FWW64926Pt0f
TcVFywAoVah2c/x9lMbAB2Q2ZQ9AkzXXvsgWykvSVBglMgB96IJZvdrFgrqFTku9
1yNumq5w4f+vDMMmbp9o7zY0Djvc/pEFKaE=
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:45:39 2025 by rpki-client