Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/389f5dcb-ae9a-32de-a240-8137aa93a357.roa
File: 389f5dcb-ae9a-32de-a240-8137aa93a357.roa (raw, json)
Hash identifier: 8Ug+eR4Vn30rSSTVPA/0CkPdm/ARrPctefxDuHvTFfE=
Subject key identifier: CA:74:0E:9C:D2:C2:0D:56:F4:59:18:77:F6:CB:B0:5A:33:43:CA:34
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848A400D836865BA1B107D3E840
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/389f5dcb-ae9a-32de-a240-8137aa93a357.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:100f:b1e8::/45 maxlen: 45
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:d8:36:86:5b:a1:b1:07:d3:e8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=5d6a034d-f33c-47db-8a98-114f4442965e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d7:6b:29:1a:9b:e1:8b:13:26:77:7f:5a:8c:
75:b5:8c:1d:bb:62:cf:69:dd:e1:ff:bb:85:84:a6:
72:db:30:b3:55:17:36:f1:33:21:f5:49:3d:60:6f:
95:be:c6:c5:42:94:07:2f:17:3b:a5:01:23:b9:b6:
b0:c0:bb:5b:37:99:ce:b5:e0:00:e0:92:d4:a3:a0:
ba:f3:da:19:cd:e7:6c:6e:b5:49:ee:62:46:be:b7:
ea:90:5a:83:ea:0e:18:a0:17:d9:27:3d:73:98:22:
7a:20:bb:fd:af:f0:38:94:a9:0a:fb:00:58:2e:dd:
89:12:30:a3:49:f7:3b:fb:48:a4:ce:94:1e:88:05:
b4:e8:dd:03:45:91:d8:bc:88:c2:a5:dc:15:0a:d8:
c9:e4:df:4c:b3:23:8e:5e:1f:a0:5e:30:44:ca:7a:
2f:02:c9:29:70:34:dc:25:c0:ba:00:40:dc:b4:34:
cd:6e:cd:6c:a6:51:cf:54:c1:f8:6d:e4:9c:29:aa:
ed:1a:a1:b1:4c:bc:58:ed:c6:10:53:80:5b:23:f4:
b5:38:a3:4a:70:56:dc:40:e7:44:cb:e0:fa:f6:fe:
64:af:26:ad:c6:a7:24:be:79:e7:b8:69:7e:6b:fa:
57:99:d3:c5:86:ec:9a:21:f6:66:f6:07:4c:bf:35:
26:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:74:0E:9C:D2:C2:0D:56:F4:59:18:77:F6:CB:B0:5A:33:43:CA:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/389f5dcb-ae9a-32de-a240-8137aa93a357.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:100f:b1e8::/45
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:36:8a:bb:c4:0a:de:80:b3:53:0c:c5:f0:8f:df:6f:94:9b:
48:f1:bf:75:8d:f9:8d:89:92:32:a8:4c:9f:11:ab:70:dd:ea:
66:5d:98:f1:d0:9e:0c:33:37:00:55:e0:12:39:37:ce:e1:ac:
09:a8:18:88:0e:42:ae:c2:53:25:73:93:2b:bf:9c:90:f3:63:
0e:1b:96:98:9d:62:1d:c9:e7:83:4c:1f:36:70:c0:d0:ff:69:
dd:9a:82:23:fe:46:73:94:8d:c6:e6:08:a6:56:f9:23:ee:05:
ab:4f:3e:1d:f8:d0:ab:16:b9:72:e2:35:64:81:24:82:56:70:
1c:bf:aa:de:9f:26:1b:a0:84:7e:93:79:a5:62:23:bc:8c:c3:
f1:4a:49:11:69:bc:5c:97:9f:47:bf:a1:3e:a3:e5:34:24:35:
98:3d:0d:82:06:c3:0d:53:0d:a5:72:61:bc:1b:12:c2:51:e8:
5c:5f:a3:bc:f8:5b:cc:7a:ea:76:99:4d:5b:74:d3:71:e7:3d:
a6:25:48:39:6e:98:93:64:1e:63:b0:df:41:3c:84:61:c0:4d:
42:d3:96:a4:c1:d0:2d:e9:85:81:3e:6f:ea:36:5a:3d:be:8c:
5f:33:4f:93:4e:8d:e3:95:38:ea:46:f7:6b:30:29:d0:ab:46:
a3:d5:2d:19
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEikANg2hluhsQfT6EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk
NWQ2YTAzNGQtZjMzYy00N2RiLThhOTgtMTE0ZjQ0NDI5NjVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtdrKRqb4YsTJnd/Wox1tYwdu2LPad3h/7uF
hKZy2zCzVRc28TMh9Uk9YG+VvsbFQpQHLxc7pQEjubawwLtbN5nOteAA4JLUo6C6
89oZzedsbrVJ7mJGvrfqkFqD6g4YoBfZJz1zmCJ6ILv9r/A4lKkK+wBYLt2JEjCj
Sfc7+0ikzpQeiAW06N0DRZHYvIjCpdwVCtjJ5N9MsyOOXh+gXjBEynovAskpcDTc
JcC6AEDctDTNbs1splHPVMH4beScKartGqGxTLxY7cYQU4BbI/S1OKNKcFbcQOdE
y+D69v5kryatxqckvnnnuGl+a/pXmdPFhuyaIfZm9gdMvzUmjQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMp0DpzSwg1W9FkYd/bLsFozQ8o0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzg5ZjVkY2ItYWU5YS0z
MmRlLWEyNDAtODEzN2FhOTNhMzU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgAQD7Ho
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAU2irvECt6As1MMxfCP32+Um0jxv3WN+Y2JkjKoTJ8Rq3Dd6mZd
mPHQngwzNwBV4BI5N87hrAmoGIgOQq7CUyVzkyu/nJDzYw4blpidYh3J54NMHzZw
wND/ad2agiP+RnOUjcbmCKZW+SPuBatPPh340KsWuXLiNWSBJIJWcBy/qt6fJhug
hH6TeaViI7yMw/FKSRFpvFyXn0e/oT6j5TQkNZg9DYIGww1TDaVyYbwbEsJR6Fxf
o7z4W8x66naZTVt003HnPaYlSDlumJNkHmOw30E8hGHATULTlqTB0C3phYE+b+o2
Wj2+jF8zT5NOjeOVOOpG92swKdCrRqPVLRk=
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:48:04 2025 by rpki-client