Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/55944af2-121b-326e-bc05-cb65ee3b3be2.roa
File: 55944af2-121b-326e-bc05-cb65ee3b3be2.roa (raw, json)
Hash identifier: R5K/6p7Yy8YVT2BLwin7H4meGfFOp4RPnNoT7RrF3Do=
Subject key identifier: 4C:F7:BF:D5:3E:DD:10:54:78:24:D9:30:4A:25:32:16:AF:7D:65:75
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB5963D6596315A75A4C40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/55944af2-121b-326e-bc05-cb65ee3b3be2.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:1008:a000::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:59:63:d6:59:63:15:a7:5a:4c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=395549a3-eece-4059-b955-59e82bc26097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:48:1c:6c:79:ad:86:c9:61:56:7d:71:ec:8e:
98:1a:ab:9c:e1:30:6e:bd:6e:1c:08:a9:fe:b4:5d:
54:23:41:31:d3:f9:f2:61:ae:6d:6a:ff:2f:d4:ba:
ee:f8:d6:d6:5b:46:65:90:30:74:b0:a9:5e:7e:5c:
4c:a6:74:10:3a:36:79:3d:03:eb:18:5e:7b:66:5d:
ea:d9:bf:34:42:fe:92:ed:a7:44:ff:de:e1:84:bb:
01:3f:e8:31:3c:eb:2c:9d:13:6c:10:2f:df:8d:e1:
b5:81:44:74:eb:ca:db:fc:d7:82:69:42:8b:a4:f4:
4f:7d:58:de:bf:cb:9b:57:21:70:ae:7f:83:69:34:
96:37:2b:bc:e8:3e:1f:38:d1:38:24:6b:ca:7a:cd:
8c:f9:c7:9a:b2:70:67:f9:7a:74:8a:e3:08:8f:31:
4b:69:9a:fc:2b:4f:63:d9:11:e5:f4:f7:4c:31:3e:
ac:07:0c:ad:8a:3e:a6:54:f0:54:10:94:04:a6:17:
3a:d6:ff:21:e8:67:fb:3c:43:96:62:46:8f:c0:37:
61:65:5c:4c:15:5f:2a:8f:fa:9f:5c:84:e0:63:e6:
c3:45:39:c5:da:fa:96:a0:52:64:4a:52:f3:88:e6:
bb:68:99:25:cd:9a:51:81:7e:35:37:cf:70:a9:f0:
61:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F7:BF:D5:3E:DD:10:54:78:24:D9:30:4A:25:32:16:AF:7D:65:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/55944af2-121b-326e-bc05-cb65ee3b3be2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1008:a000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:9d:73:b1:e6:f6:fe:64:26:6a:7a:ea:8d:64:d7:fe:93:a6:
8a:e5:6a:c4:e2:2a:9e:31:56:b2:79:c5:ec:aa:05:c0:f9:38:
5a:47:e4:59:9c:03:17:50:fc:27:2f:70:14:eb:c8:ab:f8:53:
5b:11:55:40:c3:e8:f6:d0:ab:bd:6a:cd:35:b8:d2:01:67:4c:
67:ea:b5:11:ef:4c:b9:03:e1:91:b5:d1:da:48:b4:cd:43:45:
db:21:0e:bd:5b:3e:fa:03:77:47:cd:17:9f:7d:84:59:bf:a3:
5c:b5:ce:fe:40:67:99:2e:f7:01:d3:e2:b9:70:69:0c:44:9b:
7a:4e:d3:29:90:dc:12:7c:5c:a3:c8:15:a6:f6:0c:3c:6f:99:
f4:47:c2:45:03:65:3c:46:c7:1b:4c:eb:bb:37:49:8e:86:87:
da:ec:13:97:64:3c:48:43:92:f6:6b:96:84:b3:85:0c:2e:27:
84:60:44:f3:e1:01:1b:34:f1:7e:ed:af:b2:92:ab:f8:45:31:
33:0f:6a:33:db:ae:75:a5:7b:3b:87:28:b8:41:af:fa:e7:d1:
e5:d7:d9:90:49:90:47:01:bd:a2:d7:36:3b:c9:32:fd:88:22:
18:70:f1:d5:54:cd:c9:c9:d8:ca:99:aa:86:ba:bf:6b:da:db:
25:80:bb:fe
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEh861lj1lljFadaTEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDEwOTE0MDA1MloXDTI1MDQwOTEzMDA1MlowLzEtMCsGA1UEAxMk
Mzk1NTQ5YTMtZWVjZS00MDU5LWI5NTUtNTllODJiYzI2MDk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUgcbHmthslhVn1x7I6YGquc4TBuvW4cCKn+
tF1UI0Ex0/nyYa5tav8v1Lru+NbWW0ZlkDB0sKleflxMpnQQOjZ5PQPrGF57Zl3q
2b80Qv6S7adE/97hhLsBP+gxPOssnRNsEC/fjeG1gUR068rb/NeCaUKLpPRPfVje
v8ubVyFwrn+DaTSWNyu86D4fONE4JGvKes2M+ceasnBn+Xp0iuMIjzFLaZr8K09j
2RHl9PdMMT6sBwytij6mVPBUEJQEphc61v8h6Gf7PEOWYkaPwDdhZVxMFV8qj/qf
XITgY+bDRTnF2vqWoFJkSlLziOa7aJklzZpRgX41N89wqfBhLwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEz3v9U+3RBUeCTZMEolMhavfWV1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNTU5NDRhZjItMTIxYi0z
MjZlLWJjMDUtY2I2NWVlM2IzYmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQCKAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEOdc7Hm9v5kJmp66o1k1/6TporlasTiKp4xVrJ5xeyqBcD5OFpH
5FmcAxdQ/CcvcBTryKv4U1sRVUDD6PbQq71qzTW40gFnTGfqtRHvTLkD4ZG10dpI
tM1DRdshDr1bPvoDd0fNF599hFm/o1y1zv5AZ5ku9wHT4rlwaQxEm3pO0ymQ3BJ8
XKPIFab2DDxvmfRHwkUDZTxGxxtM67s3SY6Gh9rsE5dkPEhDkvZrloSzhQwuJ4Rg
RPPhARs08X7tr7KSq/hFMTMPajPbrnWlezuHKLhBr/rn0eXX2ZBJkEcBvaLXNjvJ
Mv2IIhhw8dVUzcnJ2MqZqoa6v2va2yWAu/4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:22:09 2025 by rpki-client