Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5bda86d1-1b06-3a54-ba7d-f88a53eb0f5e.roa
File: 5bda86d1-1b06-3a54-ba7d-f88a53eb0f5e.roa (raw, json)
Hash identifier: T8cO/pSPPkLwtrSJ8oNy7Z5fV9v6HpGN8YQ8F/C2hp0=
Subject key identifier: 06:87:AE:5A:7F:D0:7F:33:28:80:7E:6F:95:0A:84:B0:E8:48:EE:24
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584949FEA2CB072D7792DFE95900
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5bda86d1-1b06-3a54-ba7d-f88a53eb0f5e.roa
Signing time: Mon 24 Mar 2025 01:00:38 +0000
ROA not before: Mon 24 Mar 2025 01:00:38 +0000
ROA not after: Sun 22 Jun 2025 01:00:38 +0000
asID: 6167
IP address blocks: 2600:1014:b1e0::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:49:fe:a2:cb:07:2d:77:92:df:e9:59:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 24 01:00:38 2025 GMT
Not After : Jun 22 01:00:38 2025 GMT
Subject: CN=fedd4b2f-a5b1-42ac-b739-7b9342d4971c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:8c:00:04:aa:b4:31:f0:73:dc:d3:18:ec:e9:
93:0d:7c:94:e2:ab:2c:6f:8c:ac:4c:04:9e:65:48:
be:75:21:0e:e1:f9:d9:f0:96:dd:bd:21:b2:5d:37:
7e:48:11:75:9c:49:33:22:9c:5a:31:da:d1:8f:aa:
82:0d:bb:42:61:f8:d6:b8:ad:73:19:c2:3b:50:79:
d3:31:5d:73:49:27:1b:f6:45:76:01:e2:45:e8:ce:
24:c6:92:b6:63:f3:42:cf:84:42:eb:7a:96:eb:66:
d1:4b:ce:97:12:39:6e:db:a5:0a:d2:39:15:4d:7a:
f6:8d:00:fc:d6:50:9c:3b:8e:a5:0b:7f:2d:55:37:
42:d2:4a:34:4c:f6:4f:35:c9:d4:71:8a:4d:72:3e:
93:fe:7c:d1:d6:27:9c:f6:ee:0e:89:9e:61:ed:96:
bc:ba:8e:d1:70:5c:8e:4b:07:2b:af:2c:55:15:a9:
55:46:60:bb:46:61:fe:b8:68:24:10:64:57:cd:b0:
21:9b:c0:03:cf:d7:6c:b6:b6:1b:f8:84:02:00:1d:
73:f5:dd:61:2c:0b:f4:f9:c2:b0:fb:18:e3:7b:1a:
5a:06:d6:26:d5:cc:0c:9c:69:41:54:73:c4:32:63:
8a:fd:5e:a5:67:64:cc:be:12:93:0f:9d:b9:ad:7d:
93:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:87:AE:5A:7F:D0:7F:33:28:80:7E:6F:95:0A:84:B0:E8:48:EE:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5bda86d1-1b06-3a54-ba7d-f88a53eb0f5e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1014:b1e0::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:9c:6f:5f:3b:c4:a8:e1:dc:94:db:f8:f3:66:48:bc:f6:ae:
e5:1e:a6:6f:16:a8:68:13:a1:e6:1b:ff:2a:79:f4:b7:e1:51:
0a:eb:67:d3:9f:d5:6b:c7:e4:d1:2a:5a:fc:a7:60:5d:98:6e:
d0:53:a5:d0:4a:b0:04:d8:33:aa:a4:43:42:b2:11:72:0b:6d:
08:5a:26:87:fc:46:be:a2:36:bd:1e:40:58:09:fa:c2:2d:06:
a0:20:5d:6f:1b:eb:a3:d5:61:e9:ab:62:43:75:20:87:8a:73:
bd:b0:32:8b:d7:6d:08:c3:3e:ad:fb:6c:18:a1:3c:50:22:7f:
7b:a2:44:6c:a5:cf:b5:15:1c:95:5e:dd:32:61:2a:2d:1f:d6:
d3:8c:1d:4f:25:03:b2:24:d7:f4:a2:42:6a:52:fa:d7:56:4e:
6e:b6:4c:c4:06:ba:5e:c9:85:21:7a:c3:da:1e:48:bf:85:6a:
7e:f5:4c:62:93:8f:7b:36:69:b6:af:1e:17:04:93:62:2e:44:
3c:76:7b:63:ba:59:77:95:64:3d:c1:fe:f7:fb:5a:6c:46:18:
45:92:77:44:ec:3f:e2:90:05:48:20:9f:18:40:0d:35:a0:34:
3d:b9:ac:72:fb:47:d1:5c:70:da:e2:98:ae:82:7c:58:8b:40:
d1:92:48:28
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElJ/qLLBy13kt/pWQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk
ZmVkZDRiMmYtYTViMS00MmFjLWI3MzktN2I5MzQyZDQ5NzFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIwABKq0MfBz3NMY7OmTDXyU4qssb4ysTASe
ZUi+dSEO4fnZ8JbdvSGyXTd+SBF1nEkzIpxaMdrRj6qCDbtCYfjWuK1zGcI7UHnT
MV1zSScb9kV2AeJF6M4kxpK2Y/NCz4RC63qW62bRS86XEjlu26UK0jkVTXr2jQD8
1lCcO46lC38tVTdC0ko0TPZPNcnUcYpNcj6T/nzR1iec9u4OiZ5h7Za8uo7RcFyO
SwcrryxVFalVRmC7RmH+uGgkEGRXzbAhm8ADz9dstrYb+IQCAB1z9d1hLAv0+cKw
+xjjexpaBtYm1cwMnGlBVHPEMmOK/V6lZ2TMvhKTD525rX2TWQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAaHrlp/0H8zKIB+b5UKhLDoSO4kMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNWJkYTg2ZDEtMWIwNi0z
YTU0LWJhN2QtZjg4YTUzZWIwZjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQFLHg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABqcb187xKjh3JTb+PNmSLz2ruUepm8WqGgToeYb/yp59LfhUQrr
Z9Of1WvH5NEqWvynYF2YbtBTpdBKsATYM6qkQ0KyEXILbQhaJof8Rr6iNr0eQFgJ
+sItBqAgXW8b66PVYemrYkN1IIeKc72wMovXbQjDPq37bBihPFAif3uiRGylz7UV
HJVe3TJhKi0f1tOMHU8lA7Ik1/SiQmpS+tdWTm62TMQGul7JhSF6w9oeSL+Fan71
TGKTj3s2abavHhcEk2IuRDx2e2O6WXeVZD3B/vf7WmxGGEWSd0TsP+KQBUggnxhA
DTWgND25rHL7R9FccNrimK6CfFiLQNGSSCg=
-----END CERTIFICATE-----
Generated at Sat Apr 5 20:53:01 2025 by rpki-client