Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4f6ae84-8f31-3a9f-9e57-6c4a50fc8343.roa
File: d4f6ae84-8f31-3a9f-9e57-6c4a50fc8343.roa (raw, json)
Hash identifier: o7A3/grejULiOZW/PGvOpuB688MFCkfpzFqQ0GDEQsw=
Subject key identifier: 79:33:28:46:D9:82:9D:C9:F0:4E:8B:ED:85:F7:DB:FF:A3:82:B2:A7
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB7B17E9FACAA5B2B2B440
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4f6ae84-8f31-3a9f-9e57-6c4a50fc8343.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:1000:a121::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:7b:17:e9:fa:ca:a5:b2:b2:b4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=90a99308-9b11-4ad4-b50c-e624afaf8f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:3b:7b:56:c9:09:60:4c:e4:be:4c:29:17:50:
bb:91:c0:3b:3e:f5:9d:14:42:3f:9b:20:26:b0:99:
44:b3:17:da:93:b9:af:99:51:52:3c:54:b6:e9:46:
b8:74:b3:05:e1:c3:c0:aa:46:0d:70:37:f6:4b:d1:
de:70:24:ba:a3:45:09:8d:db:1e:2a:ee:aa:9a:c5:
7e:65:80:a8:b0:34:e9:1b:7d:08:2e:4e:16:88:50:
5b:24:e4:8b:ed:60:2d:46:d2:e5:d8:ce:ed:fa:75:
50:2d:59:f4:49:43:1b:a2:ba:d3:3c:dc:85:08:94:
87:a7:5e:e7:82:ca:15:70:fe:55:8c:38:19:10:67:
c6:7a:bf:4f:4f:86:e4:6a:7d:f1:a8:48:d1:9b:1e:
a0:2e:c4:d3:5a:c5:0e:d5:7f:14:ed:27:f0:e5:8f:
2b:00:22:28:ae:4a:44:c7:61:93:61:9f:8b:4c:b7:
93:62:ee:78:9b:fc:87:b5:38:b1:17:cd:cd:7a:30:
e6:07:3b:ee:f6:52:0f:a9:a5:1a:17:ce:69:74:ad:
6c:2d:5a:8f:3e:b6:21:3d:a5:c3:c1:f2:e0:fe:53:
35:29:c8:27:32:33:d2:65:ad:88:11:4f:9f:aa:12:
bd:75:51:55:a9:52:f4:b4:5c:f4:16:41:7d:81:7f:
1a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:33:28:46:D9:82:9D:C9:F0:4E:8B:ED:85:F7:DB:FF:A3:82:B2:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4f6ae84-8f31-3a9f-9e57-6c4a50fc8343.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1000:a121::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b8:d2:62:6e:89:87:25:6d:87:6b:e2:46:97:b5:10:a3:1c:38:
dd:4f:f1:a2:2e:72:74:15:d2:8e:f6:18:e0:f3:68:db:fd:6a:
91:93:f3:9d:4b:02:11:17:95:16:c1:d6:2a:f9:a0:7c:7a:a3:
78:8d:61:5c:fe:c7:e2:e4:9b:e9:03:9c:de:3d:1b:d0:a5:3a:
fc:d2:0f:f5:ff:16:d4:b8:a6:4f:90:7e:b0:3d:ac:91:6f:8c:
f3:db:18:34:2f:7f:28:0e:ec:d7:44:17:ea:7a:bd:a3:c5:f5:
f8:ab:3d:30:b4:fc:bb:18:2f:be:4a:9b:0a:de:cd:3d:fc:49:
6b:a0:09:0f:3c:45:ec:e2:d0:b9:d8:4e:7c:fd:96:cb:13:bd:
63:ea:fa:5d:ee:44:2c:22:bd:73:a2:8e:30:21:69:1f:f5:5d:
7e:c7:a2:71:cb:85:8d:6d:1c:9b:eb:aa:15:b3:6f:96:12:c4:
96:55:0e:e2:5c:6f:32:50:b5:aa:94:f0:0b:67:86:68:c7:f5:
53:50:67:94:08:1e:fc:af:3e:ef:f4:4a:ac:15:7e:48:62:37:
92:cb:2e:f2:32:ae:2a:ea:40:c4:5f:c0:86:76:5b:8f:4f:66:
ab:ea:c1:f2:98:74:5d:0a:f7:87:31:95:e5:9a:cb:d8:41:07:
a9:ee:df:f6
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEh863sX6frKpbKytEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDEwOTE0MDA1MloXDTI1MDQwOTEzMDA1MlowLzEtMCsGA1UEAxMk
OTBhOTkzMDgtOWIxMS00YWQ0LWI1MGMtZTYyNGFmYWY4ZjA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzt7VskJYEzkvkwpF1C7kcA7PvWdFEI/myAm
sJlEsxfak7mvmVFSPFS26Ua4dLMF4cPAqkYNcDf2S9HecCS6o0UJjdseKu6qmsV+
ZYCosDTpG30ILk4WiFBbJOSL7WAtRtLl2M7t+nVQLVn0SUMborrTPNyFCJSHp17n
gsoVcP5VjDgZEGfGer9PT4bkan3xqEjRmx6gLsTTWsUO1X8U7Sfw5Y8rACIorkpE
x2GTYZ+LTLeTYu54m/yHtTixF83NejDmBzvu9lIPqaUaF85pdK1sLVqPPrYhPaXD
wfLg/lM1KcgnMjPSZa2IEU+fqhK9dVFVqVL0tFz0FkF9gX8a6wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHkzKEbZgp3J8E6L7YX32/+jgrKnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDRmNmFlODQtOGYzMS0z
YTlmLTllNTctNmM0YTUwZmM4MzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQAKEh
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALjSYm6JhyVth2viRpe1EKMcON1P8aIucnQV0o72GODzaNv9apGT
851LAhEXlRbB1ir5oHx6o3iNYVz+x+Lkm+kDnN49G9ClOvzSD/X/FtS4pk+QfrA9
rJFvjPPbGDQvfygO7NdEF+p6vaPF9firPTC0/LsYL75KmwrezT38SWugCQ88Rezi
0LnYTnz9lssTvWPq+l3uRCwivXOijjAhaR/1XX7HonHLhY1tHJvrqhWzb5YSxJZV
DuJcbzJQtaqU8AtnhmjH9VNQZ5QIHvyvPu/0SqwVfkhiN5LLLvIyrirqQMRfwIZ2
W49PZqvqwfKYdF0K94cxleWay9hBB6nu3/Y=
-----END CERTIFICATE-----
Generated at Thu Apr 10 08:44:36 2025 by rpki-client