Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3/3d87e764-6ebd-3b46-879a-c50c7cfdc1c2.roa
File: 3d87e764-6ebd-3b46-879a-c50c7cfdc1c2.roa (raw, json)
Hash identifier: kJ0dkA/lJ2xhUSU2f4j6zkUKFwS4LegDdaCd3BCmT1E=
Subject key identifier: 24:4C:A2:4A:0E:C7:DB:3C:10:F6:43:A7:6A:64:B1:11:EF:72:1C:0F
Certificate issuer: /CN=b2d9b16a-e15f-46c2-a578-0677307787a3
Certificate serial: 010D0C9F432858485F9ADE8AF896394077055A00
Authority key identifier: 20:4A:40:E3:31:B9:38:43:3F:08:46:33:45:10:16:A6:84:B1:83:68
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3/3d87e764-6ebd-3b46-879a-c50c7cfdc1c2.roa
Signing time: Mon 30 Dec 2024 02:00:39 +0000
ROA not before: Mon 30 Dec 2024 02:00:39 +0000
ROA not after: Sun 30 Mar 2025 01:00:39 +0000
asID: 399686
IP address blocks: 2606:62c0:1000::/36 maxlen: 36
2606:62c0:2000::/36 maxlen: 36
2606:62c0:3000::/36 maxlen: 36
2606:62c0:7000::/36 maxlen: 36
2606:62c0:8000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5f:9a:de:8a:f8:96:39:40:77:05:5a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2d9b16a-e15f-46c2-a578-0677307787a3
Validity
Not Before: Dec 30 02:00:39 2024 GMT
Not After : Mar 30 01:00:39 2025 GMT
Subject: CN=49ac3d88-4576-44ce-9093-25c8de64dfbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5e:11:30:34:25:3e:db:96:4d:5a:e5:4e:70:
73:65:6e:11:99:27:64:a0:c4:68:0a:a9:fe:be:70:
ce:79:47:69:aa:cc:a1:80:58:5b:dc:8b:aa:c9:b5:
04:39:ae:02:2f:5e:9c:a8:18:b5:c6:65:d5:31:8b:
88:a2:64:55:4d:b8:1c:87:03:b4:13:2a:62:ed:d1:
fa:42:20:ac:63:0c:4d:93:bc:31:55:23:ee:79:ab:
96:d5:70:2c:cc:78:87:d9:a7:5b:ad:9f:c6:54:4d:
e4:ef:e2:1a:d5:66:31:96:2e:9b:33:c2:b0:b2:5d:
da:27:96:a6:89:ec:b4:0c:48:6c:13:5d:5b:0b:ea:
65:83:80:6a:0f:18:2a:03:43:9c:ed:1e:a5:19:d4:
18:d1:cf:53:04:fe:f4:f7:f8:29:fc:d9:74:ba:0f:
0d:cb:76:97:00:93:d3:fc:f9:cf:bc:1e:ed:8e:0f:
64:aa:fa:5b:f5:a1:fa:72:a3:71:06:dc:82:cc:a7:
ea:44:b2:ea:e5:66:4c:ab:c8:9e:12:72:27:7d:37:
61:04:43:16:b2:45:21:eb:f8:0d:42:71:98:d3:ac:
a3:10:c8:86:f6:a6:cc:3f:fa:db:c9:22:b7:ce:be:
9f:df:23:d6:df:8e:34:37:dc:55:eb:da:1b:af:a1:
93:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:4C:A2:4A:0E:C7:DB:3C:10:F6:43:A7:6A:64:B1:11:EF:72:1C:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3/3d87e764-6ebd-3b46-879a-c50c7cfdc1c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3/b2d9b16a-e15f-46c2-a578-0677307787a3.crl
X509v3 Authority Key Identifier:
keyid:20:4A:40:E3:31:B9:38:43:3F:08:46:33:45:10:16:A6:84:B1:83:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:62c0:1000::-2606:62c0:3fff:ffff:ffff:ffff:ffff:ffff
2606:62c0:7000::-2606:62c0:8fff:ffff:ffff:ffff:ffff:ffff
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:e8:c6:19:74:c1:cc:bd:8a:f4:a2:17:61:84:50:00:00:49:
bd:8d:32:1e:71:e3:7f:2b:2d:65:11:5b:b0:93:66:5e:48:a7:
c9:07:92:db:ea:0a:a8:a6:bd:bf:2e:49:bd:d9:ad:80:b3:6f:
bf:fd:24:49:d4:7c:87:dd:c7:ce:52:09:72:79:e1:c0:e0:8d:
bd:7b:a4:f5:49:a0:3e:bd:41:d6:4b:9d:b9:54:38:14:6d:13:
b9:d7:e1:83:d3:4f:a2:57:4c:f7:42:3f:9e:ef:4e:5a:dd:28:
2a:51:37:84:78:44:73:a6:f6:3a:8e:29:91:26:2a:23:14:36:
a7:22:f9:fa:b6:fb:e9:40:4a:ea:2d:d0:7e:a0:f2:21:71:57:
3c:07:f3:f5:77:3b:d4:e9:84:47:07:5a:1b:63:2d:18:95:6d:
10:84:6a:c4:f5:a8:21:1a:53:bb:62:f2:af:a6:3a:e1:e1:84:
da:59:ee:7f:06:6b:6f:2f:d9:8c:03:a8:3d:c0:e2:88:97:c7:
eb:5f:51:8f:78:e0:c6:82:84:37:d3:5c:ad:16:4a:b6:1b:fa:
fe:7d:d8:b7:75:d7:e4:31:91:80:47:b8:a4:71:63:fa:2d:53:
89:6f:61:1b:2b:2a:54:b6:40:7c:7e:8b:0a:05:96:ef:15:41:
b3:c0:53:69
-----BEGIN CERTIFICATE-----
MIIGYTCCBUmgAwIBAgIUAQ0Mn0MoWEhfmt6K+JY5QHcFWgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJkOWIxNmEtZTE1Zi00NmMyLWE1NzgtMDY3NzMwNzc4
N2EzMB4XDTI0MTIzMDAyMDAzOVoXDTI1MDMzMDAxMDAzOVowLzEtMCsGA1UEAxMk
NDlhYzNkODgtNDU3Ni00NGNlLTkwOTMtMjVjOGRlNjRkZmJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAll4RMDQlPtuWTVrlTnBzZW4RmSdkoMRoCqn+
vnDOeUdpqsyhgFhb3IuqybUEOa4CL16cqBi1xmXVMYuIomRVTbgchwO0Eypi7dH6
QiCsYwxNk7wxVSPueauW1XAszHiH2adbrZ/GVE3k7+Ia1WYxli6bM8Kwsl3aJ5am
iey0DEhsE11bC+plg4BqDxgqA0Oc7R6lGdQY0c9TBP709/gp/Nl0ug8Ny3aXAJPT
/PnPvB7tjg9kqvpb9aH6cqNxBtyCzKfqRLLq5WZMq8ieEnInfTdhBEMWskUh6/gN
QnGY06yjEMiG9qbMP/rbySK3zr6f3yPW3440N9xV69obr6GTrQIDAQABo4IDczCC
A28wHQYDVR0OBBYEFCRMokoOx9s8EPZDp2pksRHvchwPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iMmQ5
YjE2YS1lMTVmLTQ2YzItYTU3OC0wNjc3MzA3Nzg3YTMvM2Q4N2U3NjQtNmViZC0z
YjQ2LTg3OWEtYzUwYzdjZmRjMWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjJkOWIxNmEtZTE1Zi00NmMyLWE1
NzgtMDY3NzMwNzc4N2EzL2IyZDliMTZhLWUxNWYtNDZjMi1hNTc4LTA2NzczMDc3
ODdhMy5jcmwwHwYDVR0jBBgwFoAUIEpA4zG5OEM/CEYzRRAWpoSxg2gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9iMmQ5YjE2YS1lMTVmLTQ2YzItYTU3OC0wNjc3
MzA3Nzg3YTMuY2VyMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAAjAkMBADBgQmBmLA
EAMGBiYGYsAAMBADBgQmBmLAcAMGBCYGYsCAMFQGA1UdIAEB/wRKMEgwRgYIKwYB
BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy
Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAjoxhl0wcy9ivSi
F2GEUAAASb2NMh5x438rLWURW7CTZl5Ip8kHktvqCqimvb8uSb3ZrYCzb7/9JEnU
fIfdx85SCXJ54cDgjb17pPVJoD69QdZLnblUOBRtE7nX4YPTT6JXTPdCP57vTlrd
KCpRN4R4RHOm9jqOKZEmKiMUNqci+fq2++lASuot0H6g8iFxVzwH8/V3O9TphEcH
WhtjLRiVbRCEasT1qCEaU7ti8q+mOuHhhNpZ7n8Ga28v2YwDqD3A4oiXx+tfUY94
4MaChDfTXK0WSrYb+v592Ld11+QxkYBHuKRxY/otU4lvYRsrKlS2QHx+iwoFlu8V
QbPAU2k=
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:19:48 2025 by rpki-client