Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab/e66ddf74-7469-3ada-9b35-1cbbb155b25e.roa
File: e66ddf74-7469-3ada-9b35-1cbbb155b25e.roa (raw, json)
Hash identifier: Qntn/oVPrd3vYrBNYtQ85x+7NygD8q9m/RqYj5d7oO8=
Subject key identifier: 99:1E:6B:01:DE:96:D9:57:A7:5A:CE:33:19:CB:DF:2B:85:91:37:29
Certificate issuer: /CN=0dc32e52-7919-4ad4-a486-4bed23a5c3ab
Certificate serial: 010D0C9F432858485F9ADFB3796C3789CB79A780
Authority key identifier: E5:FD:14:F3:B0:8F:71:D2:1F:E9:CA:63:A4:F4:70:53:F8:F0:02:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab/e66ddf74-7469-3ada-9b35-1cbbb155b25e.roa
Signing time: Mon 30 Dec 2024 02:00:39 +0000
ROA not before: Mon 30 Dec 2024 02:00:39 +0000
ROA not after: Sun 30 Mar 2025 01:00:39 +0000
asID: 394434
IP address blocks: 2606:86c0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5f:9a:df:b3:79:6c:37:89:cb:79:a7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dc32e52-7919-4ad4-a486-4bed23a5c3ab
Validity
Not Before: Dec 30 02:00:39 2024 GMT
Not After : Mar 30 01:00:39 2025 GMT
Subject: CN=fd667add-2b41-4452-b9ac-2427513ca3ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9f:d8:23:31:28:c2:2d:dd:c9:fd:d7:48:b8:
e2:c4:1b:78:57:c8:2f:dd:73:4c:79:5a:0c:dc:e3:
1f:b0:da:67:a0:c6:af:14:66:dd:b4:80:8c:df:bd:
f8:02:ab:ba:95:d5:8d:dc:1d:e0:a0:fe:64:89:7e:
75:3e:38:7e:fe:ad:da:cb:88:9b:bd:9f:2e:f7:b3:
19:2a:0f:b7:dd:b5:25:8c:60:e6:51:2d:27:60:74:
d1:5e:74:90:22:79:a3:89:cd:d5:7f:b2:c2:98:6e:
4e:43:52:3f:21:d0:58:04:7d:da:52:3e:e5:ab:62:
5b:a9:9f:c0:70:35:8e:a8:92:9c:33:dc:10:eb:2a:
c3:f6:27:c3:63:90:be:13:5d:35:8b:b8:e9:8c:09:
03:15:4a:7b:3c:3e:27:b4:27:92:37:5e:18:24:70:
31:a8:ff:5a:a2:91:ae:7e:70:a0:04:0a:d2:ca:06:
13:18:fa:4b:bf:29:4a:08:01:2c:36:3b:0e:f3:04:
5c:c3:aa:a7:04:66:6c:27:aa:fa:ca:a2:1f:5a:23:
5f:34:20:f1:35:76:4f:1e:70:4d:55:8b:cd:f9:5d:
ac:53:61:22:1f:1b:ca:07:7d:03:c0:68:80:83:f5:
a7:26:3d:7d:90:5a:e9:e7:e9:14:bc:7b:ef:71:30:
3c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:1E:6B:01:DE:96:D9:57:A7:5A:CE:33:19:CB:DF:2B:85:91:37:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab/e66ddf74-7469-3ada-9b35-1cbbb155b25e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab/0dc32e52-7919-4ad4-a486-4bed23a5c3ab.crl
X509v3 Authority Key Identifier:
keyid:E5:FD:14:F3:B0:8F:71:D2:1F:E9:CA:63:A4:F4:70:53:F8:F0:02:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:86c0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:5e:33:53:52:63:8b:93:e3:09:2a:66:5e:1a:34:d0:9e:de:
f6:ff:72:0e:5a:ce:75:38:84:42:8c:11:30:ba:cf:93:d1:9f:
80:c1:f6:9c:b6:1c:d8:d5:5a:c6:c4:22:86:2d:3b:31:d1:a9:
ec:93:ba:48:dd:90:fb:c6:eb:c7:1f:26:93:a6:03:93:ce:d8:
59:1f:ba:be:e8:95:46:7f:d6:f8:ec:a0:51:b6:85:84:ee:2a:
74:ef:0a:81:1d:e1:ee:4c:38:61:ae:28:01:70:d1:f1:3b:b7:
7d:c5:5e:0e:15:29:6b:1d:8c:29:e1:25:1f:71:d7:af:31:ed:
11:9c:16:93:32:5b:01:1b:04:75:48:b0:61:a4:f6:56:b7:74:
6d:ca:1f:0f:18:16:fe:c2:f3:14:f7:68:99:65:91:9f:8d:2e:
23:38:14:03:2a:65:37:53:0b:1e:98:e7:c4:94:62:a4:ae:2b:
49:a6:24:4a:09:fb:d3:73:02:34:d2:c5:75:64:3e:59:44:7d:
3f:7e:dd:af:b1:c8:a6:32:39:78:f8:00:99:c5:ef:ca:e6:b0:
3e:ad:15:b2:fd:e2:07:05:2b:53:a0:eb:80:4a:9a:6a:65:93:
3b:14:2b:9e:d7:b4:9a:ee:7b:84:f1:e7:ca:47:45:30:c6:68:
c5:13:b3:36
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEhfmt+zeWw3ict5p4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGRjMzJlNTItNzkxOS00YWQ0LWE0ODYtNGJlZDIzYTVj
M2FiMB4XDTI0MTIzMDAyMDAzOVoXDTI1MDMzMDAxMDAzOVowLzEtMCsGA1UEAxMk
ZmQ2NjdhZGQtMmI0MS00NDUyLWI5YWMtMjQyNzUxM2NhM2VhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhp/YIzEowi3dyf3XSLjixBt4V8gv3XNMeVoM
3OMfsNpnoMavFGbdtICM3734Aqu6ldWN3B3goP5kiX51Pjh+/q3ay4ibvZ8u97MZ
Kg+33bUljGDmUS0nYHTRXnSQInmjic3Vf7LCmG5OQ1I/IdBYBH3aUj7lq2JbqZ/A
cDWOqJKcM9wQ6yrD9ifDY5C+E101i7jpjAkDFUp7PD4ntCeSN14YJHAxqP9aopGu
fnCgBArSygYTGPpLvylKCAEsNjsO8wRcw6qnBGZsJ6r6yqIfWiNfNCDxNXZPHnBN
VYvN+V2sU2EiHxvKB30DwGiAg/WnJj19kFrp5+kUvHvvcTA8swIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJkeawHeltlXp1rOMxnL3yuFkTcpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wZGMz
MmU1Mi03OTE5LTRhZDQtYTQ4Ni00YmVkMjNhNWMzYWIvZTY2ZGRmNzQtNzQ2OS0z
YWRhLTliMzUtMWNiYmIxNTViMjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGRjMzJlNTItNzkxOS00YWQ0LWE0
ODYtNGJlZDIzYTVjM2FiLzBkYzMyZTUyLTc5MTktNGFkNC1hNDg2LTRiZWQyM2E1
YzNhYi5jcmwwHwYDVR0jBBgwFoAU5f0U87CPcdIf6cpjpPRwU/jwArIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wZGMzMmU1Mi03OTE5LTRhZDQtYTQ4Ni00YmVk
MjNhNWMzYWIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgaGwDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBnXjNTUmOLk+MJKmZeGjTQnt72/3IOWs51OIRCjBEwus+T0Z+Awfac
thzY1VrGxCKGLTsx0ansk7pI3ZD7xuvHHyaTpgOTzthZH7q+6JVGf9b47KBRtoWE
7ip07wqBHeHuTDhhrigBcNHxO7d9xV4OFSlrHYwp4SUfcdevMe0RnBaTMlsBGwR1
SLBhpPZWt3Rtyh8PGBb+wvMU92iZZZGfjS4jOBQDKmU3UwsemOfElGKkritJpiRK
CfvTcwI00sV1ZD5ZRH0/ft2vscimMjl4+ACZxe/K5rA+rRWy/eIHBStToOuASppq
ZZM7FCue17Sa7nuE8efKR0UwxmjFE7M2
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:23:09 2025 by rpki-client