Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/302111be-b954-4c5e-ac9b-4f85c3c11fe2/c2c9e111-ba24-3c73-b05a-7cc89e85c5ee.roa
File: c2c9e111-ba24-3c73-b05a-7cc89e85c5ee.roa (raw, json)
Hash identifier: iVMs/86s4tCFSJ/NZ1A10sj8vSwMjX+HvoChgOIQjqQ=
Subject key identifier: 71:87:21:4C:49:52:84:4C:32:25:FB:5D:33:22:19:4C:70:27:05:F9
Certificate issuer: /CN=302111be-b954-4c5e-ac9b-4f85c3c11fe2
Certificate serial: 010D0C9F43285847E62ABC3672CF5A82C1221880
Authority key identifier: C8:52:80:DE:48:F1:3F:44:A9:6E:56:69:6B:13:6B:04:12:53:9A:AC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/302111be-b954-4c5e-ac9b-4f85c3c11fe2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/302111be-b954-4c5e-ac9b-4f85c3c11fe2/c2c9e111-ba24-3c73-b05a-7cc89e85c5ee.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 396982
IP address blocks: 2606:73c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:bc:36:72:cf:5a:82:c1:22:18:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=302111be-b954-4c5e-ac9b-4f85c3c11fe2
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=e696e89f-f760-468d-b20a-c9add6672234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c1:ae:3a:1d:fc:ed:14:e7:09:1f:7f:b7:fc:
2b:81:76:15:e2:f4:d7:d2:27:05:69:27:f8:23:ab:
91:36:62:93:30:3c:89:ec:bd:90:eb:91:4e:62:ab:
17:ea:53:63:f0:c4:4b:1f:88:c7:60:d7:9e:cc:d6:
dd:bf:fd:c7:b7:29:35:3d:7b:af:1a:ee:ca:0e:30:
ed:4b:ec:8d:67:96:07:2b:0d:18:89:38:0d:e4:42:
3f:bd:8f:54:18:4c:be:45:90:67:a1:aa:72:45:91:
9d:76:b6:fc:ad:de:75:c1:94:39:69:e8:25:ff:c6:
49:ba:4b:2d:8a:ba:57:fd:7a:97:c6:38:d1:a6:8d:
7b:c7:4a:cf:1e:8e:19:15:b2:24:aa:b4:26:fb:fd:
18:7d:8b:ed:10:2c:a1:f4:5e:9c:b0:3e:ef:e8:98:
f2:80:39:61:64:44:43:14:03:e7:9c:ec:7d:17:b9:
6a:88:02:b9:a5:a5:c2:d1:14:bc:8c:6b:f7:08:f0:
82:bb:24:47:75:a7:c4:e7:22:10:f5:84:4b:62:5b:
da:d9:8a:04:4a:28:b0:8e:37:51:70:5f:b4:bc:f1:
4e:7f:5b:7f:99:1d:bc:db:05:12:07:2b:87:b6:28:
d4:f0:e4:08:2d:03:54:4b:b8:ad:1e:0f:24:e6:7b:
6d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:87:21:4C:49:52:84:4C:32:25:FB:5D:33:22:19:4C:70:27:05:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/302111be-b954-4c5e-ac9b-4f85c3c11fe2/c2c9e111-ba24-3c73-b05a-7cc89e85c5ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/302111be-b954-4c5e-ac9b-4f85c3c11fe2/302111be-b954-4c5e-ac9b-4f85c3c11fe2.crl
X509v3 Authority Key Identifier:
keyid:C8:52:80:DE:48:F1:3F:44:A9:6E:56:69:6B:13:6B:04:12:53:9A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/302111be-b954-4c5e-ac9b-4f85c3c11fe2.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:73c0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:a3:43:cd:2e:98:ee:5e:ba:1b:f9:79:78:95:11:82:1d:c6:
45:d1:72:cd:f3:58:ab:3c:0a:05:15:e2:d8:f2:03:ad:6f:76:
70:f6:18:0a:7d:08:01:6e:6e:b6:a2:ef:1e:e0:cc:93:32:32:
a6:65:aa:24:97:89:a4:4a:3b:dc:05:43:ee:b1:23:6a:7e:90:
d9:89:29:61:10:f2:78:9f:df:56:ed:b6:9a:b7:31:49:8c:d2:
81:55:27:5e:1c:db:94:a5:8f:01:4d:45:83:c3:47:56:a1:85:
3d:6b:e0:52:47:dd:c2:9e:4d:a7:7d:d0:e1:ba:96:3e:5b:6c:
d0:7c:45:b5:a6:3b:85:7f:58:3e:38:63:de:8b:d6:5a:c1:63:
45:95:21:b4:23:1b:8b:db:a5:9c:9a:cc:e1:37:ea:56:35:36:
6a:0d:e4:db:e2:dd:13:fb:2d:bf:7a:42:00:da:8c:af:5f:0a:
d8:43:01:9e:a0:82:e5:5d:12:ba:fe:01:35:d9:00:28:d6:f4:
65:63:07:89:b7:51:1f:9d:01:2c:73:83:9e:4d:cd:9f:81:3f:
68:2f:22:1e:1d:19:51:88:95:15:89:65:9a:02:0c:92:db:83:
a4:ec:0b:83:6e:59:30:d9:d4:dc:f2:34:e6:2f:8b:02:38:9f:
71:a2:d3:ac
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEfmKrw2cs9agsEiGIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzAyMTExYmUtYjk1NC00YzVlLWFjOWItNGY4NWMzYzEx
ZmUyMB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
ZTY5NmU4OWYtZjc2MC00NjhkLWIyMGEtYzlhZGQ2NjcyMjM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcGuOh387RTnCR9/t/wrgXYV4vTX0icFaSf4
I6uRNmKTMDyJ7L2Q65FOYqsX6lNj8MRLH4jHYNeezNbdv/3Htyk1PXuvGu7KDjDt
S+yNZ5YHKw0YiTgN5EI/vY9UGEy+RZBnoapyRZGddrb8rd51wZQ5aegl/8ZJukst
irpX/XqXxjjRpo17x0rPHo4ZFbIkqrQm+/0YfYvtECyh9F6csD7v6JjygDlhZERD
FAPnnOx9F7lqiAK5paXC0RS8jGv3CPCCuyRHdafE5yIQ9YRLYlva2YoESiiwjjdR
cF+0vPFOf1t/mR282wUSByuHtijU8OQILQNUS7itHg8k5nttXQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFHGHIUxJUoRMMiX7XTMiGUxwJwX5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zMDIx
MTFiZS1iOTU0LTRjNWUtYWM5Yi00Zjg1YzNjMTFmZTIvYzJjOWUxMTEtYmEyNC0z
YzczLWIwNWEtN2NjODllODVjNWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzAyMTExYmUtYjk1NC00YzVlLWFj
OWItNGY4NWMzYzExZmUyLzMwMjExMWJlLWI5NTQtNGM1ZS1hYzliLTRmODVjM2Mx
MWZlMi5jcmwwHwYDVR0jBBgwFoAUyFKA3kjxP0SpblZpaxNrBBJTmqwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zMDIxMTFiZS1iOTU0LTRjNWUtYWM5Yi00Zjg1
YzNjMTFmZTIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgZzwDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQB0o0PNLpjuXrob+Xl4lRGCHcZF0XLN81irPAoFFeLY8gOtb3Zw9hgK
fQgBbm62ou8e4MyTMjKmZaokl4mkSjvcBUPusSNqfpDZiSlhEPJ4n99W7baatzFJ
jNKBVSdeHNuUpY8BTUWDw0dWoYU9a+BSR93Cnk2nfdDhupY+W2zQfEW1pjuFf1g+
OGPei9ZawWNFlSG0IxuL26WcmszhN+pWNTZqDeTb4t0T+y2/ekIA2oyvXwrYQwGe
oILlXRK6/gE12QAo1vRlYweJt1EfnQEsc4OeTc2fgT9oLyIeHRlRiJUViWWaAgyS
24Ok7AuDblkw2dTc8jTmL4sCOJ9xotOs
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:28:57 2025 by rpki-client