Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35a6c1ad-c1ba-4522-a911-1f8a24c8ae38/0a8c8684-8ddc-30fd-a22c-66c4ab72ca1a.roa
File: 0a8c8684-8ddc-30fd-a22c-66c4ab72ca1a.roa (raw, json)
Hash identifier: TKykwgi7Ds34YzGB49D8SO0umogApPj2QM/Hkbsf6wA=
Subject key identifier: D7:8F:FD:12:F3:39:FF:55:4D:CB:3A:9D:1F:EA:55:9A:8E:4C:6B:AE
Certificate issuer: /CN=35a6c1ad-c1ba-4522-a911-1f8a24c8ae38
Certificate serial: 010D0C9F432858486C2B1E39C9F4CE23317CCB00
Authority key identifier: 6B:96:63:42:FE:61:F5:C8:CE:92:57:7F:63:77:AD:57:36:04:F0:A9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35a6c1ad-c1ba-4522-a911-1f8a24c8ae38.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35a6c1ad-c1ba-4522-a911-1f8a24c8ae38/0a8c8684-8ddc-30fd-a22c-66c4ab72ca1a.roa
Signing time: Fri 03 Jan 2025 14:00:51 +0000
ROA not before: Fri 03 Jan 2025 14:00:51 +0000
ROA not after: Thu 03 Apr 2025 13:00:51 +0000
asID: 18973
IP address blocks: 2606:1a00::/32 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:2b:1e:39:c9:f4:ce:23:31:7c:cb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35a6c1ad-c1ba-4522-a911-1f8a24c8ae38
Validity
Not Before: Jan 3 14:00:51 2025 GMT
Not After : Apr 3 13:00:51 2025 GMT
Subject: CN=e52dc10c-7116-4164-8a13-adb95a7c5c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:42:f2:e8:8f:2b:be:4c:15:4c:6c:7f:b6:fd:
fb:1a:09:96:a1:6b:5b:3d:64:71:fb:59:a4:b2:cd:
96:1e:27:2f:27:1d:04:f9:37:09:3c:0c:32:c1:eb:
0e:b2:af:bc:70:68:7d:e1:3e:9f:00:80:e8:27:0d:
eb:04:ff:d0:9c:1e:fd:6f:85:72:a3:6a:26:96:37:
6f:31:ac:29:89:fa:61:20:1b:15:f1:74:6a:15:c3:
2f:db:f1:76:83:05:7a:8f:63:54:db:39:3e:7c:78:
a6:88:cf:e8:32:c3:ee:ce:dc:b4:d8:5d:12:ce:db:
a2:1d:df:49:64:60:58:80:2b:bb:69:65:99:3a:d6:
8e:83:78:c9:53:22:96:9c:96:72:e2:f4:28:6b:ff:
aa:a0:ed:e3:93:85:cf:9f:2b:ef:8b:82:72:2b:71:
e2:c2:cf:06:a8:7d:0c:83:86:44:7e:5d:ac:d4:c6:
f6:57:5b:bb:5c:59:af:cd:d0:4f:57:bb:ce:d9:0e:
fd:01:d4:ba:27:8a:23:39:cc:5e:43:8f:0f:e6:da:
67:dc:88:09:4a:d2:2b:35:88:07:f3:60:83:74:a8:
9d:93:43:a1:2b:84:e7:2b:4a:c1:7c:e6:bd:b8:00:
eb:30:7b:0b:68:15:c3:77:4e:55:ee:83:42:37:66:
2c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:8F:FD:12:F3:39:FF:55:4D:CB:3A:9D:1F:EA:55:9A:8E:4C:6B:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35a6c1ad-c1ba-4522-a911-1f8a24c8ae38/0a8c8684-8ddc-30fd-a22c-66c4ab72ca1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35a6c1ad-c1ba-4522-a911-1f8a24c8ae38/35a6c1ad-c1ba-4522-a911-1f8a24c8ae38.crl
X509v3 Authority Key Identifier:
keyid:6B:96:63:42:FE:61:F5:C8:CE:92:57:7F:63:77:AD:57:36:04:F0:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35a6c1ad-c1ba-4522-a911-1f8a24c8ae38.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:1a00::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:09:3c:88:ee:bb:c2:27:3b:73:f9:f4:1a:52:33:ba:02:27:
35:cc:39:46:ee:7a:7a:75:aa:97:77:32:6b:dd:b4:83:8e:93:
34:ea:02:fd:1e:3b:6d:73:e4:da:06:89:c1:78:51:28:ff:c3:
4d:db:f9:ec:07:a9:a5:8c:8c:42:56:f0:f1:47:e5:ce:46:0d:
b4:6c:87:c5:cf:3a:19:2e:87:24:2a:9b:8f:dc:9c:e0:2d:fa:
f3:0f:60:72:fa:cb:56:16:58:87:8e:89:58:21:ba:72:5b:97:
c8:d7:0d:ea:e1:34:37:9e:80:82:f1:5f:1a:d4:aa:0c:67:a9:
73:9f:87:fc:14:df:cc:24:be:2e:87:31:c5:9f:68:0b:51:5c:
28:0c:b1:f8:22:cc:69:66:90:c7:0f:49:83:13:76:88:91:0f:
a5:64:2b:6e:cf:9b:54:7d:ec:aa:1d:99:d2:a8:a2:2f:b1:a2:
2d:8a:cc:ab:b4:09:32:33:a6:25:40:ec:cd:9a:76:38:fb:8e:
99:37:31:58:ad:be:d9:41:d5:99:e7:cc:ea:5c:cb:e0:1c:63:
0c:1d:f8:ee:b8:4d:fb:dc:19:9d:54:de:d8:35:50:45:ce:c8:
59:de:ab:3a:cd:66:b0:17:9c:38:91:e3:5b:82:59:26:53:7e:
18:98:83:a7
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEhsKx45yfTOIzF8ywAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzVhNmMxYWQtYzFiYS00NTIyLWE5MTEtMWY4YTI0Yzhh
ZTM4MB4XDTI1MDEwMzE0MDA1MVoXDTI1MDQwMzEzMDA1MVowLzEtMCsGA1UEAxMk
ZTUyZGMxMGMtNzExNi00MTY0LThhMTMtYWRiOTVhN2M1YzllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxULy6I8rvkwVTGx/tv37GgmWoWtbPWRx+1mk
ss2WHicvJx0E+TcJPAwywesOsq+8cGh94T6fAIDoJw3rBP/QnB79b4Vyo2omljdv
MawpifphIBsV8XRqFcMv2/F2gwV6j2NU2zk+fHimiM/oMsPuzty02F0SztuiHd9J
ZGBYgCu7aWWZOtaOg3jJUyKWnJZy4vQoa/+qoO3jk4XPnyvvi4JyK3Hiws8GqH0M
g4ZEfl2s1Mb2V1u7XFmvzdBPV7vO2Q79AdS6J4ojOcxeQ48P5tpn3IgJStIrNYgH
82CDdKidk0OhK4TnK0rBfOa9uADrMHsLaBXDd05V7oNCN2YsTwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFNeP/RLzOf9VTcs6nR/qVZqOTGuuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zNWE2
YzFhZC1jMWJhLTQ1MjItYTkxMS0xZjhhMjRjOGFlMzgvMGE4Yzg2ODQtOGRkYy0z
MGZkLWEyMmMtNjZjNGFiNzJjYTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzVhNmMxYWQtYzFiYS00NTIyLWE5
MTEtMWY4YTI0YzhhZTM4LzM1YTZjMWFkLWMxYmEtNDUyMi1hOTExLTFmOGEyNGM4
YWUzOC5jcmwwHwYDVR0jBBgwFoAUa5ZjQv5h9cjOkld/Y3etVzYE8KkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8zNWE2YzFhZC1jMWJhLTQ1MjItYTkxMS0xZjhh
MjRjOGFlMzguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgYaADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBZCTyI7rvCJztz+fQaUjO6Aic1zDlG7np6daqXdzJr3bSDjpM06gL9
Hjttc+TaBonBeFEo/8NN2/nsB6mljIxCVvDxR+XORg20bIfFzzoZLockKpuP3Jzg
LfrzD2By+stWFliHjolYIbpyW5fI1w3q4TQ3noCC8V8a1KoMZ6lzn4f8FN/MJL4u
hzHFn2gLUVwoDLH4IsxpZpDHD0mDE3aIkQ+lZCtuz5tUfeyqHZnSqKIvsaItisyr
tAkyM6YlQOzNmnY4+46ZNzFYrb7ZQdWZ58zqXMvgHGMMHfjuuE373BmdVN7YNVBF
zshZ3qs6zWawF5w4keNbglkmU34YmIOn
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:28:00 2025 by rpki-client