Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2/b45f01b4-a66e-36c4-bc0a-43fd338df2e9.roa
File: b45f01b4-a66e-36c4-bc0a-43fd338df2e9.roa (raw, json)
Hash identifier: LGAZQhF+oCsYsxiyGK1pZZEpOWax1cpmtsl4HCPGgRQ=
Subject key identifier: 6C:30:89:7F:FF:CB:A1:81:E2:77:85:C0:1B:DE:5B:02:F0:F0:3E:08
Certificate issuer: /CN=a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2
Certificate serial: 010D0C9F43285848811B0CCC1F2D5C81B5BE30C0
Authority key identifier: 1A:89:A6:9F:26:2C:91:F9:BD:B8:AE:98:4F:91:01:4C:50:DA:FD:1A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2/b45f01b4-a66e-36c4-bc0a-43fd338df2e9.roa
Signing time: Sat 11 Jan 2025 02:00:39 +0000
ROA not before: Sat 11 Jan 2025 02:00:39 +0000
ROA not after: Fri 11 Apr 2025 01:00:39 +0000
asID: 3128
IP address blocks: 2600:1d00::/28 maxlen: 28
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:81:1b:0c:cc:1f:2d:5c:81:b5:be:30:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2
Validity
Not Before: Jan 11 02:00:39 2025 GMT
Not After : Apr 11 01:00:39 2025 GMT
Subject: CN=65ee7f2d-09c8-4add-9687-836469bee2f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6d:3d:99:eb:79:df:e1:1e:44:90:c2:da:d8:
e0:b9:87:fa:93:48:64:3f:ec:d8:5b:03:a1:c5:bc:
be:7b:59:94:e2:3b:16:ea:b3:57:83:21:4e:cc:16:
e7:ed:85:ef:f8:db:b8:4a:15:01:43:ae:13:d3:e5:
c7:40:25:c7:dc:e7:92:5d:aa:c7:0c:51:fb:1e:17:
06:7c:b5:fd:c0:4f:5c:58:e3:b2:40:ac:1c:8a:04:
b6:e1:7d:5a:4c:f2:d6:aa:8a:32:51:24:5d:5a:26:
ba:c9:c0:24:61:47:f0:1b:a1:c5:1b:4c:d6:f7:c3:
fb:21:78:df:18:94:fc:d8:b3:89:81:1c:63:2f:ea:
a9:ad:8e:29:35:d2:5c:0c:1e:f6:d2:a7:76:49:e7:
8b:ef:29:df:4e:c0:c3:48:a8:c6:e3:db:00:ad:70:
be:40:c4:4f:2c:5d:a4:fd:c8:51:85:eb:9a:78:96:
4f:29:0a:fb:60:da:f0:0b:a6:10:fb:9e:4b:74:34:
6a:a3:39:4a:4e:14:0a:b0:80:a6:54:a1:60:35:ba:
8d:4e:7f:7a:7a:e4:af:d8:20:9c:5a:2e:fe:b3:e2:
e6:80:9b:66:f5:31:d5:82:5f:4f:1c:6a:e0:fc:fd:
74:d3:8a:ef:fd:d6:64:17:d2:eb:42:28:6a:53:c3:
6a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:30:89:7F:FF:CB:A1:81:E2:77:85:C0:1B:DE:5B:02:F0:F0:3E:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2/b45f01b4-a66e-36c4-bc0a-43fd338df2e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.crl
X509v3 Authority Key Identifier:
keyid:1A:89:A6:9F:26:2C:91:F9:BD:B8:AE:98:4F:91:01:4C:50:DA:FD:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1d00::/28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:be:60:7b:3a:0a:a3:4d:06:4c:a1:2c:38:af:96:1f:53:53:
31:d0:b9:40:ed:22:ac:02:2e:e3:22:a6:50:b8:0d:b1:f5:e8:
e6:88:9e:22:3b:0b:ea:36:1b:6a:93:fb:f7:2c:88:ec:83:60:
53:9b:df:da:52:f5:e1:c2:22:a0:c0:8e:27:23:bb:56:5a:c0:
3e:3e:5b:ca:9a:2e:bb:01:51:a9:d4:bf:50:ec:20:86:f7:ee:
77:86:a3:9d:c8:41:89:25:ec:b3:a1:aa:cf:c7:38:cc:11:8b:
48:a6:f9:f0:5d:06:ba:40:b0:5c:a2:47:dc:cb:8e:91:81:6e:
32:2f:3c:5e:ff:ce:f7:cb:89:00:26:a2:36:0a:3a:5a:98:cc:
f0:94:13:69:62:3c:67:16:fb:ac:e6:ba:87:8d:cd:ed:23:3d:
5b:18:1e:e5:b8:59:ef:07:31:92:59:a9:23:45:e7:d7:12:e9:
ee:58:f3:69:df:fb:ce:96:fb:e9:ff:c9:74:d3:f7:f6:d4:19:
d2:ff:64:46:ff:63:a0:e8:85:05:1c:5e:49:b6:6e:76:91:c4:
0f:65:30:78:90:a7:37:09:65:42:c6:6b:be:0c:57:6a:9a:ec:
f5:c7:4a:0b:b6:e6:9c:3f:1d:dd:e2:5c:b4:e2:54:1b:7c:50:
07:08:99:f8
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEiBGwzMHy1cgbW+MMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTJiMmU1MzktYzgxYS00OGNkLTk1YTUtN2UzZWFlOGFk
MmQyMB4XDTI1MDExMTAyMDAzOVoXDTI1MDQxMTAxMDAzOVowLzEtMCsGA1UEAxMk
NjVlZTdmMmQtMDljOC00YWRkLTk2ODctODM2NDY5YmVlMmY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj209met53+EeRJDC2tjguYf6k0hkP+zYWwOh
xby+e1mU4jsW6rNXgyFOzBbn7YXv+Nu4ShUBQ64T0+XHQCXH3OeSXarHDFH7HhcG
fLX9wE9cWOOyQKwcigS24X1aTPLWqooyUSRdWia6ycAkYUfwG6HFG0zW98P7IXjf
GJT82LOJgRxjL+qprY4pNdJcDB720qd2SeeL7ynfTsDDSKjG49sArXC+QMRPLF2k
/chRheuaeJZPKQr7YNrwC6YQ+55LdDRqozlKThQKsICmVKFgNbqNTn96euSv2CCc
Wi7+s+LmgJtm9THVgl9PHGrg/P1004rv/dZkF9LrQihqU8NqSwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFGwwiX//y6GB4neFwBveWwLw8D4IMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMmIy
ZTUzOS1jODFhLTQ4Y2QtOTVhNS03ZTNlYWU4YWQyZDIvYjQ1ZjAxYjQtYTY2ZS0z
NmM0LWJjMGEtNDNmZDMzOGRmMmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTJiMmU1MzktYzgxYS00OGNkLTk1
YTUtN2UzZWFlOGFkMmQyL2EyYjJlNTM5LWM4MWEtNDhjZC05NWE1LTdlM2VhZThh
ZDJkMi5jcmwwHwYDVR0jBBgwFoAUGommnyYskfm9uK6YT5EBTFDa/RowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9hMmIyZTUzOS1jODFhLTQ4Y2QtOTVhNS03ZTNl
YWU4YWQyZDIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgAdADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCDvmB7OgqjTQZMoSw4r5YfU1Mx0LlA7SKsAi7jIqZQuA2x9ejmiJ4i
OwvqNhtqk/v3LIjsg2BTm9/aUvXhwiKgwI4nI7tWWsA+PlvKmi67AVGp1L9Q7CCG
9+53hqOdyEGJJeyzoarPxzjMEYtIpvnwXQa6QLBcokfcy46RgW4yLzxe/873y4kA
JqI2CjpamMzwlBNpYjxnFvus5rqHjc3tIz1bGB7luFnvBzGSWakjRefXEunuWPNp
3/vOlvvp/8l00/f21BnS/2RG/2Og6IUFHF5Jtm52kcQPZTB4kKc3CWVCxmu+DFdq
muz1x0oLtuacPx3d4ly04lQbfFAHCJn4
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:22:32 2025 by rpki-client