Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/a1fe6b98-8ca8-3bd4-b108-6345c52cff1e.roa
File: a1fe6b98-8ca8-3bd4-b108-6345c52cff1e.roa (raw, json)
Hash identifier: +t2ts8Bc9a2GEJL1Cg8Lvgt9PyFHSw5PbdqnZMT063M=
Subject key identifier: 1F:63:C2:9E:6A:FD:A7:4D:B9:D7:82:AE:B6:15:D2:B4:AC:72:D1:BC
Certificate issuer: /CN=511ed25c-3ac7-4d86-9290-879e3813322e
Certificate serial: 010D0C9F432858480EA51440AA17D9BF62F92940
Authority key identifier: BE:D7:8A:60:72:85:70:10:7B:28:43:F1:2E:E5:D4:DC:6F:C7:5B:2E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/a1fe6b98-8ca8-3bd4-b108-6345c52cff1e.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 13325
IP address blocks: 2620:167::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:14:40:aa:17:d9:bf:62:f9:29:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=511ed25c-3ac7-4d86-9290-879e3813322e
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=2dec002d-eb36-4acd-a602-8ee9ca650ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7e:22:91:2e:a1:1d:78:f2:3e:3e:b9:59:92:
ef:f8:87:35:62:1b:17:37:3e:22:05:db:d9:f7:44:
c5:c7:3f:8f:9b:ab:6e:df:78:7d:8a:df:db:74:7a:
25:ab:1d:75:6f:93:fe:f7:4f:dd:f6:66:f2:b9:66:
11:21:59:95:ef:5c:f5:d2:8f:9f:3c:4b:2a:0e:11:
5b:13:04:78:f1:38:b8:60:0c:50:9c:d3:60:9f:e9:
f4:15:54:aa:6f:bc:71:e3:79:dc:71:29:7b:ed:1b:
14:ba:1b:73:bc:a5:46:96:c3:07:ae:cb:57:4b:17:
b8:94:fb:70:c1:39:d1:e9:7e:01:69:27:6f:f6:26:
77:95:b5:ba:24:ee:61:09:8a:ce:15:2b:39:91:d0:
fc:05:ac:ba:cd:13:48:9b:9b:cd:a1:cd:9d:5b:cf:
30:fc:6c:19:27:12:20:c4:25:21:49:b3:bb:e0:d2:
0e:59:c9:9c:41:c1:d1:e7:de:46:02:f5:b4:52:0c:
d5:4b:bc:a6:3f:63:b2:9f:bc:e5:e5:fa:a1:50:e6:
53:69:45:02:ff:ae:65:a9:85:04:54:6c:bb:40:bb:
7f:c9:a1:c4:25:fc:a0:bb:e4:5a:16:98:56:b2:7c:
51:5c:8e:dd:16:0f:92:6d:f2:91:e6:2f:0a:9a:01:
30:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:63:C2:9E:6A:FD:A7:4D:B9:D7:82:AE:B6:15:D2:B4:AC:72:D1:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/a1fe6b98-8ca8-3bd4-b108-6345c52cff1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/511ed25c-3ac7-4d86-9290-879e3813322e.crl
X509v3 Authority Key Identifier:
keyid:BE:D7:8A:60:72:85:70:10:7B:28:43:F1:2E:E5:D4:DC:6F:C7:5B:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:167::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cb:57:3b:ff:1c:da:3c:ee:a6:09:4c:cc:26:8c:ae:17:1f:d6:
2b:09:e1:60:0e:13:6f:f3:80:bd:67:7d:a5:0c:fe:15:4f:a3:
26:d0:7e:98:3d:69:38:dd:53:2e:04:0d:d9:91:45:51:f5:21:
df:86:46:57:b3:8d:91:6c:89:32:b7:db:b7:4c:93:d1:99:3d:
c8:76:5a:bf:76:57:06:a5:ca:af:f9:95:49:1b:7d:e3:0a:92:
32:91:0d:e3:43:06:a5:0b:2f:79:68:68:40:03:76:b6:4c:fc:
37:b1:7e:f6:d1:80:38:6d:08:2a:da:34:88:08:17:aa:4a:e8:
46:8c:31:ba:91:5f:17:9a:d3:f1:96:78:ec:09:71:c8:44:61:
ac:7f:f1:c5:2e:27:86:2a:1a:1e:7b:fd:2c:b4:ec:e8:ae:88:
f6:bb:4a:0d:55:91:34:58:9f:0b:b6:61:6e:a3:fc:45:f4:0d:
da:cb:31:85:41:2b:87:8e:a4:b8:95:de:1c:19:9b:23:88:7c:
76:76:e3:16:93:90:b4:f6:ac:d4:42:29:2d:b4:f6:f9:bf:fd:
ee:8a:61:65:6d:eb:b4:bb:7a:9d:ba:1b:5a:f0:bf:1a:80:8f:
e0:eb:7e:7e:ea:0c:ec:01:bb:a6:5a:22:83:1a:13:56:16:d0:
d8:87:a5:66
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEgOpRRAqhfZv2L5KUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTExZWQyNWMtM2FjNy00ZDg2LTkyOTAtODc5ZTM4MTMz
MjJlMB4XDTI0MTIwMTAyMDAzOVoXDTI1MDMwMTAyMDAzOVowLzEtMCsGA1UEAxMk
MmRlYzAwMmQtZWIzNi00YWNkLWE2MDItOGVlOWNhNjUwYWM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1X4ikS6hHXjyPj65WZLv+Ic1YhsXNz4iBdvZ
90TFxz+Pm6tu33h9it/bdHolqx11b5P+90/d9mbyuWYRIVmV71z10o+fPEsqDhFb
EwR48Ti4YAxQnNNgn+n0FVSqb7xx43nccSl77RsUuhtzvKVGlsMHrstXSxe4lPtw
wTnR6X4BaSdv9iZ3lbW6JO5hCYrOFSs5kdD8Bay6zRNIm5vNoc2dW88w/GwZJxIg
xCUhSbO74NIOWcmcQcHR595GAvW0UgzVS7ymP2Oyn7zl5fqhUOZTaUUC/65lqYUE
VGy7QLt/yaHEJfygu+RaFphWsnxRXI7dFg+SbfKR5i8KmgEwtwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFB9jwp5q/adNudeCrrYV0rSsctG8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81MTFl
ZDI1Yy0zYWM3LTRkODYtOTI5MC04NzllMzgxMzMyMmUvYTFmZTZiOTgtOGNhOC0z
YmQ0LWIxMDgtNjM0NWM1MmNmZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTExZWQyNWMtM2FjNy00ZDg2LTky
OTAtODc5ZTM4MTMzMjJlLzUxMWVkMjVjLTNhYzctNGQ4Ni05MjkwLTg3OWUzODEz
MzIyZS5jcmwwHwYDVR0jBBgwFoAUvteKYHKFcBB7KEPxLuXU3G/HWy4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS81MTFlZDI1Yy0zYWM3LTRkODYtOTI5MC04Nzll
MzgxMzMyMmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJiABZwAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAy1c7/xzaPO6mCUzMJoyuFx/WKwnhYA4Tb/OAvWd9pQz+FU+jJtB+
mD1pON1TLgQN2ZFFUfUh34ZGV7ONkWyJMrfbt0yT0Zk9yHZav3ZXBqXKr/mVSRt9
4wqSMpEN40MGpQsveWhoQAN2tkz8N7F+9tGAOG0IKto0iAgXqkroRowxupFfF5rT
8ZZ47AlxyERhrH/xxS4nhioaHnv9LLTs6K6I9rtKDVWRNFifC7ZhbqP8RfQN2ssx
hUErh46kuJXeHBmbI4h8dnbjFpOQtPas1EIpLbT2+b/97ophZW3rtLt6nbobWvC/
GoCP4Ot+fuoM7AG7ploigxoTVhbQ2IelZg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 23:49:22 2025 by rpki-client