Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2/b0aead21-fe86-32c1-8560-e3f695d01240.roa
File: b0aead21-fe86-32c1-8560-e3f695d01240.roa (raw, json)
Hash identifier: ekIzHOXMWjKtJaAPAvQdFRF/7LIlyNDcGjC0mp0PxK0=
Subject key identifier: 2D:96:CB:40:9E:0F:6E:DE:BE:70:B0:A5:C3:D2:75:C8:38:6A:8A:71
Certificate issuer: /CN=66afc7a0-9424-431b-87aa-fab4c7032ed2
Certificate serial: 010D0C9F432858480EA513A2EFA289081F33F680
Authority key identifier: 8B:B7:43:2E:1D:4B:AF:D0:79:03:06:96:4C:AC:AD:5C:64:24:61:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2/b0aead21-fe86-32c1-8560-e3f695d01240.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 19919
IP address blocks: 2601:1600::/28 maxlen: 28
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:13:a2:ef:a2:89:08:1f:33:f6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66afc7a0-9424-431b-87aa-fab4c7032ed2
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=422c0520-760f-44d3-be58-8cb184e4b7c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:23:d6:ec:67:1d:fa:a4:01:24:a5:9f:f3:31:
a4:51:52:fb:0f:dd:d6:46:a6:78:86:88:38:17:ae:
9f:04:7a:81:9a:46:09:f5:c0:4e:1b:f9:e8:23:21:
5d:f8:b3:ba:ae:65:83:9a:e9:30:0d:b2:16:5f:40:
f2:5d:ce:c3:be:8d:12:57:06:78:04:06:68:40:c2:
ed:7a:ae:24:7d:a9:97:35:5d:5c:f2:74:dc:19:76:
15:10:c2:99:ab:b6:8c:7f:95:a0:75:ce:19:b7:10:
f7:3f:f2:db:fd:67:af:99:65:fb:fd:27:5b:76:3a:
eb:f0:03:65:a9:85:ed:02:31:06:19:d1:39:00:9a:
30:ba:67:26:3b:46:95:aa:b8:b6:67:a4:e4:25:fb:
7c:b6:82:1d:48:99:df:bd:2c:7e:f1:e9:db:56:10:
7c:e0:47:f8:a0:6d:e9:d4:b1:60:76:76:ed:ce:b9:
51:fe:6b:2e:97:da:38:83:b8:7d:8c:8c:92:4b:e7:
66:db:1f:dc:1e:1c:24:22:f5:3c:0f:bc:88:c6:fe:
dd:8e:d0:27:bf:8b:6d:1a:ce:95:07:81:61:b0:f7:
6d:6d:16:1e:bb:34:cd:fc:93:8a:6a:f5:47:57:e5:
e8:f0:8a:89:75:3d:bf:dc:8c:24:19:fb:a9:32:e4:
40:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:96:CB:40:9E:0F:6E:DE:BE:70:B0:A5:C3:D2:75:C8:38:6A:8A:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2/b0aead21-fe86-32c1-8560-e3f695d01240.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2/66afc7a0-9424-431b-87aa-fab4c7032ed2.crl
X509v3 Authority Key Identifier:
keyid:8B:B7:43:2E:1D:4B:AF:D0:79:03:06:96:4C:AC:AD:5C:64:24:61:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2.cer
sbgp-ipAddrBlock: critical
IPv6:
2601:1600::/28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:10:b5:9e:76:bb:48:70:69:54:50:a2:76:b9:aa:7e:88:98:
e4:be:30:ed:8d:0c:0c:6b:26:3f:87:13:35:e5:9d:e8:9f:3f:
a9:ff:66:d4:8e:7d:86:a9:2d:63:c0:3a:b4:d2:0a:c4:db:7a:
83:f7:6a:67:a3:e5:62:71:26:51:99:47:1e:20:4a:55:3d:03:
29:82:ab:dc:e7:3b:ae:0b:e8:7b:b7:28:95:a7:a7:69:6c:6c:
b8:4f:6a:ba:69:60:f7:71:e1:db:ab:02:b9:c5:65:b1:54:1a:
9d:95:9c:b4:a9:59:bf:da:66:69:e2:d0:ed:77:44:04:d4:6a:
fc:76:20:d2:9c:fb:74:f5:59:fc:fe:28:15:d0:28:54:ca:c5:
16:58:57:48:af:ff:34:03:40:f5:7c:a3:46:67:ea:58:07:ed:
9d:41:ee:b8:fd:ef:b1:65:2b:c4:47:da:74:cb:28:24:37:44:
8a:f3:08:8d:44:bc:fc:a7:9f:2e:2e:40:3b:16:c9:df:5b:63:
60:57:c5:86:20:6c:5e:65:27:9c:c7:d9:91:32:ce:50:9e:97:
c6:db:0d:f3:63:62:7c:10:69:a7:c5:73:d5:a8:44:3f:1c:49:
ff:41:1c:06:cd:5d:f4:6b:b7:b1:9c:e1:f0:05:03:2c:77:70:
2c:05:77:05
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEgOpROi76KJCB8z9oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZhZmM3YTAtOTQyNC00MzFiLTg3YWEtZmFiNGM3MDMy
ZWQyMB4XDTI0MTIwMTAyMDAzOVoXDTI1MDMwMTAyMDAzOVowLzEtMCsGA1UEAxMk
NDIyYzA1MjAtNzYwZi00NGQzLWJlNTgtOGNiMTg0ZTRiN2MzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyPW7Gcd+qQBJKWf8zGkUVL7D93WRqZ4hog4
F66fBHqBmkYJ9cBOG/noIyFd+LO6rmWDmukwDbIWX0DyXc7Dvo0SVwZ4BAZoQMLt
eq4kfamXNV1c8nTcGXYVEMKZq7aMf5Wgdc4ZtxD3P/Lb/WevmWX7/Sdbdjrr8ANl
qYXtAjEGGdE5AJowumcmO0aVqri2Z6TkJft8toIdSJnfvSx+8enbVhB84Ef4oG3p
1LFgdnbtzrlR/msul9o4g7h9jIySS+dm2x/cHhwkIvU8D7yIxv7djtAnv4ttGs6V
B4FhsPdtbRYeuzTN/JOKavVHV+Xo8IqJdT2/3IwkGfupMuRAsQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFC2Wy0CeD27evnCwpcPSdcg4aopxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82NmFm
YzdhMC05NDI0LTQzMWItODdhYS1mYWI0YzcwMzJlZDIvYjBhZWFkMjEtZmU4Ni0z
MmMxLTg1NjAtZTNmNjk1ZDAxMjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjZhZmM3YTAtOTQyNC00MzFiLTg3
YWEtZmFiNGM3MDMyZWQyLzY2YWZjN2EwLTk0MjQtNDMxYi04N2FhLWZhYjRjNzAz
MmVkMi5jcmwwHwYDVR0jBBgwFoAUi7dDLh1Lr9B5AwaWTKytXGQkYSAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS82NmFmYzdhMC05NDI0LTQzMWItODdhYS1mYWI0
YzcwMzJlZDIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgEWADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA7ELWedrtIcGlUUKJ2uap+iJjkvjDtjQwMayY/hxM15Z3onz+p/2bU
jn2GqS1jwDq00grE23qD92pno+VicSZRmUceIEpVPQMpgqvc5zuuC+h7tyiVp6dp
bGy4T2q6aWD3ceHbqwK5xWWxVBqdlZy0qVm/2mZp4tDtd0QE1Gr8diDSnPt09Vn8
/igV0ChUysUWWFdIr/80A0D1fKNGZ+pYB+2dQe64/e+xZSvER9p0yygkN0SK8wiN
RLz8p58uLkA7FsnfW2NgV8WGIGxeZSecx9mRMs5QnpfG2w3zY2J8EGmnxXPVqEQ/
HEn/QRwGzV30a7exnOHwBQMsd3AsBXcF
-----END CERTIFICATE-----
Generated at Tue Apr 29 18:07:12 2025 by rpki-client