Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/78b45b9d-2617-3274-8f91-51af79780970.roa
File: 78b45b9d-2617-3274-8f91-51af79780970.roa (raw, json)
Hash identifier: A1tm/c92BOv40ICwyqjrQ+JMnTOeOlVWAXzA5JQpGAk=
Subject key identifier: D8:8A:0C:0A:C9:48:54:45:73:49:78:9F:AD:4F:75:B1:35:6D:E6:EF
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848696079E1A2B0958462966C00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/78b45b9d-2617-3274-8f91-51af79780970.roa
Signing time: Thu 02 Jan 2025 14:00:52 +0000
ROA not before: Thu 02 Jan 2025 14:00:52 +0000
ROA not after: Wed 02 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:1014:b070::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:60:79:e1:a2:b0:95:84:62:96:6c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 2 14:00:52 2025 GMT
Not After : Apr 2 13:00:52 2025 GMT
Subject: CN=af5eb59a-a4a0-495b-8e14-33350b2691f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:12:c0:f6:25:8f:9f:71:98:5d:4d:f2:97:8f:
ff:34:cf:06:4d:7d:c7:ff:a0:1a:80:38:2b:a3:1f:
d5:9d:f1:f1:9f:ca:12:49:22:59:90:02:20:65:4c:
67:4c:7a:da:6d:d6:65:2a:f4:0a:4e:6b:d7:b5:a0:
47:92:fa:13:e9:f9:f9:b9:a7:e1:de:20:36:95:1d:
3c:f4:d1:ad:cd:90:9a:ce:58:07:f5:7f:e9:b6:25:
0a:66:d1:7f:a6:b3:57:e9:ea:bc:09:ab:b0:f2:bf:
cc:73:91:af:f2:49:2b:a6:d2:12:34:22:e5:42:74:
12:b5:62:f1:33:0f:53:da:4d:e5:02:f1:43:bb:16:
75:72:2e:fd:d0:62:11:0c:e8:5c:4d:35:34:1d:39:
db:c7:b0:fa:ca:ef:7f:d0:0a:e8:f0:6b:a7:c1:3b:
4c:a2:29:70:67:39:5b:75:83:b9:58:19:2b:ab:e8:
9e:c6:b5:5f:86:00:55:90:7a:3d:2c:a1:4f:0f:c0:
b0:2f:1f:9c:ff:f9:46:fa:b5:67:a0:91:e2:ee:3d:
3b:a1:6f:a8:28:39:50:94:a8:7f:be:be:8a:f0:2a:
ad:9f:20:40:56:62:0f:ec:e2:22:19:d2:de:1e:75:
3a:fc:da:8b:ff:ec:6e:c2:12:ab:8b:12:99:13:87:
63:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:8A:0C:0A:C9:48:54:45:73:49:78:9F:AD:4F:75:B1:35:6D:E6:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/78b45b9d-2617-3274-8f91-51af79780970.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1014:b070::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:01:40:2e:b7:a9:8f:1f:0a:98:38:81:49:40:06:f4:e9:3a:
37:e0:f3:24:6c:3c:fc:e5:ef:f5:f7:a3:64:ff:60:a9:60:3b:
cb:0d:18:8f:6b:db:39:a9:61:42:43:98:52:ee:01:2a:b2:e8:
94:9f:3b:c0:d7:d9:b2:f4:f9:65:10:54:b1:80:4f:84:9b:7d:
79:7e:fa:d5:05:41:f4:19:c2:3e:1f:0d:58:66:cd:29:ff:2f:
11:02:5f:4d:2a:d3:52:d9:9f:3a:d4:ab:1c:d6:dd:55:8e:5f:
7c:e7:fb:5c:84:b1:61:8e:9a:19:c8:33:9d:d8:f2:78:95:aa:
61:6d:01:80:68:38:71:db:9d:07:c7:b1:90:cf:34:6d:88:91:
b3:cb:30:15:11:e9:7e:33:b4:e9:14:ab:3d:a2:07:32:5c:e9:
26:3b:c9:9b:4e:83:16:d4:67:dc:bb:f6:af:7a:2c:5b:1c:c4:
4b:bc:b1:74:23:0c:99:c0:bf:3d:32:3a:5a:1d:b8:5b:f7:4a:
c3:a5:81:38:c3:b7:c8:45:ce:82:60:70:d2:c0:fe:18:41:b4:
12:34:bc:6f:e9:e0:08:dc:e3:78:78:da:5d:e5:cf:28:df:7d:
c4:58:d9:34:03:84:06:42:ba:e1:fc:da:40:17:ef:4a:06:63:
9d:1d:a2:97
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhpYHnhorCVhGKWbAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDEwMjE0MDA1MloXDTI1MDQwMjEzMDA1MlowLzEtMCsGA1UEAxMk
YWY1ZWI1OWEtYTRhMC00OTViLThlMTQtMzMzNTBiMjY5MWYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRLA9iWPn3GYXU3yl4//NM8GTX3H/6AagDgr
ox/VnfHxn8oSSSJZkAIgZUxnTHrabdZlKvQKTmvXtaBHkvoT6fn5uafh3iA2lR08
9NGtzZCazlgH9X/ptiUKZtF/prNX6eq8Cauw8r/Mc5Gv8kkrptISNCLlQnQStWLx
Mw9T2k3lAvFDuxZ1ci790GIRDOhcTTU0HTnbx7D6yu9/0Aro8GunwTtMoilwZzlb
dYO5WBkrq+iexrVfhgBVkHo9LKFPD8CwLx+c//lG+rVnoJHi7j07oW+oKDlQlKh/
vr6K8CqtnyBAVmIP7OIiGdLeHnU6/NqL/+xuwhKrixKZE4dj5wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNiKDArJSFRFc0l4n61PdbE1bebvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNzhiNDViOWQtMjYxNy0z
Mjc0LThmOTEtNTFhZjc5NzgwOTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQFLBw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADABQC63qY8fCpg4gUlABvTpOjfg8yRsPPzl7/X3o2T/YKlgO8sN
GI9r2zmpYUJDmFLuASqy6JSfO8DX2bL0+WUQVLGAT4SbfXl++tUFQfQZwj4fDVhm
zSn/LxECX00q01LZnzrUqxzW3VWOX3zn+1yEsWGOmhnIM53Y8niVqmFtAYBoOHHb
nQfHsZDPNG2IkbPLMBUR6X4ztOkUqz2iBzJc6SY7yZtOgxbUZ9y79q96LFscxEu8
sXQjDJnAvz0yOloduFv3SsOlgTjDt8hFzoJgcNLA/hhBtBI0vG/p4Ajc43h42l3l
zyjffcRY2TQDhAZCuuH82kAX70oGY50dopc=
-----END CERTIFICATE-----
Generated at Sat Apr 26 00:51:59 2025 by rpki-client