Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7c574db6-cce0-3959-aa9b-f0f35f6b42e7.roa
File: 7c574db6-cce0-3959-aa9b-f0f35f6b42e7.roa (raw, json)
Hash identifier: z6pvMVeKW8ukeYtp/+DBzIpH9Id1H29nOhnOnjc4xPo=
Subject key identifier: 72:11:DC:5D:AF:39:2F:0A:B8:09:2B:17:0E:5B:1E:1D:8F:C9:B8:93
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848696084B10D19DB9382CD7D80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7c574db6-cce0-3959-aa9b-f0f35f6b42e7.roa
Signing time: Thu 02 Jan 2025 14:00:52 +0000
ROA not before: Thu 02 Jan 2025 14:00:52 +0000
ROA not after: Wed 02 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:1015:b230::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:60:84:b1:0d:19:db:93:82:cd:7d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 2 14:00:52 2025 GMT
Not After : Apr 2 13:00:52 2025 GMT
Subject: CN=1754bcee-214e-4bdd-abd8-562763bee6d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:20:92:61:59:7c:04:d3:9c:96:3b:af:44:44:
35:cd:01:7c:73:90:8c:e6:c7:8d:08:ef:c9:93:8a:
78:e6:fd:e2:7a:ea:04:7a:c4:cd:b2:ec:47:ae:15:
e2:b0:8c:b9:40:f9:73:2a:3c:32:96:1b:36:a8:e0:
7f:cc:f1:09:47:91:50:59:4d:b2:33:9e:6d:ee:de:
76:73:3f:c2:43:37:db:52:e4:8f:b3:f5:8e:67:7d:
e8:4d:8c:07:80:d1:02:c9:44:2b:6a:f6:92:37:7f:
66:80:c1:a3:2a:0b:0a:7b:fb:b1:e5:83:26:ba:28:
15:46:26:62:27:a5:a4:87:68:4c:9c:26:3f:08:96:
34:f3:56:7d:4d:c5:e6:95:dd:ca:c8:de:45:4e:0e:
70:f4:a5:28:b9:9d:ae:5f:d3:78:ca:a0:af:2f:35:
7c:c8:b7:43:c8:c7:41:ee:52:ed:dd:c2:d0:95:3b:
32:8f:6d:17:25:57:59:61:f1:48:de:e6:ad:81:59:
72:5d:c7:da:bb:44:63:b8:8c:94:4e:5e:f1:9f:dc:
2a:e5:49:3d:5f:27:68:f1:2a:3d:a8:93:db:28:14:
2c:c9:f0:47:d3:a4:c2:09:45:96:f2:21:52:4e:4a:
4a:11:2a:bb:f5:d2:c0:b7:05:75:50:4c:68:ba:2f:
00:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:11:DC:5D:AF:39:2F:0A:B8:09:2B:17:0E:5B:1E:1D:8F:C9:B8:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7c574db6-cce0-3959-aa9b-f0f35f6b42e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1015:b230::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:bb:d9:c0:c2:29:b7:8f:c8:72:4a:ce:00:25:c4:b8:aa:33:
4a:06:89:03:c2:29:7e:5f:b5:68:f5:1f:c5:49:57:b9:75:7e:
7c:b8:db:59:a9:c2:59:df:98:09:4a:55:8f:ff:2c:fe:a6:b5:
a8:eb:c0:2c:ec:1a:d3:81:be:cf:3f:1b:e3:0c:ee:7d:00:d8:
53:1e:4a:ec:50:6b:0b:63:82:d0:96:1e:0b:c5:65:e2:cb:25:
60:a3:7c:d8:1f:1d:78:00:42:df:b8:ce:5c:cd:95:c9:1a:14:
77:04:90:1a:c7:c4:c4:0d:1b:45:fa:ef:fd:af:f9:70:81:30:
c3:59:28:51:56:f6:8d:41:28:f5:d2:65:e5:c4:c4:f6:f3:3a:
49:d5:e6:97:77:f8:09:45:c4:68:5b:16:cb:ff:e3:e3:5d:ee:
60:e4:f4:e2:4e:3d:d9:f7:94:bf:4e:e3:6f:ee:f2:90:60:93:
0f:72:3a:90:a9:dc:20:c4:c9:00:dc:b8:e4:e8:93:04:e7:12:
64:83:fa:fa:5b:cd:2f:83:bd:99:6f:08:7e:58:ea:7d:e5:4d:
ce:c0:a9:19:e7:1f:75:76:cf:af:b8:28:d2:20:9a:f4:94:bf:
93:4a:8b:30:53:e1:78:39:61:2a:db:49:0f:2c:25:3f:a9:12:
f0:63:a7:8b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhpYISxDRnbk4LNfYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDEwMjE0MDA1MloXDTI1MDQwMjEzMDA1MlowLzEtMCsGA1UEAxMk
MTc1NGJjZWUtMjE0ZS00YmRkLWFiZDgtNTYyNzYzYmVlNmQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyCSYVl8BNOcljuvREQ1zQF8c5CM5seNCO/J
k4p45v3ieuoEesTNsuxHrhXisIy5QPlzKjwylhs2qOB/zPEJR5FQWU2yM55t7t52
cz/CQzfbUuSPs/WOZ33oTYwHgNECyUQravaSN39mgMGjKgsKe/ux5YMmuigVRiZi
J6Wkh2hMnCY/CJY081Z9TcXmld3KyN5FTg5w9KUouZ2uX9N4yqCvLzV8yLdDyMdB
7lLt3cLQlTsyj20XJVdZYfFI3uatgVlyXcfau0RjuIyUTl7xn9wq5Uk9Xydo8So9
qJPbKBQsyfBH06TCCUWW8iFSTkpKESq79dLAtwV1UExoui8A/QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHIR3F2vOS8KuAkrFw5bHh2PybiTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvN2M1NzRkYjYtY2NlMC0z
OTU5LWFhOWItZjBmMzVmNmI0MmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQFbIw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFu72cDCKbePyHJKzgAlxLiqM0oGiQPCKX5ftWj1H8VJV7l1fny4
21mpwlnfmAlKVY//LP6mtajrwCzsGtOBvs8/G+MM7n0A2FMeSuxQawtjgtCWHgvF
ZeLLJWCjfNgfHXgAQt+4zlzNlckaFHcEkBrHxMQNG0X67/2v+XCBMMNZKFFW9o1B
KPXSZeXExPbzOknV5pd3+AlFxGhbFsv/4+Nd7mDk9OJOPdn3lL9O42/u8pBgkw9y
OpCp3CDEyQDcuOTokwTnEmSD+vpbzS+DvZlvCH5Y6n3lTc7AqRnnH3V2z6+4KNIg
mvSUv5NKizBT4Xg5YSrbSQ8sJT+pEvBjp4s=
-----END CERTIFICATE-----
Generated at Fri Apr 25 23:46:06 2025 by rpki-client