Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/b0c012f4-baa2-3789-9ae9-0736d044aafe.roa
File: b0c012f4-baa2-3789-9ae9-0736d044aafe.roa (raw, json)
Hash identifier: k0TSvNiakX/vJTMjGW8XWkdRHXKoPRjpo5XZLPMiWEU=
Subject key identifier: B8:97:15:EA:97:42:41:D1:D6:62:2E:F6:10:A5:EA:2D:7C:46:39:A5
Certificate issuer: /CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Certificate serial: 010D0C9F4328584871C06D3292D0E373424291C0
Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/b0c012f4-baa2-3789-9ae9-0736d044aafe.roa
Signing time: Sun 05 Jan 2025 14:00:52 +0000
ROA not before: Sun 05 Jan 2025 14:00:52 +0000
ROA not after: Sat 05 Apr 2025 13:00:52 +0000
asID: 27281
IP address blocks: 2620:116:800a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:71:c0:6d:32:92:d0:e3:73:42:42:91:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Validity
Not Before: Jan 5 14:00:52 2025 GMT
Not After : Apr 5 13:00:52 2025 GMT
Subject: CN=71d5a574-d986-4da1-8f3d-42742ed09ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c0:2d:6c:ed:ab:ac:05:2d:87:51:14:b6:a4:
2f:18:0c:c7:d6:be:a0:e8:9f:3c:6d:79:86:30:e4:
64:b0:ca:aa:d9:99:7f:17:2e:c4:67:61:d1:ba:6a:
d2:39:a4:4b:88:f6:c6:da:54:59:d5:0d:c4:b7:40:
4b:45:eb:5e:81:21:d8:a0:42:2f:a7:52:3d:90:86:
22:2e:0c:8b:6a:7a:67:b2:94:25:16:5b:27:e6:a6:
39:d2:a7:74:81:ce:fa:d8:12:7e:3b:62:ef:3a:36:
97:8d:bd:a7:83:84:4a:26:c5:28:fd:a0:5c:d5:13:
88:58:77:af:1a:78:90:e6:67:e1:63:90:93:5c:8b:
97:ce:0e:a6:5d:eb:b7:9f:40:cf:8c:4c:95:99:27:
3b:0f:b6:29:b6:d6:ed:69:1a:95:fe:92:71:37:1b:
3e:e8:25:44:af:1f:27:fa:9a:23:4f:cd:0a:e1:e3:
0b:f7:31:dc:bc:41:d9:ac:3a:1a:75:7b:1a:d5:6b:
98:f8:d2:7f:2f:25:ee:ef:52:c4:b0:05:19:06:44:
05:76:1f:19:1e:4e:74:00:e0:ca:84:37:56:cd:26:
c4:d0:19:57:57:3d:09:f5:46:4b:c5:1c:69:6e:73:
d9:25:1d:e7:47:d9:1c:4d:b8:10:d2:97:51:e0:f7:
48:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:97:15:EA:97:42:41:D1:D6:62:2E:F6:10:A5:EA:2D:7C:46:39:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/b0c012f4-baa2-3789-9ae9-0736d044aafe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl
X509v3 Authority Key Identifier:
keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:116:800a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bc:d2:82:b6:97:c4:b2:ca:9a:5d:5d:0c:41:49:19:1d:bd:1a:
fd:b6:a3:88:42:36:19:20:67:7c:04:5f:59:b4:75:23:bf:72:
06:d9:a0:ed:3d:65:4d:80:97:c0:d2:2c:70:25:90:ff:8e:08:
10:7d:46:9e:a7:e3:8c:d3:88:4e:d5:3e:ae:a6:a2:8b:aa:8c:
11:71:70:32:60:54:ad:a2:af:07:bd:87:18:f5:85:e3:fd:37:
85:0b:3f:e7:6d:12:4c:8d:7c:ca:7a:8e:a5:dd:fd:54:84:73:
84:ea:9e:95:e2:f9:35:59:d8:1f:b0:16:6a:2f:3f:5e:4e:62:
38:33:b4:7e:ce:a7:18:c8:87:06:22:b3:f0:ec:c6:56:4b:e4:
fe:e3:49:b8:ab:6b:64:20:5a:8f:19:9c:9d:ea:2f:70:47:c0:
a1:02:0a:f0:e1:af:69:25:b1:52:fe:f5:b3:5f:2f:ae:0a:a9:
00:a2:c2:49:9c:cd:46:41:95:41:42:f4:fc:26:98:a6:10:e7:
bb:2e:ca:1b:d8:c6:df:ba:21:60:37:23:c8:8d:e5:07:bc:4c:
53:9b:58:4e:a9:81:23:ef:a6:55:02:01:64:a1:42:9d:fa:a3:
8d:fa:11:e6:61:26:91:21:da:68:bb:d8:57:35:2e:55:a5:44:
79:0f:4f:e8
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhxwG0yktDjc0JCkcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFkMjJjM2QtM2MxNC00MmI3LWEzMjQtYjFiYjIxNjQ5
Mzc4MB4XDTI1MDEwNTE0MDA1MloXDTI1MDQwNTEzMDA1MlowLzEtMCsGA1UEAxMk
NzFkNWE1NzQtZDk4Ni00ZGExLThmM2QtNDI3NDJlZDA5YWM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscAtbO2rrAUth1EUtqQvGAzH1r6g6J88bXmG
MORksMqq2Zl/Fy7EZ2HRumrSOaRLiPbG2lRZ1Q3Et0BLRetegSHYoEIvp1I9kIYi
LgyLanpnspQlFlsn5qY50qd0gc762BJ+O2LvOjaXjb2ng4RKJsUo/aBc1ROIWHev
GniQ5mfhY5CTXIuXzg6mXeu3n0DPjEyVmSc7D7YpttbtaRqV/pJxNxs+6CVErx8n
+pojT80K4eML9zHcvEHZrDoadXsa1WuY+NJ/LyXu71LEsAUZBkQFdh8ZHk50AODK
hDdWzSbE0BlXVz0J9UZLxRxpbnPZJR3nR9kcTbgQ0pdR4PdITwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLiXFeqXQkHR1mIu9hCl6i18RjmlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQy
MmMzZC0zYzE0LTQyYjctYTMyNC1iMWJiMjE2NDkzNzgvYjBjMDEyZjQtYmFhMi0z
Nzg5LTlhZTktMDczNmQwNDRhYWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWFkMjJjM2QtM2MxNC00MmI3LWEz
MjQtYjFiYjIxNjQ5Mzc4L2FhZDIyYzNkLTNjMTQtNDJiNy1hMzI0LWIxYmIyMTY0
OTM3OC5jcmwwHwYDVR0jBBgwFoAUZ66XP5KwZsQ2EdR60iR6b6xVsUMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQyMmMzZC0zYzE0LTQyYjctYTMyNC1iMWJi
MjE2NDkzNzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABFoAK
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALzSgraXxLLKml1dDEFJGR29Gv22o4hCNhkgZ3wEX1m0dSO/cgbZ
oO09ZU2Al8DSLHAlkP+OCBB9Rp6n44zTiE7VPq6moouqjBFxcDJgVK2irwe9hxj1
heP9N4ULP+dtEkyNfMp6jqXd/VSEc4TqnpXi+TVZ2B+wFmovP15OYjgztH7OpxjI
hwYis/DsxlZL5P7jSbira2QgWo8ZnJ3qL3BHwKECCvDhr2klsVL+9bNfL64KqQCi
wkmczUZBlUFC9PwmmKYQ57suyhvYxt+6IWA3I8iN5Qe8TFObWE6pgSPvplUCAWSh
Qp36o436EeZhJpEh2mi72Fc1LlWlRHkPT+g=
-----END CERTIFICATE-----
Generated at Fri Apr 25 23:35:24 2025 by rpki-client