Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/53d9dff6-9bae-3796-ac19-a81161eacb6c.roa
File: 53d9dff6-9bae-3796-ac19-a81161eacb6c.roa (raw, json)
Hash identifier: c8IN1cQwgvl6osqYM2c9RqqXnMsVbGqt9XjybWnkobw=
Subject key identifier: 2B:C8:B5:53:4F:B6:C6:E8:AF:85:66:E0:BD:00:CD:F9:B4:65:E9:F9
Certificate issuer: /CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Certificate serial: 010D0C9F432858482D5A91EC5670D65744E12200
Authority key identifier: CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/53d9dff6-9bae-3796-ac19-a81161eacb6c.roa
Signing time: Thu 12 Dec 2024 02:00:38 +0000
ROA not before: Thu 12 Dec 2024 02:00:38 +0000
ROA not after: Wed 12 Mar 2025 01:00:38 +0000
asID: 206216
IP address blocks: 2602:fb54:154::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2d:5a:91:ec:56:70:d6:57:44:e1:22:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Validity
Not Before: Dec 12 02:00:38 2024 GMT
Not After : Mar 12 01:00:38 2025 GMT
Subject: CN=b6965de8-7275-49e1-811f-8516519eea01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c6:c8:83:c9:a8:bd:0b:cf:64:79:14:54:5a:
cf:56:17:f5:61:b2:eb:fe:99:11:80:e8:dc:8a:42:
95:66:68:d4:33:70:7d:ac:c9:ca:1a:a5:19:42:84:
db:c2:4a:3f:fd:55:b7:4c:8f:54:d7:af:7a:6c:d3:
31:7a:d8:5f:01:f6:dd:9f:b0:04:0c:98:90:a1:ca:
67:41:88:7d:d9:15:30:b2:16:ad:35:ff:6d:1f:0f:
b8:c7:2c:ea:c3:fc:dd:2c:9a:f2:95:53:5e:11:42:
59:d1:33:e1:b7:eb:cc:59:5b:f9:34:0a:93:0c:5c:
bd:a2:50:b5:48:f3:be:cc:ba:c5:24:c0:71:0f:27:
54:05:da:e4:b2:ef:11:8b:59:97:0b:f7:a4:4a:4b:
72:82:f4:17:8c:df:65:7f:d3:a9:df:fe:12:56:aa:
0d:05:1d:8b:83:6a:1c:f3:e8:0d:80:a8:b3:24:43:
c4:fc:91:2e:60:65:28:21:65:c8:94:3b:e9:0e:38:
c2:6f:73:bb:5c:1d:be:94:06:f3:5d:f6:48:f7:69:
cd:90:e6:55:89:50:d6:72:0f:2f:94:ee:bf:7b:25:
04:0c:c5:84:79:8a:42:a1:b5:76:f3:1f:08:cd:fa:
63:02:a0:bd:7f:4a:26:1e:ac:fb:04:04:5b:a0:e9:
c1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C8:B5:53:4F:B6:C6:E8:AF:85:66:E0:BD:00:CD:F9:B4:65:E9:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/53d9dff6-9bae-3796-ac19-a81161eacb6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl
X509v3 Authority Key Identifier:
keyid:CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fb54:154::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c1:80:a4:1b:0c:19:aa:ea:ba:23:27:4f:9a:10:48:9a:15:3f:
6e:e0:6c:03:59:01:e9:01:90:68:d9:82:bd:1d:62:a5:ec:7d:
15:82:4e:c5:57:27:27:a5:b9:aa:b8:4e:9a:43:e4:8c:cf:41:
2c:00:d1:bf:dd:39:04:8f:32:5f:f9:7d:db:40:01:5a:62:31:
d5:91:b1:a0:28:ac:21:b8:e1:2f:64:52:57:f3:57:e6:5f:c4:
b8:ec:cf:af:cb:89:6a:8c:36:f5:f3:5a:6c:64:d8:42:4e:21:
1e:a6:70:dc:b4:29:7f:7a:dc:39:3d:04:77:cc:ad:05:79:49:
07:2c:38:81:23:be:c6:65:76:ae:3f:5a:44:a2:2d:7d:78:52:
e9:66:85:f1:94:1c:2e:c2:4e:f2:24:d2:39:fc:81:6c:54:71:
72:cf:f5:86:26:7d:d0:fc:65:e8:a1:f5:53:ba:2d:b9:96:98:
ef:eb:4d:d3:e4:1f:0c:cb:cf:a3:ab:cc:7a:86:99:c1:30:25:
24:ba:f8:a7:03:a5:fd:96:e3:c7:44:a3:a9:b0:bf:d3:ff:23:
31:3e:75:30:d0:40:d7:b3:bc:19:02:bf:64:01:38:28:45:ca:
16:aa:4f:3f:37:06:bc:a1:86:1e:f9:42:46:d4:58:a3:b7:a6:
cc:b9:ce:09
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgtWpHsVnDWV0ThIgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjc3OThhYmItNzExZC00ZjEwLWJjNDYtYmNlZWQwNTVl
MWZhMB4XDTI0MTIxMjAyMDAzOFoXDTI1MDMxMjAxMDAzOFowLzEtMCsGA1UEAxMk
YjY5NjVkZTgtNzI3NS00OWUxLTgxMWYtODUxNjUxOWVlYTAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48bIg8movQvPZHkUVFrPVhf1YbLr/pkRgOjc
ikKVZmjUM3B9rMnKGqUZQoTbwko//VW3TI9U1696bNMxethfAfbdn7AEDJiQocpn
QYh92RUwshatNf9tHw+4xyzqw/zdLJrylVNeEUJZ0TPht+vMWVv5NAqTDFy9olC1
SPO+zLrFJMBxDydUBdrksu8Ri1mXC/ekSktygvQXjN9lf9Op3/4SVqoNBR2Lg2oc
8+gNgKizJEPE/JEuYGUoIWXIlDvpDjjCb3O7XB2+lAbzXfZI92nNkOZViVDWcg8v
lO6/eyUEDMWEeYpCobV28x8IzfpjAqC9f0omHqz7BARboOnBtwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCvItVNPtsbor4Vm4L0Azfm0Zen5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mNzc5
OGFiYi03MTFkLTRmMTAtYmM0Ni1iY2VlZDA1NWUxZmEvNTNkOWRmZjYtOWJhZS0z
Nzk2LWFjMTktYTgxMTYxZWFjYjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjc3OThhYmItNzExZC00ZjEwLWJj
NDYtYmNlZWQwNTVlMWZhL2Y3Nzk4YWJiLTcxMWQtNGYxMC1iYzQ2LWJjZWVkMDU1
ZTFmYS5jcmwwHwYDVR0jBBgwFoAUzJA916o5BeznNQisy0X0bmW8HeEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9mNzc5OGFiYi03MTFkLTRmMTAtYmM0Ni1iY2Vl
ZDA1NWUxZmEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL7VAFU
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAMGApBsMGarquiMnT5oQSJoVP27gbANZAekBkGjZgr0dYqXsfRWC
TsVXJyeluaq4TppD5IzPQSwA0b/dOQSPMl/5fdtAAVpiMdWRsaAorCG44S9kUlfz
V+ZfxLjsz6/LiWqMNvXzWmxk2EJOIR6mcNy0KX963Dk9BHfMrQV5SQcsOIEjvsZl
dq4/WkSiLX14UulmhfGUHC7CTvIk0jn8gWxUcXLP9YYmfdD8Zeih9VO6LbmWmO/r
TdPkHwzLz6OrzHqGmcEwJSS6+KcDpf2W48dEo6mwv9P/IzE+dTDQQNezvBkCv2QB
OChFyhaqTz83Bryhhh75QkbUWKO3psy5zgk=
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:30:21 2025 by rpki-client