Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c81fa5f-3f6d-47db-a504-aceb54f93c28/85899aac-123c-38d4-9753-27300cdd4d92.roa
File: 85899aac-123c-38d4-9753-27300cdd4d92.roa (raw, json)
Hash identifier: 0Ob5bwhVxPMm5RmvJckC5Ji2ONXB2eaKtz8LtqhbNyQ=
Subject key identifier: F2:28:83:AF:F0:E0:62:33:60:F7:5E:AC:29:A2:BA:6B:7B:CA:0E:67
Certificate issuer: /CN=4c81fa5f-3f6d-47db-a504-aceb54f93c28
Certificate serial: 010D0C9F43285848090FA4FCDCF401CEB5E9EE00
Authority key identifier: FF:52:D5:49:D2:57:57:81:09:49:15:FC:0F:18:CF:61:E7:D7:E9:14
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c81fa5f-3f6d-47db-a504-aceb54f93c28.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c81fa5f-3f6d-47db-a504-aceb54f93c28/85899aac-123c-38d4-9753-27300cdd4d92.roa
Signing time: Fri 29 Nov 2024 02:00:39 +0000
ROA not before: Fri 29 Nov 2024 02:00:39 +0000
ROA not after: Thu 27 Feb 2025 02:00:39 +0000
asID: 34
IP address blocks: 2604:580::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:09:0f:a4:fc:dc:f4:01:ce:b5:e9:ee:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c81fa5f-3f6d-47db-a504-aceb54f93c28
Validity
Not Before: Nov 29 02:00:39 2024 GMT
Not After : Feb 27 02:00:39 2025 GMT
Subject: CN=afec3d1d-df1a-4160-bad1-4312e1485a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:44:9d:42:b6:dd:a7:71:3c:a5:5e:20:e1:73:
70:53:ce:75:98:d8:68:3d:02:44:b8:00:30:02:ca:
aa:91:9d:3d:8a:47:74:2d:e8:5c:48:d0:22:7f:bb:
d2:a3:52:8e:e7:23:23:33:cd:43:5d:5d:e1:33:dd:
02:fc:34:01:46:99:47:cc:99:1e:cc:00:96:c3:67:
ab:bb:70:f9:95:f4:b2:a1:37:3e:bf:6b:0c:17:cb:
94:b3:e7:16:e4:17:5e:e1:d0:50:68:7d:e4:05:71:
96:88:48:d3:e8:23:a5:11:34:0e:8b:ef:ed:03:97:
c7:9c:9f:62:c2:43:9a:fd:c8:3c:f6:d2:e3:38:cc:
8f:b4:f6:4a:63:28:49:cb:91:77:db:43:bd:81:ab:
c8:c5:79:bf:16:c6:27:a1:4d:5e:20:70:b6:3b:d9:
04:d1:60:ff:b0:73:18:bb:fe:11:5d:30:b1:46:e4:
a7:cb:60:09:3a:b0:89:f6:7b:70:47:cf:88:62:65:
de:e1:91:9c:c0:b8:0b:ca:eb:99:b5:fc:6f:82:22:
ae:91:d3:68:53:b7:73:68:04:12:68:22:7d:e7:79:
3b:f2:bc:e6:1a:98:08:34:51:ea:2a:da:95:fb:11:
98:28:d4:4c:6d:75:66:50:eb:87:87:a2:bf:ce:a1:
80:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:28:83:AF:F0:E0:62:33:60:F7:5E:AC:29:A2:BA:6B:7B:CA:0E:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c81fa5f-3f6d-47db-a504-aceb54f93c28/85899aac-123c-38d4-9753-27300cdd4d92.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c81fa5f-3f6d-47db-a504-aceb54f93c28/4c81fa5f-3f6d-47db-a504-aceb54f93c28.crl
X509v3 Authority Key Identifier:
keyid:FF:52:D5:49:D2:57:57:81:09:49:15:FC:0F:18:CF:61:E7:D7:E9:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c81fa5f-3f6d-47db-a504-aceb54f93c28.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:580::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:7f:73:c2:3d:dd:d1:79:9e:fb:92:eb:15:6c:1d:37:15:fd:
0a:b0:92:c1:8b:60:33:5f:e6:9d:fd:5a:24:86:93:d1:f4:47:
80:62:4a:51:75:0f:40:5a:81:ba:78:9c:79:db:bd:a0:87:46:
37:a1:df:c8:61:04:0f:80:bc:88:df:31:5b:f4:b4:5d:d3:a7:
dc:aa:04:15:87:f8:6e:25:e1:4b:be:ee:2e:66:d6:dd:89:be:
e8:c4:e1:d7:62:d8:0a:3c:7f:e1:c2:b7:bd:a6:8f:aa:80:34:
f2:33:cd:0b:60:98:21:28:e7:a0:87:b3:38:eb:7b:60:6d:12:
a5:88:6c:c2:6d:19:84:c4:3f:a6:2e:42:c9:87:df:52:1a:d7:
80:9c:12:46:88:a3:84:3d:1c:d1:c4:1d:af:2c:4f:6c:b2:ad:
ac:05:37:8e:40:bf:4c:17:cb:c1:c1:f9:02:c8:f5:c9:f0:6a:
b2:cf:b6:96:74:4b:13:bb:30:dd:e9:70:00:f6:db:4e:f6:ee:
8d:94:97:f9:0a:a5:e6:93:b5:53:84:51:ff:2a:12:3e:e0:94:
46:3c:a3:22:59:11:89:4c:4e:be:1c:67:c0:3a:d5:3f:18:0e:
c8:28:89:ac:23:c5:48:7f:55:2c:f0:6f:b3:13:ff:b4:97:41:
f2:b3:d8:2f
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEgJD6T83PQBzrXp7gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGM4MWZhNWYtM2Y2ZC00N2RiLWE1MDQtYWNlYjU0Zjkz
YzI4MB4XDTI0MTEyOTAyMDAzOVoXDTI1MDIyNzAyMDAzOVowLzEtMCsGA1UEAxMk
YWZlYzNkMWQtZGYxYS00MTYwLWJhZDEtNDMxMmUxNDg1YTgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0SdQrbdp3E8pV4g4XNwU851mNhoPQJEuAAw
AsqqkZ09ikd0LehcSNAif7vSo1KO5yMjM81DXV3hM90C/DQBRplHzJkezACWw2er
u3D5lfSyoTc+v2sMF8uUs+cW5Bde4dBQaH3kBXGWiEjT6COlETQOi+/tA5fHnJ9i
wkOa/cg89tLjOMyPtPZKYyhJy5F320O9gavIxXm/FsYnoU1eIHC2O9kE0WD/sHMY
u/4RXTCxRuSny2AJOrCJ9ntwR8+IYmXe4ZGcwLgLyuuZtfxvgiKukdNoU7dzaAQS
aCJ953k78rzmGpgINFHqKtqV+xGYKNRMbXVmUOuHh6K/zqGAxQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFPIog6/w4GIzYPderCmiumt7yg5nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80Yzgx
ZmE1Zi0zZjZkLTQ3ZGItYTUwNC1hY2ViNTRmOTNjMjgvODU4OTlhYWMtMTIzYy0z
OGQ0LTk3NTMtMjczMDBjZGQ0ZDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGM4MWZhNWYtM2Y2ZC00N2RiLWE1
MDQtYWNlYjU0ZjkzYzI4LzRjODFmYTVmLTNmNmQtNDdkYi1hNTA0LWFjZWI1NGY5
M2MyOC5jcmwwHwYDVR0jBBgwFoAU/1LVSdJXV4EJSRX8DxjPYefX6RQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC80YzgxZmE1Zi0zZjZkLTQ3ZGItYTUwNC1hY2Vi
NTRmOTNjMjguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQFgDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBNf3PCPd3ReZ77kusVbB03Ff0KsJLBi2AzX+ad/VokhpPR9EeAYkpR
dQ9AWoG6eJx5272gh0Y3od/IYQQPgLyI3zFb9LRd06fcqgQVh/huJeFLvu4uZtbd
ib7oxOHXYtgKPH/hwre9po+qgDTyM80LYJghKOegh7M463tgbRKliGzCbRmExD+m
LkLJh99SGteAnBJGiKOEPRzRxB2vLE9ssq2sBTeOQL9MF8vBwfkCyPXJ8Gqyz7aW
dEsTuzDd6XAA9ttO9u6NlJf5CqXmk7VThFH/KhI+4JRGPKMiWRGJTE6+HGfAOtU/
GA7IKImsI8VIf1Us8G+zE/+0l0Hys9gv
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:50:42 2025 by rpki-client