Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/b155efeb-d3dc-31be-bdce-c8768e417775.roa
File: b155efeb-d3dc-31be-bdce-c8768e417775.roa (raw, json)
Hash identifier: 0Q/+3l/wkiDkucB5/OV1iN1KWNoHFBvW1ddU080rdY4=
Subject key identifier: BD:B0:C1:5C:60:3D:49:EB:34:04:ED:61:11:CD:10:B5:7B:53:62:F5
Certificate issuer: /CN=8cfc4370-50a0-4da6-9b19-eea3a1988688
Certificate serial: 010D0C9F43285848573AD0180F2F79EA64204900
Authority key identifier: D3:00:C3:FC:5E:17:79:75:E4:F3:42:7D:B7:D3:5A:8F:94:91:9B:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/b155efeb-d3dc-31be-bdce-c8768e417775.roa
Signing time: Fri 27 Dec 2024 02:00:40 +0000
ROA not before: Fri 27 Dec 2024 02:00:40 +0000
ROA not after: Thu 27 Mar 2025 01:00:40 +0000
asID: 401100
IP address blocks: 2602:f972:ff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:57:3a:d0:18:0f:2f:79:ea:64:20:49:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cfc4370-50a0-4da6-9b19-eea3a1988688
Validity
Not Before: Dec 27 02:00:40 2024 GMT
Not After : Mar 27 01:00:40 2025 GMT
Subject: CN=7ec097cf-c367-46d8-8541-cf5d4096828a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:41:2e:f5:dc:b4:30:3e:19:cf:63:e1:74:8c:
39:e0:1f:67:da:f1:20:a4:e7:8e:c0:65:c6:71:06:
c0:62:10:54:a4:1f:6b:3c:b7:81:47:b9:56:89:85:
01:dd:f4:24:5b:9e:ab:1c:24:c9:48:25:ca:9a:f7:
a7:6f:43:e3:36:41:1d:1d:5f:07:a0:9a:37:15:12:
f4:c0:55:51:2a:32:86:4a:94:f4:d1:94:57:fd:e3:
15:bf:05:78:3f:4e:4a:62:0f:15:96:b2:12:bd:8e:
2d:d0:c8:a6:b1:c1:1d:85:2c:b1:23:7d:0d:b0:73:
bc:59:6c:47:27:0a:97:f0:04:c9:4b:1e:11:ad:e3:
b5:71:8c:78:b1:ff:7c:6a:8e:92:4d:60:8b:3b:0a:
ac:a0:92:b4:c3:90:3f:8d:3e:c1:9b:fe:7a:87:e4:
c0:8e:35:b9:84:e8:b4:4f:08:1b:c9:49:4d:04:33:
1d:46:dd:cc:f7:b3:a6:07:1c:63:ee:fb:42:7b:51:
51:27:8c:df:90:e4:94:74:a5:cd:ad:db:f6:d1:12:
3b:e8:f4:2c:3e:e6:16:92:ff:c8:9e:9a:af:4b:6c:
75:a2:bc:39:64:22:13:ad:b7:da:7d:5f:b8:c9:7a:
8a:db:7d:2a:98:a4:54:13:21:90:c7:b4:df:ea:6a:
b5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B0:C1:5C:60:3D:49:EB:34:04:ED:61:11:CD:10:B5:7B:53:62:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/b155efeb-d3dc-31be-bdce-c8768e417775.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.crl
X509v3 Authority Key Identifier:
keyid:D3:00:C3:FC:5E:17:79:75:E4:F3:42:7D:B7:D3:5A:8F:94:91:9B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f972:ff::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:ac:79:df:4c:db:83:f3:e0:66:65:fa:b1:3d:0a:31:31:40:
f6:de:15:72:90:d9:40:1e:16:3b:04:74:0d:e8:ad:86:66:a7:
a8:76:68:73:39:2d:9c:83:d0:1c:e1:ec:ac:78:84:19:7e:4c:
12:02:ca:49:37:09:21:37:85:24:b3:a1:dd:f2:6f:47:37:84:
3d:a7:ab:15:1e:af:6b:64:be:38:dd:18:79:e4:82:85:77:c2:
cf:92:71:b3:c2:87:b0:a7:94:82:2e:ef:25:1b:a3:6e:31:de:
24:02:b5:39:3a:79:62:b9:ba:5f:1b:0b:a6:f9:58:f3:42:a5:
d6:af:57:21:b2:cc:b4:42:68:1d:07:3d:44:2e:e4:23:25:05:
5b:37:15:5e:d6:ac:63:ba:13:c6:e6:c1:3b:43:cd:f3:44:4d:
32:bb:42:6e:e8:49:0d:b9:54:25:33:ca:bf:b2:28:e0:6a:79:
1f:41:f6:17:56:5b:6c:4a:50:46:ed:f4:63:9b:74:bd:f1:b5:
b1:1b:d9:e0:04:34:dd:c5:d2:f0:a8:8e:a1:a1:06:e8:19:f9:
6c:df:89:a2:9e:be:c5:b7:fe:80:83:09:1b:2b:aa:86:39:54:
17:b9:ae:89:bc:72:20:cc:bd:20:70:d9:c2:5d:08:8c:1b:b0:
4a:c0:0e:e3
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhXOtAYDy956mQgSQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGNmYzQzNzAtNTBhMC00ZGE2LTliMTktZWVhM2ExOTg4
Njg4MB4XDTI0MTIyNzAyMDA0MFoXDTI1MDMyNzAxMDA0MFowLzEtMCsGA1UEAxMk
N2VjMDk3Y2YtYzM2Ny00NmQ4LTg1NDEtY2Y1ZDQwOTY4MjhhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkEu9dy0MD4Zz2PhdIw54B9n2vEgpOeOwGXG
cQbAYhBUpB9rPLeBR7lWiYUB3fQkW56rHCTJSCXKmvenb0PjNkEdHV8HoJo3FRL0
wFVRKjKGSpT00ZRX/eMVvwV4P05KYg8VlrISvY4t0MimscEdhSyxI30NsHO8WWxH
JwqX8ATJSx4RreO1cYx4sf98ao6STWCLOwqsoJK0w5A/jT7Bm/56h+TAjjW5hOi0
TwgbyUlNBDMdRt3M97OmBxxj7vtCe1FRJ4zfkOSUdKXNrdv20RI76PQsPuYWkv/I
npqvS2x1orw5ZCITrbfafV+4yXqK230qmKRUEyGQx7Tf6mq1RQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFL2wwVxgPUnrNATtYRHNELV7U2L1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84Y2Zj
NDM3MC01MGEwLTRkYTYtOWIxOS1lZWEzYTE5ODg2ODgvYjE1NWVmZWItZDNkYy0z
MWJlLWJkY2UtYzg3NjhlNDE3Nzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGNmYzQzNzAtNTBhMC00ZGE2LTli
MTktZWVhM2ExOTg4Njg4LzhjZmM0MzcwLTUwYTAtNGRhNi05YjE5LWVlYTNhMTk4
ODY4OC5jcmwwHwYDVR0jBBgwFoAU0wDD/F4XeXXk80J9t9Naj5SRmzwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC84Y2ZjNDM3MC01MGEwLTRkYTYtOWIxOS1lZWEz
YTE5ODg2ODguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5cgD/
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAL2sed9M24Pz4GZl+rE9CjExQPbeFXKQ2UAeFjsEdA3orYZmp6h2
aHM5LZyD0Bzh7Kx4hBl+TBICykk3CSE3hSSzod3yb0c3hD2nqxUer2tkvjjdGHnk
goV3ws+ScbPCh7CnlIIu7yUbo24x3iQCtTk6eWK5ul8bC6b5WPNCpdavVyGyzLRC
aB0HPUQu5CMlBVs3FV7WrGO6E8bmwTtDzfNETTK7Qm7oSQ25VCUzyr+yKOBqeR9B
9hdWW2xKUEbt9GObdL3xtbEb2eAENN3F0vCojqGhBugZ+WzfiaKevsW3/oCDCRsr
qoY5VBe5rom8ciDMvSBw2cJdCIwbsErADuM=
-----END CERTIFICATE-----
Generated at Mon Apr 28 16:45:04 2025 by rpki-client