Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/4d1f008f-67a9-308d-9f82-30e56f078c23.roa
File: 4d1f008f-67a9-308d-9f82-30e56f078c23.roa (raw, json)
Hash identifier: ootmMP6IUTDfBYHUNDlXjRQc4x2luDFM9rlqoFPdBaA=
Subject key identifier: 1F:5D:AC:64:E7:14:23:DD:A5:6C:13:22:96:9C:16:71:98:15:BA:E3
Certificate issuer: /CN=b35fc23a-e422-4c61-a25a-b73b0963b6f7
Certificate serial: 010D0C9F432858481C9A8E38724B1ADADD512900
Authority key identifier: 8D:2F:5E:64:9C:37:77:AC:CC:4E:75:18:07:BF:9C:67:69:6A:1D:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/4d1f008f-67a9-308d-9f82-30e56f078c23.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 30690
IP address blocks: 2602:f99b:a0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:8e:38:72:4b:1a:da:dd:51:29:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b35fc23a-e422-4c61-a25a-b73b0963b6f7
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=ba3ad5f7-af5f-4dbc-9bc3-4dd32032ffbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e0:bf:56:91:d6:24:a5:cf:52:19:2b:6e:da:
a6:0f:48:c8:17:57:b8:03:68:ca:57:f3:b1:52:e1:
aa:e1:b2:3a:7b:69:32:fe:e4:3a:b6:f3:f8:e9:a2:
24:79:34:27:c3:79:36:2b:19:b2:2c:bd:0d:ef:c2:
a5:9c:ba:43:01:71:16:4b:37:c6:13:de:17:5d:24:
97:e8:df:10:6f:b6:bb:13:63:31:bd:28:01:f0:28:
ed:21:f0:ca:5a:b2:34:a0:aa:d0:6f:9b:e7:cc:3d:
a5:9c:95:c8:08:bc:1f:a6:f6:c9:e7:2d:8f:32:93:
49:f2:1f:88:6d:cc:d7:b6:58:e3:e4:3a:50:b5:57:
a9:54:b3:12:fa:50:f2:2e:b8:0f:d5:af:36:c9:a1:
bb:65:20:f1:f2:0b:be:4f:53:3f:57:a4:0b:35:8b:
08:15:f3:f4:28:d2:c7:cd:0d:e9:5d:30:8e:ee:98:
4c:29:55:75:37:aa:f7:a7:6b:2d:17:44:d2:68:53:
ed:23:34:e3:7e:ce:df:38:08:ff:9b:eb:f6:15:2c:
70:71:f0:5a:38:bb:b1:52:ba:69:e4:b0:db:9f:d0:
a8:a5:c7:17:58:4a:b5:fe:00:36:79:bb:11:cc:6e:
d5:b7:a0:fa:c3:ca:84:d0:f3:1e:e5:9a:8e:7f:d4:
a0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:5D:AC:64:E7:14:23:DD:A5:6C:13:22:96:9C:16:71:98:15:BA:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/4d1f008f-67a9-308d-9f82-30e56f078c23.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.crl
X509v3 Authority Key Identifier:
keyid:8D:2F:5E:64:9C:37:77:AC:CC:4E:75:18:07:BF:9C:67:69:6A:1D:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f99b:a0::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:2f:20:5e:dd:7b:00:57:9a:8a:cd:7b:1c:c6:b7:0d:bc:35:
2d:2f:8c:8d:5b:3d:9d:64:3d:09:2d:40:a9:89:c5:cc:8a:e0:
7a:93:b2:62:ba:c8:c8:88:7a:1b:56:c6:d2:97:b9:8a:1e:75:
82:ef:d4:79:85:de:5f:37:69:71:36:03:52:f8:68:36:7e:fa:
ca:b3:f9:78:59:4c:8f:f7:8a:8e:3c:63:c0:eb:ea:ae:a4:c0:
5d:54:fe:61:df:7f:21:19:2d:4d:54:12:27:41:ab:7b:2f:57:
2c:47:43:08:6e:be:d3:d8:ea:71:6f:93:ea:4e:78:f6:59:4d:
bf:52:4b:5f:6a:db:c7:26:37:c9:66:1f:31:11:0f:06:9b:52:
be:49:43:24:dd:f0:4a:c0:66:b6:f1:34:ca:4b:f4:39:eb:d0:
a6:18:df:6f:5e:3b:44:b0:43:b3:81:55:52:44:e3:85:6e:3e:
4b:09:1f:c3:c3:1e:2c:b8:ed:26:23:c7:9c:69:57:85:89:71:
01:59:43:0e:c1:80:60:0e:83:45:4f:33:31:df:88:6e:52:13:
b0:b0:d6:44:d6:ca:10:27:61:75:bb:97:eb:07:47:ef:78:33:
74:dc:35:9c:19:06:96:b3:10:a4:4f:72:c5:ee:71:01:80:ab:
ec:e5:32:00
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgcmo44cksa2t1RKQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjM1ZmMyM2EtZTQyMi00YzYxLWEyNWEtYjczYjA5NjNi
NmY3MB4XDTI0MTIwNjAyMDAzOVoXDTI1MDMwNjAyMDAzOVowLzEtMCsGA1UEAxMk
YmEzYWQ1ZjctYWY1Zi00ZGJjLTliYzMtNGRkMzIwMzJmZmJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOC/VpHWJKXPUhkrbtqmD0jIF1e4A2jKV/Ox
UuGq4bI6e2ky/uQ6tvP46aIkeTQnw3k2KxmyLL0N78KlnLpDAXEWSzfGE94XXSSX
6N8Qb7a7E2MxvSgB8CjtIfDKWrI0oKrQb5vnzD2lnJXICLwfpvbJ5y2PMpNJ8h+I
bczXtljj5DpQtVepVLMS+lDyLrgP1a82yaG7ZSDx8gu+T1M/V6QLNYsIFfP0KNLH
zQ3pXTCO7phMKVV1N6r3p2stF0TSaFPtIzTjfs7fOAj/m+v2FSxwcfBaOLuxUrpp
5LDbn9CopccXWEq1/gA2ebsRzG7Vt6D6w8qE0PMe5ZqOf9SgYQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFB9drGTnFCPdpWwTIpacFnGYFbrjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iMzVm
YzIzYS1lNDIyLTRjNjEtYTI1YS1iNzNiMDk2M2I2ZjcvNGQxZjAwOGYtNjdhOS0z
MDhkLTlmODItMzBlNTZmMDc4YzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjM1ZmMyM2EtZTQyMi00YzYxLWEy
NWEtYjczYjA5NjNiNmY3L2IzNWZjMjNhLWU0MjItNGM2MS1hMjVhLWI3M2IwOTYz
YjZmNy5jcmwwHwYDVR0jBBgwFoAUjS9eZJw3d6zMTnUYB7+cZ2lqHf4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9iMzVmYzIzYS1lNDIyLTRjNjEtYTI1YS1iNzNi
MDk2M2I2ZjcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5mwCg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJMvIF7dewBXmorNexzGtw28NS0vjI1bPZ1kPQktQKmJxcyK4HqT
smK6yMiIehtWxtKXuYoedYLv1HmF3l83aXE2A1L4aDZ++sqz+XhZTI/3io48Y8Dr
6q6kwF1U/mHffyEZLU1UEidBq3svVyxHQwhuvtPY6nFvk+pOePZZTb9SS19q28cm
N8lmHzERDwabUr5JQyTd8ErAZrbxNMpL9Dnr0KYY329eO0SwQ7OBVVJE44VuPksJ
H8PDHiy47SYjx5xpV4WJcQFZQw7BgGAOg0VPMzHfiG5SE7Cw1kTWyhAnYXW7l+sH
R+94M3TcNZwZBpazEKRPcsXucQGAq+zlMgA=
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:50:28 2025 by rpki-client