Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/cce51543-b0dc-321d-9685-6861e58a4aa1.roa
File: cce51543-b0dc-321d-9685-6861e58a4aa1.roa (raw, json)
Hash identifier: 0Uv3DpkyKo1o7Q6YKJWOKONxZnoWPyMcFiEy9LJA1pI=
Subject key identifier: 78:25:C9:92:A5:C1:5D:57:8F:A7:DB:22:0E:A6:28:7E:42:68:D7:FF
Certificate issuer: /CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee
Certificate serial: 010D0C9F432858487755D650AEA3953D7C853A80
Authority key identifier: 9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/cce51543-b0dc-321d-9685-6861e58a4aa1.roa
Signing time: Tue 07 Jan 2025 14:00:53 +0000
ROA not before: Tue 07 Jan 2025 14:00:53 +0000
ROA not after: Mon 07 Apr 2025 13:00:53 +0000
asID: 950
IP address blocks: 2602:fc09:210::/44 maxlen: 48
2602:fc09:950::/44 maxlen: 48
2602:fc09:960::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:77:55:d6:50:ae:a3:95:3d:7c:85:3a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee
Validity
Not Before: Jan 7 14:00:53 2025 GMT
Not After : Apr 7 13:00:53 2025 GMT
Subject: CN=b1a91218-353a-4a79-b14d-67748532c4a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5d:fc:27:b4:a5:b0:30:b1:e9:ae:e9:3f:80:
e9:a5:10:1c:ce:79:b2:c4:53:32:8e:28:3e:7c:8f:
da:da:fb:cb:e3:28:42:d3:10:c1:b0:66:47:05:2d:
e9:eb:44:4d:35:61:ee:4c:5c:9a:83:ba:16:1b:5e:
bc:d4:1d:8d:04:bc:5d:5d:48:0d:fb:e1:45:68:8a:
56:58:62:52:e3:41:d9:37:f3:2d:9e:e2:0b:4b:ce:
32:f1:4e:29:f0:36:03:f8:34:53:a4:d1:b3:f6:5c:
dc:f0:f6:ca:d7:96:37:59:e2:d9:61:34:9e:b9:31:
1c:50:30:80:e0:5b:15:a5:e7:0e:51:f7:44:5c:f9:
22:ec:0f:9a:6c:97:5a:83:cd:86:c5:7b:fb:63:7b:
92:6d:48:90:ea:cc:aa:6f:b1:bb:cb:5b:a2:f8:66:
f5:a4:10:38:02:ae:2a:d3:e3:17:a8:29:8e:6a:9f:
57:ab:2a:9a:9d:8e:ba:3c:e8:f3:97:23:a1:49:21:
fb:6f:53:fd:fb:1a:3f:48:db:60:43:37:da:6e:8b:
35:c4:0c:0b:30:38:eb:87:a3:79:05:f8:ce:0f:36:
1a:fd:27:05:1c:4e:46:b4:3d:bb:99:18:13:98:5a:
cb:5a:d9:0c:c4:f3:6c:26:6a:61:28:df:ea:a4:d4:
6e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:25:C9:92:A5:C1:5D:57:8F:A7:DB:22:0E:A6:28:7E:42:68:D7:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/cce51543-b0dc-321d-9685-6861e58a4aa1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl
X509v3 Authority Key Identifier:
keyid:9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fc09:210::/44
2602:fc09:950::-2602:fc09:96f:ffff:ffff:ffff:ffff:ffff
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:cf:e2:57:da:94:0f:8b:68:57:52:b2:dd:70:a6:e4:a0:24:
62:65:26:5c:85:0e:2e:f0:71:ca:5a:87:ad:50:99:93:4e:e4:
78:cd:a1:ca:37:5b:cc:de:da:0c:e8:b7:64:c9:25:db:5e:87:
97:26:cd:05:0a:9e:dd:f1:2e:ad:6c:64:65:10:d6:2c:34:08:
83:50:23:51:74:e3:9f:0d:1f:9d:0a:b3:a1:66:d3:91:d3:fb:
01:58:29:e0:f0:6c:66:78:ed:18:56:5f:16:ab:57:74:72:54:
30:0c:2f:a8:07:eb:4c:3e:30:5b:25:d5:66:60:76:9d:78:fc:
ce:ff:a7:58:ee:a7:79:b0:38:32:65:fd:52:10:80:9e:ad:71:
e5:ec:84:b5:c8:8f:5a:d7:a0:65:e0:cf:80:3d:b1:f5:19:74:
66:8f:5f:cf:a5:17:c1:b2:83:92:6d:5c:ac:db:08:74:75:30:
a5:34:75:dc:37:41:bd:31:66:45:ff:57:47:6f:25:79:40:2f:
b4:89:19:8b:44:99:2b:9e:cb:29:c3:9d:d2:ad:58:bd:49:23:
eb:e5:39:a0:01:3a:81:51:e0:af:c7:74:90:7c:90:12:ed:b3:
06:f9:7f:9f:30:95:17:aa:8d:ce:55:70:fb:7e:9c:e2:a4:54:
36:26:28:fc
-----BEGIN CERTIFICATE-----
MIIGWjCCBUKgAwIBAgIUAQ0Mn0MoWEh3VdZQrqOVPXyFOoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTJlN2I5NmQtMGFhNS00MDJhLWIyZmUtMzM3ZDdjMjA3
ZWVlMB4XDTI1MDEwNzE0MDA1M1oXDTI1MDQwNzEzMDA1M1owLzEtMCsGA1UEAxMk
YjFhOTEyMTgtMzUzYS00YTc5LWIxNGQtNjc3NDg1MzJjNGE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArl38J7SlsDCx6a7pP4DppRAcznmyxFMyjig+
fI/a2vvL4yhC0xDBsGZHBS3p60RNNWHuTFyag7oWG1681B2NBLxdXUgN++FFaIpW
WGJS40HZN/MtnuILS84y8U4p8DYD+DRTpNGz9lzc8PbK15Y3WeLZYTSeuTEcUDCA
4FsVpecOUfdEXPki7A+abJdag82GxXv7Y3uSbUiQ6syqb7G7y1ui+Gb1pBA4Aq4q
0+MXqCmOap9XqyqanY66POjzlyOhSSH7b1P9+xo/SNtgQzfabos1xAwLMDjrh6N5
BfjODzYa/ScFHE5GtD27mRgTmFrLWtkMxPNsJmphKN/qpNRuaQIDAQABo4IDbDCC
A2gwHQYDVR0OBBYEFHglyZKlwV1Xj6fbIg6mKH5CaNf/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MmU3
Yjk2ZC0wYWE1LTQwMmEtYjJmZS0zMzdkN2MyMDdlZWUvY2NlNTE1NDMtYjBkYy0z
MjFkLTk2ODUtNjg2MWU1OGE0YWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTJlN2I5NmQtMGFhNS00MDJhLWIy
ZmUtMzM3ZDdjMjA3ZWVlLzUyZTdiOTZkLTBhYTUtNDAyYS1iMmZlLTMzN2Q3YzIw
N2VlZS5jcmwwHwYDVR0jBBgwFoAUm2pshpw0IMSPY6IRpANBGtJdnzEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81MmU3Yjk2ZC0wYWE1LTQwMmEtYjJmZS0zMzdk
N2MyMDdlZWUuY2VyMDYGCCsGAQUFBwEHAQH/BCcwJTAjBAIAAjAdAwcEJgL8CQIQ
MBIDBwQmAvwJCVADBwQmAvwJCWAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6
MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr
aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAAs/iV9qUD4toV1Ky3XCm5KAk
YmUmXIUOLvBxylqHrVCZk07keM2hyjdbzN7aDOi3ZMkl216HlybNBQqe3fEurWxk
ZRDWLDQIg1AjUXTjnw0fnQqzoWbTkdP7AVgp4PBsZnjtGFZfFqtXdHJUMAwvqAfr
TD4wWyXVZmB2nXj8zv+nWO6nebA4MmX9UhCAnq1x5eyEtciPWtegZeDPgD2x9Rl0
Zo9fz6UXwbKDkm1crNsIdHUwpTR13DdBvTFmRf9XR28leUAvtIkZi0SZK57LKcOd
0q1YvUkj6+U5oAE6gVHgr8d0kHyQEu2zBvl/nzCVF6qNzlVw+36c4qRUNiYo/A==
-----END CERTIFICATE-----
Generated at Sun Apr 27 06:00:12 2025 by rpki-client