Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/0376af83-0954-3fac-af6b-98f0bdd7d351.roa
File: 0376af83-0954-3fac-af6b-98f0bdd7d351.roa (raw, json)
Hash identifier: mb5Zjqx9ziqrAe9eJZT9x3N7IH77ZPbOd6XZUAZ7OLs=
Subject key identifier: BB:D3:EB:A6:B5:96:44:74:21:53:AC:23:51:26:6F:35:C5:04:41:7B
Certificate issuer: /CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
Certificate serial: 010D0C9F432858486B121742977E235381E4BE00
Authority key identifier: B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/0376af83-0954-3fac-af6b-98f0bdd7d351.roa
Signing time: Fri 03 Jan 2025 04:34:50 +0000
ROA not before: Fri 03 Jan 2025 04:34:50 +0000
ROA not after: Thu 03 Apr 2025 03:34:50 +0000
asID: 44324
IP address blocks: 2602:f919:109::/48 maxlen: 48
2602:f919:110::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6b:12:17:42:97:7e:23:53:81:e4:be:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
Validity
Not Before: Jan 3 04:34:50 2025 GMT
Not After : Apr 3 03:34:50 2025 GMT
Subject: CN=6af2fe92-c16c-4ea8-bb68-82015aa11503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:10:a3:10:c6:70:d7:13:9f:4b:ae:07:65:c8:
74:a9:e8:2c:87:b3:c9:c3:61:2a:94:b7:1e:56:f9:
90:0d:04:38:e9:5c:98:16:e0:eb:ce:13:e0:75:fc:
5d:a1:8d:e4:bc:55:61:00:ce:0e:1f:04:7e:61:2c:
e9:3e:a8:d9:3b:32:81:ff:55:c2:9d:f2:eb:ae:fd:
e6:67:30:81:11:0a:7c:db:64:88:88:d3:ab:61:b3:
3c:35:a2:9e:b7:a8:a4:89:43:a4:17:b1:29:ab:50:
05:c8:06:d1:f7:3d:86:02:ce:8b:f7:4d:20:58:dd:
f5:81:19:7f:f8:93:05:7c:e6:2f:dc:e8:11:ff:b8:
76:8a:9c:10:8b:50:cf:17:12:e4:af:a2:0d:64:ab:
9a:a9:44:92:98:28:20:c9:03:68:dc:07:97:5c:ec:
c3:9a:c3:db:89:21:8f:ff:53:c4:e0:28:e0:07:bc:
ee:fb:89:14:af:55:e0:26:6e:1a:8c:a7:3a:63:56:
e3:b7:c1:3e:12:57:bc:ab:bf:69:fa:f8:27:8f:b2:
2c:81:23:69:51:28:86:d0:fa:35:79:89:e0:ac:e2:
02:46:e5:47:d0:a4:11:5a:5c:94:59:1c:ad:ce:e9:
13:a0:d1:a7:ea:4f:a4:2e:a7:2f:bb:58:89:53:79:
59:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D3:EB:A6:B5:96:44:74:21:53:AC:23:51:26:6F:35:C5:04:41:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/0376af83-0954-3fac-af6b-98f0bdd7d351.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl
X509v3 Authority Key Identifier:
keyid:B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f919:109::/48
2602:f919:110::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:59:6b:f0:2c:69:01:79:01:4a:fd:b7:76:54:d2:66:87:bd:
14:8d:c1:5b:91:dd:6e:51:26:ce:77:ae:2a:2a:75:99:95:5a:
3d:d1:9d:22:50:6e:43:b3:90:12:0a:14:8b:c6:b0:af:ad:74:
ff:b3:c8:21:9b:d1:86:03:4f:1e:78:26:cb:a7:0c:1b:57:49:
d2:e6:66:fe:92:07:68:50:e5:bd:cc:45:6f:93:8d:6e:a0:0b:
6d:72:95:15:c6:d6:48:22:1d:2b:a4:1e:90:11:bc:38:25:0c:
e9:f9:a6:a4:ba:70:a5:a8:10:a0:d5:b7:3d:e1:bf:1b:58:13:
e3:da:0a:34:b9:5c:63:39:e0:25:03:83:c4:20:94:a4:f9:9d:
0c:e6:b9:80:d4:8d:d3:c9:d9:0c:43:ae:9d:70:e5:c1:e7:7f:
6b:ab:88:66:41:cd:3d:e0:28:44:34:f8:5f:af:0d:27:14:c6:
2f:69:3f:08:b6:05:e4:97:d7:44:1c:ca:36:b1:c8:e7:41:6f:
df:e2:c3:69:c5:db:2e:96:06:87:81:3f:3c:f4:4a:99:54:c8:
85:4a:21:82:a1:c1:35:68:79:c9:e3:9b:88:a3:5e:64:71:74:
70:b6:e7:21:e2:77:bd:ae:e0:7c:4c:ab:33:c9:b3:d7:f6:ab:
cb:39:01:20
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEhrEhdCl34jU4HkvgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDg0OGNjOWItZTQ2Zi00ODVlLWIzZjItNGYzOTNiNWQ5
MmQ2MB4XDTI1MDEwMzA0MzQ1MFoXDTI1MDQwMzAzMzQ1MFowLzEtMCsGA1UEAxMk
NmFmMmZlOTItYzE2Yy00ZWE4LWJiNjgtODIwMTVhYTExNTAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRCjEMZw1xOfS64HZch0qegsh7PJw2EqlLce
VvmQDQQ46VyYFuDrzhPgdfxdoY3kvFVhAM4OHwR+YSzpPqjZOzKB/1XCnfLrrv3m
ZzCBEQp822SIiNOrYbM8NaKet6ikiUOkF7Epq1AFyAbR9z2GAs6L900gWN31gRl/
+JMFfOYv3OgR/7h2ipwQi1DPFxLkr6INZKuaqUSSmCggyQNo3AeXXOzDmsPbiSGP
/1PE4CjgB7zu+4kUr1XgJm4ajKc6Y1bjt8E+Ele8q79p+vgnj7IsgSNpUSiG0Po1
eYngrOICRuVH0KQRWlyUWRytzukToNGn6k+kLqcvu1iJU3lZCwIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFLvT66a1lkR0IVOsI1EmbzXFBEF7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80ODQ4
Y2M5Yi1lNDZmLTQ4NWUtYjNmMi00ZjM5M2I1ZDkyZDYvMDM3NmFmODMtMDk1NC0z
ZmFjLWFmNmItOThmMGJkZDdkMzUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNDg0OGNjOWItZTQ2Zi00ODVlLWIz
ZjItNGYzOTNiNWQ5MmQ2LzQ4NDhjYzliLWU0NmYtNDg1ZS1iM2YyLTRmMzkzYjVk
OTJkNi5jcmwwHwYDVR0jBBgwFoAUtipAlYdVr48BpEATPSLyFSu2jeswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS80ODQ4Y2M5Yi1lNDZmLTQ4NWUtYjNmMi00ZjM5
M2I1ZDkyZDYuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAJgL5GQEJ
AwcAJgL5GQEQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAFBZa/AsaQF5AUr9t3ZU0maHvRSNwVuR3W5RJs53
rioqdZmVWj3RnSJQbkOzkBIKFIvGsK+tdP+zyCGb0YYDTx54JsunDBtXSdLmZv6S
B2hQ5b3MRW+TjW6gC21ylRXG1kgiHSukHpARvDglDOn5pqS6cKWoEKDVtz3hvxtY
E+PaCjS5XGM54CUDg8QglKT5nQzmuYDUjdPJ2QxDrp1w5cHnf2uriGZBzT3gKEQ0
+F+vDScUxi9pPwi2BeSX10QcyjaxyOdBb9/iw2nF2y6WBoeBPzz0SplUyIVKIYKh
wTVoecnjm4ijXmRxdHC25yHid72u4HxMqzPJs9f2q8s5ASA=
-----END CERTIFICATE-----
Generated at Thu Apr 24 18:20:41 2025 by rpki-client