Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/4cb51156-681b-3b02-bfaf-14a78060c1f2.roa
File: 4cb51156-681b-3b02-bfaf-14a78060c1f2.roa (raw, json)
Hash identifier: sH+PJt8HCyu4uUHm9z0kKQLDU44D7mWxG4R1s9vilqs=
Subject key identifier: 73:11:37:C8:A5:7D:DE:60:C5:F5:FA:0B:73:01:9F:FC:BB:7B:41:B6
Certificate issuer: /CN=9de2e0c2-2707-42c9-b26d-59fe7d0b342f
Certificate serial: 010D0C9F43285848573AD81BE3DFF1576E2A05F8
Authority key identifier: 44:24:09:83:D6:FE:E5:17:5D:60:BD:AC:DC:B3:27:E5:CC:C5:BF:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/4cb51156-681b-3b02-bfaf-14a78060c1f2.roa
Signing time: Fri 27 Dec 2024 02:00:40 +0000
ROA not before: Fri 27 Dec 2024 02:00:40 +0000
ROA not after: Thu 27 Mar 2025 01:00:40 +0000
asID: 399542
IP address blocks: 2602:f8ef:fb::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:57:3a:d8:1b:e3:df:f1:57:6e:2a:05:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9de2e0c2-2707-42c9-b26d-59fe7d0b342f
Validity
Not Before: Dec 27 02:00:40 2024 GMT
Not After : Mar 27 01:00:40 2025 GMT
Subject: CN=3e8c3134-7518-4add-bb4c-662452021e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3e:d6:30:d0:41:20:04:60:27:47:09:6f:9b:
4f:f0:01:8a:aa:b9:9c:71:82:18:ab:f4:1f:f9:a2:
94:81:9a:fa:1a:da:14:97:3b:e6:8f:88:1a:35:35:
92:22:13:48:f0:c4:6b:f3:0b:d5:6c:f1:59:3a:7d:
b9:ee:15:7d:3f:72:e4:c3:37:80:b9:b8:fc:05:c9:
e2:1c:d4:19:91:ed:91:8b:e5:77:8c:82:29:6d:87:
52:64:a0:01:58:7c:5e:fb:29:19:30:a9:c2:72:f1:
5c:82:d1:17:0a:c6:11:2b:21:19:f0:11:fe:ed:95:
d1:63:cc:64:68:75:e4:70:c0:c8:87:f8:e1:37:14:
8b:60:d7:41:3a:4d:88:16:0b:db:7f:34:fd:db:29:
f6:e2:4a:dc:46:3a:8c:1a:54:5a:72:30:05:8a:18:
0f:56:69:00:75:95:fd:c5:71:6c:cb:d8:c5:44:d1:
c8:e8:5d:ca:25:ca:8b:e6:98:a0:14:d4:c4:74:97:
a6:1e:57:eb:c7:6c:de:7f:82:7d:ca:ec:af:f9:71:
fe:f5:b9:cb:25:b5:bc:9e:78:dd:3d:8c:ce:79:cc:
db:23:4b:f7:93:e3:e5:4e:67:a6:d7:c6:7d:cf:88:
a2:0a:54:f0:2c:62:fa:69:13:3c:de:3c:90:53:02:
52:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:11:37:C8:A5:7D:DE:60:C5:F5:FA:0B:73:01:9F:FC:BB:7B:41:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/4cb51156-681b-3b02-bfaf-14a78060c1f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.crl
X509v3 Authority Key Identifier:
keyid:44:24:09:83:D6:FE:E5:17:5D:60:BD:AC:DC:B3:27:E5:CC:C5:BF:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f8ef:fb::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:58:f6:91:e8:e4:7e:b9:2c:0d:9a:6b:7f:1e:07:f7:9c:fa:
52:2a:85:68:0f:f3:3c:a6:ae:29:93:af:da:4b:14:a2:16:fe:
2e:43:fd:79:da:27:14:f9:b7:3d:9a:39:5a:ff:31:93:4a:57:
a0:54:45:87:c3:d9:b5:6f:43:a1:e4:6b:2f:a8:c7:38:ec:43:
53:7c:0b:7d:b5:5c:73:1c:80:fb:2c:e8:f8:5a:34:7d:60:07:
a7:63:54:e9:92:89:c7:ce:c5:e3:66:30:19:92:29:35:ec:18:
e3:8e:df:63:f2:c3:30:64:f2:c5:51:a0:f2:5f:f8:3f:fd:d4:
97:48:f7:23:0b:63:11:de:80:9e:a9:3b:c5:ab:7b:66:c2:2c:
0a:f9:41:de:ad:04:35:3d:59:16:d2:26:0a:a0:a3:9a:b1:4e:
1d:af:51:d4:73:05:62:74:3a:fb:cf:fd:b7:cc:f7:7a:ee:e2:
fd:2b:8b:00:a2:f9:0a:a9:74:84:47:61:b9:09:17:ec:b0:fc:
17:17:58:d6:55:74:b4:0a:c1:4b:5c:7d:ce:2d:0c:0e:e1:b6:
97:71:01:69:6c:34:6a:c8:94:97:24:29:26:84:c8:cf:ae:af:
e2:51:99:eb:d2:12:da:c7:75:46:06:36:d2:42:67:f9:e1:65:
66:c6:cf:c3
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhXOtgb49/xV24qBfgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWRlMmUwYzItMjcwNy00MmM5LWIyNmQtNTlmZTdkMGIz
NDJmMB4XDTI0MTIyNzAyMDA0MFoXDTI1MDMyNzAxMDA0MFowLzEtMCsGA1UEAxMk
M2U4YzMxMzQtNzUxOC00YWRkLWJiNGMtNjYyNDUyMDIxZTVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoT7WMNBBIARgJ0cJb5tP8AGKqrmccYIYq/Qf
+aKUgZr6GtoUlzvmj4gaNTWSIhNI8MRr8wvVbPFZOn257hV9P3LkwzeAubj8Bcni
HNQZke2Ri+V3jIIpbYdSZKABWHxe+ykZMKnCcvFcgtEXCsYRKyEZ8BH+7ZXRY8xk
aHXkcMDIh/jhNxSLYNdBOk2IFgvbfzT92yn24krcRjqMGlRacjAFihgPVmkAdZX9
xXFsy9jFRNHI6F3KJcqL5pigFNTEdJemHlfrx2zef4J9yuyv+XH+9bnLJbW8nnjd
PYzOeczbI0v3k+PlTmem18Z9z4iiClTwLGL6aRM83jyQUwJSvwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHMRN8ilfd5gxfX6C3MBn/y7e0G2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85ZGUy
ZTBjMi0yNzA3LTQyYzktYjI2ZC01OWZlN2QwYjM0MmYvNGNiNTExNTYtNjgxYi0z
YjAyLWJmYWYtMTRhNzgwNjBjMWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOWRlMmUwYzItMjcwNy00MmM5LWIy
NmQtNTlmZTdkMGIzNDJmLzlkZTJlMGMyLTI3MDctNDJjOS1iMjZkLTU5ZmU3ZDBi
MzQyZi5jcmwwHwYDVR0jBBgwFoAURCQJg9b+5RddYL2s3LMn5czFvyEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS85ZGUyZTBjMi0yNzA3LTQyYzktYjI2ZC01OWZl
N2QwYjM0MmYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL47wD7
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAJY9pHo5H65LA2aa38eB/ec+lIqhWgP8zymrimTr9pLFKIW/i5D
/XnaJxT5tz2aOVr/MZNKV6BURYfD2bVvQ6Hkay+oxzjsQ1N8C321XHMcgPss6Pha
NH1gB6djVOmSicfOxeNmMBmSKTXsGOOO32PywzBk8sVRoPJf+D/91JdI9yMLYxHe
gJ6pO8Wre2bCLAr5Qd6tBDU9WRbSJgqgo5qxTh2vUdRzBWJ0OvvP/bfM93ru4v0r
iwCi+QqpdIRHYbkJF+yw/BcXWNZVdLQKwUtcfc4tDA7htpdxAWlsNGrIlJckKSaE
yM+ur+JRmevSEtrHdUYGNtJCZ/nhZWbGz8M=
-----END CERTIFICATE-----
Generated at Tue Apr 29 02:04:44 2025 by rpki-client