Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bb79cd8c-bea1-45b0-bb53-9c4e976e1c1a/1948be53-e17c-3047-b5fd-ce7874d44769.roa
File: 1948be53-e17c-3047-b5fd-ce7874d44769.roa (raw, json)
Hash identifier: kQPMEGC0UNqBUKpPqRiZHqNCD34G7ninwu3D/FjdCEw=
Subject key identifier: 37:9C:C0:BA:C2:38:D3:D6:29:C3:97:28:9F:A5:8B:2C:34:90:BF:02
Certificate issuer: /CN=bb79cd8c-bea1-45b0-bb53-9c4e976e1c1a
Certificate serial: 010D0C9F4328584802150E458DC32AA6BDD7F340
Authority key identifier: 5E:87:0B:B5:65:AC:44:E9:2C:ED:8B:5C:3C:07:B5:99:5B:10:21:06
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bb79cd8c-bea1-45b0-bb53-9c4e976e1c1a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bb79cd8c-bea1-45b0-bb53-9c4e976e1c1a/1948be53-e17c-3047-b5fd-ce7874d44769.roa
Signing time: Tue 26 Nov 2024 14:00:39 +0000
ROA not before: Tue 26 Nov 2024 14:00:39 +0000
ROA not after: Mon 24 Feb 2025 14:00:39 +0000
asID: 401147
IP address blocks: 2602:f8ae::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:02:15:0e:45:8d:c3:2a:a6:bd:d7:f3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb79cd8c-bea1-45b0-bb53-9c4e976e1c1a
Validity
Not Before: Nov 26 14:00:39 2024 GMT
Not After : Feb 24 14:00:39 2025 GMT
Subject: CN=898014de-f05b-4e00-b5bc-a0113ba47551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:75:45:6b:d7:93:40:4e:0a:7a:fd:8f:69:1f:
32:c7:66:20:af:20:87:2d:47:7c:e9:2b:1b:ba:f5:
08:21:45:bd:f1:1c:55:e4:8a:20:92:1a:32:fe:cc:
f7:84:f3:20:54:f8:e5:b4:41:8d:55:f5:f5:52:22:
ae:84:2e:f2:23:9e:0b:83:41:6e:f7:2a:96:7e:82:
f9:3d:a9:d0:32:74:ae:7f:6e:3d:39:c6:44:f3:65:
3b:40:d4:68:96:9a:d6:de:b2:92:e3:b4:e0:a8:84:
84:33:5b:89:be:4e:00:fe:7f:c1:63:0a:fc:91:ea:
ca:02:b3:c7:be:e2:2f:0b:57:94:10:52:77:0d:59:
b7:e6:53:72:5f:7f:02:85:3d:cf:80:e4:ca:09:35:
b0:9a:ca:c4:32:d7:cc:12:f0:71:98:f3:cf:74:4e:
ae:10:31:98:84:1c:7a:cd:7f:bc:26:52:6f:73:c4:
89:1f:e5:71:99:da:28:f4:5f:61:98:63:f1:3c:a7:
81:17:4b:0e:27:3d:90:a9:84:e5:13:e5:4e:46:6a:
b5:60:26:6d:01:f3:19:c6:81:3f:1f:8b:bb:23:bf:
72:63:09:f6:e0:84:59:21:1d:93:45:f2:bf:b7:30:
52:ac:68:35:b8:aa:d1:ae:b4:89:03:51:43:33:fc:
21:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:9C:C0:BA:C2:38:D3:D6:29:C3:97:28:9F:A5:8B:2C:34:90:BF:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bb79cd8c-bea1-45b0-bb53-9c4e976e1c1a/1948be53-e17c-3047-b5fd-ce7874d44769.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bb79cd8c-bea1-45b0-bb53-9c4e976e1c1a/bb79cd8c-bea1-45b0-bb53-9c4e976e1c1a.crl
X509v3 Authority Key Identifier:
keyid:5E:87:0B:B5:65:AC:44:E9:2C:ED:8B:5C:3C:07:B5:99:5B:10:21:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bb79cd8c-bea1-45b0-bb53-9c4e976e1c1a.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f8ae::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:99:b8:a8:79:51:0b:ca:55:d7:c2:7e:7b:8f:96:ff:26:8c:
5f:d5:c0:3e:91:ed:fa:ce:df:e6:9d:e9:bd:c6:fc:a4:ec:a0:
e8:10:21:45:05:c1:0e:b7:e4:e1:b2:77:ad:69:bd:ef:71:57:
c5:2b:93:a0:09:8e:23:de:bf:96:e8:b0:9b:8a:8a:ee:ab:d4:
ac:32:41:3e:5c:89:9c:f5:03:99:23:ae:b8:01:79:71:08:b0:
a1:2d:88:e7:6a:7f:7b:66:10:c6:8f:cd:65:3f:5b:02:a9:22:
67:4c:61:0b:14:15:cc:9f:47:62:38:f8:93:e2:d9:01:ae:f6:
76:06:42:1a:2c:83:78:92:55:7c:02:7a:de:0e:21:03:69:07:
43:39:46:9c:2e:a9:b6:2d:d6:6b:84:9e:72:9d:9b:35:96:4d:
b0:32:4d:44:39:61:f8:f5:79:bb:ae:ac:30:d3:0f:43:47:e6:
8c:f5:9b:20:bb:f0:0a:f5:89:95:71:9a:8e:c8:d7:aa:71:61:
77:b4:f1:e2:f9:02:8f:f8:b7:4d:b7:1a:fa:75:6e:46:5d:00:
c3:df:d2:a3:8b:bd:61:4d:b0:9f:93:ae:e0:04:b4:f7:f5:87:
9d:aa:f8:98:6c:ef:92:18:fe:e8:47:fc:ad:81:86:6b:08:16:
62:ea:96:1c
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEgCFQ5FjcMqpr3X80AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmI3OWNkOGMtYmVhMS00NWIwLWJiNTMtOWM0ZTk3NmUx
YzFhMB4XDTI0MTEyNjE0MDAzOVoXDTI1MDIyNDE0MDAzOVowLzEtMCsGA1UEAxMk
ODk4MDE0ZGUtZjA1Yi00ZTAwLWI1YmMtYTAxMTNiYTQ3NTUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXVFa9eTQE4Kev2PaR8yx2YgryCHLUd86Ssb
uvUIIUW98RxV5Iogkhoy/sz3hPMgVPjltEGNVfX1UiKuhC7yI54Lg0Fu9yqWfoL5
PanQMnSuf249OcZE82U7QNRolprW3rKS47TgqISEM1uJvk4A/n/BYwr8kerKArPH
vuIvC1eUEFJ3DVm35lNyX38ChT3PgOTKCTWwmsrEMtfMEvBxmPPPdE6uEDGYhBx6
zX+8JlJvc8SJH+Vxmdoo9F9hmGPxPKeBF0sOJz2QqYTlE+VORmq1YCZtAfMZxoE/
H4u7I79yYwn24IRZIR2TRfK/tzBSrGg1uKrRrrSJA1FDM/whJQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFDecwLrCONPWKcOXKJ+liyw0kL8CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYjc5
Y2Q4Yy1iZWExLTQ1YjAtYmI1My05YzRlOTc2ZTFjMWEvMTk0OGJlNTMtZTE3Yy0z
MDQ3LWI1ZmQtY2U3ODc0ZDQ0NzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmI3OWNkOGMtYmVhMS00NWIwLWJi
NTMtOWM0ZTk3NmUxYzFhL2JiNzljZDhjLWJlYTEtNDViMC1iYjUzLTljNGU5NzZl
MWMxYS5jcmwwHwYDVR0jBBgwFoAUXocLtWWsROks7YtcPAe1mVsQIQYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9iYjc5Y2Q4Yy1iZWExLTQ1YjAtYmI1My05YzRl
OTc2ZTFjMWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL4rgAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEANJm4qHlRC8pV18J+e4+W/yaMX9XAPpHt+s7f5p3pvcb8pOyg6BAh
RQXBDrfk4bJ3rWm973FXxSuToAmOI96/luiwm4qK7qvUrDJBPlyJnPUDmSOuuAF5
cQiwoS2I52p/e2YQxo/NZT9bAqkiZ0xhCxQVzJ9HYjj4k+LZAa72dgZCGiyDeJJV
fAJ63g4hA2kHQzlGnC6pti3Wa4Secp2bNZZNsDJNRDlh+PV5u66sMNMPQ0fmjPWb
ILvwCvWJlXGajsjXqnFhd7Tx4vkCj/i3Tbca+nVuRl0Aw9/So4u9YU2wn5Ou4AS0
9/WHnar4mGzvkhj+6Ef8rYGGawgWYuqWHA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 11:44:39 2025 by rpki-client