Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8f4129be-42f4-3968-aff2-2e4ca695144b.roa
File: 8f4129be-42f4-3968-aff2-2e4ca695144b.roa (raw, json)
Hash identifier: qKqugNe+z3Zh8vf1o/LZE2+lxv7Mc1sXvFb+qSNAc4U=
Subject key identifier: 37:FD:49:66:BC:C3:D5:92:13:81:2E:E9:82:61:07:3D:09:80:EA:E2
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584800AFBBBB6C097CC16ACC4E00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8f4129be-42f4-3968-aff2-2e4ca695144b.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 33363
IP address blocks: 2605:a401:80b6::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:bb:bb:6c:09:7c:c1:6a:cc:4e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=9444dea2-c4b7-4ac7-a485-4a9cbb94cb24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:14:97:0a:54:2f:58:6b:28:7a:7c:55:98:db:
a2:d1:c1:5f:11:1a:56:a6:7a:95:ee:f7:80:69:71:
8c:56:49:13:61:6a:5a:c5:85:de:9d:bb:e8:42:3e:
aa:b8:19:b9:bc:dc:d7:86:f5:9d:5b:b4:a4:e8:50:
3b:66:55:44:6f:bc:df:44:72:04:1a:13:e1:ce:88:
c7:41:1c:2c:30:c0:5e:cd:85:11:59:bc:d9:07:f9:
e2:fc:be:ee:e4:d0:f0:49:35:ae:13:7a:a5:4d:50:
1c:51:b6:38:86:69:9b:48:6a:68:00:f1:e8:69:cd:
d9:ab:b5:7c:eb:b7:e9:a3:8c:42:9f:ce:bb:5a:ca:
67:ff:02:1d:95:9a:4c:39:e5:be:d9:03:05:62:4b:
cb:93:e8:78:6c:14:3a:96:e1:2f:d0:57:53:ef:c2:
7a:92:c1:38:df:5e:52:1a:7b:66:b5:46:52:57:49:
34:69:89:11:68:ab:dd:02:58:1a:78:c4:01:38:61:
19:40:ec:7e:83:51:f6:af:ab:e0:cd:ce:63:9b:3d:
f3:45:76:4c:d7:fb:66:5b:dd:cf:c1:68:31:f7:fa:
c9:6b:15:d0:87:9f:fa:78:3b:ad:31:81:3b:6f:ce:
b1:71:13:4b:73:4e:e7:de:8b:f4:34:63:e8:09:98:
f6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:FD:49:66:BC:C3:D5:92:13:81:2E:E9:82:61:07:3D:09:80:EA:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8f4129be-42f4-3968-aff2-2e4ca695144b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:a401:80b6::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:66:f5:02:79:ef:dd:0f:82:b2:3b:21:a7:43:d5:8b:89:dd:
b0:9a:06:78:61:a1:8c:40:3f:f5:2b:19:ed:ea:c7:3a:3d:b5:
83:b0:36:dc:9e:96:c9:68:be:05:da:0c:87:a8:5f:bf:e9:8b:
df:02:d0:bc:bb:12:f4:f3:2f:3a:48:ac:46:9f:a0:90:a5:9f:
9b:68:b5:9a:5d:0b:21:9b:ff:10:02:23:43:ac:df:98:18:d5:
8d:27:bd:3d:b7:ac:b4:db:29:b0:eb:33:8f:f3:84:5c:0d:c6:
0b:55:56:52:44:b3:5c:51:81:f9:dc:48:39:6f:10:aa:17:a1:
67:8e:38:ac:14:ea:1b:ea:bc:f6:e9:19:2a:86:7f:f8:e8:77:
50:55:b8:c7:01:95:cd:85:7b:65:de:4a:34:3a:e0:e5:12:81:
e2:26:23:48:05:64:a1:b5:b7:57:55:7f:c6:5e:bc:3c:e0:ad:
83:90:8f:7f:86:a3:3b:08:96:a7:68:1e:20:e6:80:dc:18:e3:
81:fd:0d:35:bb:30:a4:d9:00:62:fa:9f:39:b3:c4:c8:09:b8:
36:74:bc:69:a3:75:52:56:a9:07:6d:d9:be:93:da:3d:a8:ff:
c5:d0:1d:52:1e:bb:a6:5e:cf:aa:ea:0e:d7:fa:ce:bc:b9:e5:
a0:4d:3a:6e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgAr7u7bAl8wWrMTgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI0MTEyNjAyMDAyNloXDTI1MDIyNDAyMDAyNlowLzEtMCsGA1UEAxMk
OTQ0NGRlYTItYzRiNy00YWM3LWE0ODUtNGE5Y2JiOTRjYjI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xSXClQvWGsoenxVmNui0cFfERpWpnqV7veA
aXGMVkkTYWpaxYXenbvoQj6quBm5vNzXhvWdW7Sk6FA7ZlVEb7zfRHIEGhPhzojH
QRwsMMBezYURWbzZB/ni/L7u5NDwSTWuE3qlTVAcUbY4hmmbSGpoAPHoac3Zq7V8
67fpo4xCn867Wspn/wIdlZpMOeW+2QMFYkvLk+h4bBQ6luEv0FdT78J6ksE4315S
GntmtUZSV0k0aYkRaKvdAlgaeMQBOGEZQOx+g1H2r6vgzc5jmz3zRXZM1/tmW93P
wWgx9/rJaxXQh5/6eDutMYE7b86xcRNLc07n3ov0NGPoCZj2JQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDf9SWa8w9WSE4Eu6YJhBz0JgOriMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvOGY0MTI5YmUtNDJmNC0z
OTY4LWFmZjItMmU0Y2E2OTUxNDRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYC2
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIlm9QJ5790PgrI7IadD1YuJ3bCaBnhhoYxAP/UrGe3qxzo9tYOw
NtyelslovgXaDIeoX7/pi98C0Ly7EvTzLzpIrEafoJCln5totZpdCyGb/xACI0Os
35gY1Y0nvT23rLTbKbDrM4/zhFwNxgtVVlJEs1xRgfncSDlvEKoXoWeOOKwU6hvq
vPbpGSqGf/jod1BVuMcBlc2Fe2XeSjQ64OUSgeImI0gFZKG1t1dVf8ZevDzgrYOQ
j3+GozsIlqdoHiDmgNwY44H9DTW7MKTZAGL6nzmzxMgJuDZ0vGmjdVJWqQdt2b6T
2j2o/8XQHVIeu6Zez6rqDtf6zry55aBNOm4=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:33:28 2025 by rpki-client