Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ae6ae2fa-a0d2-38a0-8dec-ba05b5e8c5dd.roa
File: ae6ae2fa-a0d2-38a0-8dec-ba05b5e8c5dd.roa (raw, json)
Hash identifier: Aca3edR9e/pjDsDVMWhDT+WAXMzF29cUewLXVR7duJ8=
Subject key identifier: 93:D6:4C:FE:42:80:3F:51:0A:09:88:24:B1:28:9D:04:AC:48:18:B5
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584800AF96A508AB1E5C91F2A4C0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ae6ae2fa-a0d2-38a0-8dec-ba05b5e8c5dd.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 33363
IP address blocks: 2605:a401:80bd::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:96:a5:08:ab:1e:5c:91:f2:a4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=8b88ea58-c558-488b-b20d-4396c19fa947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3a:e7:04:b0:03:53:f3:d2:75:5c:df:a7:01:
fe:aa:af:1a:fd:2c:23:10:e2:4b:3b:b7:25:05:95:
61:5f:c5:d6:c6:87:df:31:9d:4b:19:43:b0:ce:db:
95:c0:41:47:c3:82:17:ca:78:fc:0e:b0:09:14:1a:
2c:72:55:c2:e8:44:aa:82:69:fc:08:53:86:c3:1f:
f4:73:fe:fe:15:e0:fa:ac:c8:01:78:ef:76:67:57:
cd:85:79:ea:78:7a:e6:aa:9b:99:09:5a:8c:9d:42:
8a:39:eb:4a:99:48:59:05:c7:2c:97:07:e7:6b:19:
00:0a:7b:59:2e:e5:61:bf:e3:ff:07:56:9f:b8:59:
72:5e:3e:2f:f0:16:e2:0a:ed:b0:ff:ec:26:b5:48:
9e:5b:ff:1e:70:fd:8e:45:0a:10:af:64:91:6b:b1:
24:98:76:fc:1a:7b:ad:26:1e:38:8b:46:fc:09:0a:
e1:57:4e:25:49:6e:c4:05:27:f9:98:86:16:36:6b:
61:ea:57:a1:45:db:f3:ab:27:72:e3:b0:91:96:a0:
31:69:e7:4b:ea:39:05:9e:d6:77:e6:99:cf:db:ba:
fb:b6:24:a6:c1:a6:6f:dc:d0:49:09:c4:d9:db:d6:
af:6a:ea:04:77:26:fa:40:69:87:68:ab:de:36:6b:
d6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D6:4C:FE:42:80:3F:51:0A:09:88:24:B1:28:9D:04:AC:48:18:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ae6ae2fa-a0d2-38a0-8dec-ba05b5e8c5dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:a401:80bd::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:7e:9f:b5:1f:6b:6a:c9:b8:84:1c:0e:a7:3c:4e:1c:2a:28:
75:f8:b2:66:4c:06:92:68:e6:36:04:f3:92:8b:de:fe:52:15:
87:3d:e2:01:43:cb:09:14:9a:35:10:04:c5:64:d0:a2:31:b2:
c0:22:1c:b0:e4:43:84:c5:a6:92:ff:01:76:8d:02:f9:bf:f2:
dd:ed:90:67:e4:15:03:f6:4d:3b:62:c3:e8:6e:ad:6f:f9:c9:
9e:d0:38:2e:ff:fd:82:71:8a:68:41:65:f4:ca:b0:81:10:a4:
02:9e:a0:56:91:cb:a1:94:51:70:b7:a2:43:d7:f6:88:58:29:
a8:16:f1:cd:5c:8e:d6:94:06:b4:b9:f3:c0:d8:3d:37:9a:5c:
77:f2:d5:35:fb:4c:7f:4f:f6:07:c7:e2:b8:f1:fe:1f:bd:59:
42:3b:01:93:8e:02:c9:94:d5:3d:ef:62:71:f3:12:94:e3:5d:
10:5a:49:5e:7f:45:16:87:6f:a5:a3:b2:a7:85:ec:87:5a:9a:
14:80:19:aa:c4:f6:bb:77:de:bf:ad:ee:ca:e5:5c:5e:ae:a6:
d7:cd:5e:ca:94:31:14:61:bf:e9:6c:05:a7:ca:76:df:2b:ae:
92:8e:4e:bb:f2:33:eb:b8:e4:8d:a7:3c:7c:c8:d5:c7:49:4f:
1e:99:80:e1
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgAr5alCKseXJHypMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI0MTEyNjAyMDAyNloXDTI1MDIyNDAyMDAyNlowLzEtMCsGA1UEAxMk
OGI4OGVhNTgtYzU1OC00ODhiLWIyMGQtNDM5NmMxOWZhOTQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDrnBLADU/PSdVzfpwH+qq8a/SwjEOJLO7cl
BZVhX8XWxoffMZ1LGUOwztuVwEFHw4IXynj8DrAJFBosclXC6ESqgmn8CFOGwx/0
c/7+FeD6rMgBeO92Z1fNhXnqeHrmqpuZCVqMnUKKOetKmUhZBccslwfnaxkACntZ
LuVhv+P/B1afuFlyXj4v8BbiCu2w/+wmtUieW/8ecP2ORQoQr2SRa7EkmHb8Gnut
Jh44i0b8CQrhV04lSW7EBSf5mIYWNmth6lehRdvzqydy47CRlqAxaedL6jkFntZ3
5pnP27r7tiSmwaZv3NBJCcTZ29avauoEdyb6QGmHaKveNmvWmQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJPWTP5CgD9RCgmIJLEonQSsSBi1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYWU2YWUyZmEtYTBkMi0z
OGEwLThkZWMtYmEwNWI1ZThjNWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYC9
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGF+n7Ufa2rJuIQcDqc8ThwqKHX4smZMBpJo5jYE85KL3v5SFYc9
4gFDywkUmjUQBMVk0KIxssAiHLDkQ4TFppL/AXaNAvm/8t3tkGfkFQP2TTtiw+hu
rW/5yZ7QOC7//YJximhBZfTKsIEQpAKeoFaRy6GUUXC3okPX9ohYKagW8c1cjtaU
BrS588DYPTeaXHfy1TX7TH9P9gfH4rjx/h+9WUI7AZOOAsmU1T3vYnHzEpTjXRBa
SV5/RRaHb6WjsqeF7IdamhSAGarE9rt33r+t7srlXF6uptfNXsqUMRRhv+lsBafK
dt8rrpKOTrvyM+u45I2nPHzI1cdJTx6ZgOE=
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:51:01 2025 by rpki-client