Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/aa5035f3-2d21-3574-8fa3-8e9a3973e326.roa
File: aa5035f3-2d21-3574-8fa3-8e9a3973e326.roa (raw, json)
Hash identifier: V0qt0XYNihRoVw6VS8mEjXkmNH4K95FGeBEF0ARFtE0=
Subject key identifier: 36:F3:26:78:B5:12:6C:54:BB:EB:68:AF:58:01:BC:B9:0A:51:42:49
Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Certificate serial: 010D0C9F4328584832F026CE9151C34521DC7B00
Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/aa5035f3-2d21-3574-8fa3-8e9a3973e326.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 0
IP address blocks: 2607:6000::/28 maxlen: 28
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:26:ce:91:51:c3:45:21:dc:7b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=a1388f8a-33fc-4025-8675-29b24d37ac4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:52:ff:f0:18:96:95:64:59:bc:4e:41:c9:39:
72:75:2b:85:3d:7c:de:29:49:5e:4a:69:e4:67:ad:
fb:60:90:d1:be:30:95:d0:7a:5b:04:c5:b0:de:80:
24:03:7b:5b:35:01:d3:7e:09:c5:21:86:dc:35:ab:
8b:cf:18:67:29:48:22:a1:44:ca:6f:58:b5:05:da:
ef:0b:b6:b8:a6:8f:26:64:78:54:c7:c1:ea:86:cf:
03:14:a7:84:bc:21:fa:de:96:ee:9a:34:6f:fd:b8:
3d:cf:c0:27:c8:68:03:bc:8c:0a:6b:41:2e:ab:c6:
20:c5:42:e2:7a:ec:d8:cb:e1:96:08:e2:f1:2a:d7:
0b:33:71:e9:fa:06:69:19:75:9b:24:57:79:c3:34:
97:41:8d:b4:57:e1:7b:11:56:23:00:40:74:fb:bb:
20:08:0e:ec:c4:f3:47:9c:a4:ad:8c:a2:14:8e:c1:
f7:2b:c8:dc:30:ad:01:1e:24:8d:30:8c:2e:04:73:
98:c4:1f:a9:62:7a:fe:40:7e:12:99:b2:b3:c0:d1:
8e:16:2c:4f:38:0a:5e:87:63:0c:aa:23:87:cf:70:
d7:14:9f:28:97:59:a4:0e:aa:9f:8d:cf:71:4e:db:
9a:04:24:40:bd:a1:70:7b:31:21:c4:97:f2:eb:0e:
c3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F3:26:78:B5:12:6C:54:BB:EB:68:AF:58:01:BC:B9:0A:51:42:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/aa5035f3-2d21-3574-8fa3-8e9a3973e326.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl
X509v3 Authority Key Identifier:
keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:6000::/28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:92:f2:4f:6e:8e:38:7d:cc:20:2c:8d:df:e6:e1:c5:30:e6:
37:82:26:e7:c5:d3:5c:81:81:ee:4d:3d:50:2b:1d:08:00:c2:
d7:a6:6c:0e:3c:1d:66:d5:ea:12:0d:c0:d2:42:36:bd:37:71:
43:ea:0a:18:92:8a:c3:f9:57:72:f5:82:7c:84:3d:76:89:a4:
1d:2b:7d:43:d4:a3:40:31:9f:94:cd:f9:05:e4:ff:e6:8f:23:
41:20:d3:d0:62:6d:95:7a:37:24:3e:be:6d:ab:e2:78:58:d4:
8e:e3:f0:8b:1f:95:68:3a:44:56:0e:2f:08:36:f5:a5:d6:68:
b6:a0:7d:00:e1:fa:a1:a4:01:30:09:9c:e6:cc:0c:19:1a:fd:
94:6a:9a:e3:d0:08:4f:29:24:f2:4b:42:8b:64:8b:7e:90:26:
cd:7a:66:26:a0:cb:91:f0:49:fc:17:41:d1:f9:74:8d:cb:35:
0e:16:c3:5c:04:c2:0b:8b:6c:05:67:59:5a:f0:13:c9:7d:40:
50:d3:fc:3c:80:48:8a:73:98:31:0d:af:70:e2:06:93:00:5a:
54:10:32:52:73:88:a4:94:db:f0:d7:f0:2d:40:f8:db:2e:ab:
1e:1f:82:b5:26:a7:a4:8d:77:da:e9:37:2c:ae:81:26:54:e1:
e8:28:e9:81
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEgy8CbOkVHDRSHcewAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5
M2NmMB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk
YTEzODhmOGEtMzNmYy00MDI1LTg2NzUtMjliMjRkMzdhYzRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVL/8BiWlWRZvE5ByTlydSuFPXzeKUleSmnk
Z637YJDRvjCV0HpbBMWw3oAkA3tbNQHTfgnFIYbcNauLzxhnKUgioUTKb1i1Bdrv
C7a4po8mZHhUx8Hqhs8DFKeEvCH63pbumjRv/bg9z8AnyGgDvIwKa0Euq8YgxULi
euzYy+GWCOLxKtcLM3Hp+gZpGXWbJFd5wzSXQY20V+F7EVYjAEB0+7sgCA7sxPNH
nKStjKIUjsH3K8jcMK0BHiSNMIwuBHOYxB+pYnr+QH4SmbKzwNGOFixPOApeh2MM
qiOHz3DXFJ8ol1mkDqqfjc9xTtuaBCRAvaFwezEhxJfy6w7DaQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFDbzJni1EmxUu+tor1gBvLkKUUJJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl
MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvYWE1MDM1ZjMtMmQyMS0z
NTc0LThmYTMtOGU5YTM5NzNlMzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy
N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz
OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux
Mzg3MzkzY2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgdgADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAGkvJPbo44fcwgLI3f5uHFMOY3gibnxdNcgYHuTT1QKx0IAMLXpmwO
PB1m1eoSDcDSQja9N3FD6goYkorD+Vdy9YJ8hD12iaQdK31D1KNAMZ+UzfkF5P/m
jyNBINPQYm2VejckPr5tq+J4WNSO4/CLH5VoOkRWDi8INvWl1mi2oH0A4fqhpAEw
CZzmzAwZGv2Uaprj0AhPKSTyS0KLZIt+kCbNemYmoMuR8En8F0HR+XSNyzUOFsNc
BMILi2wFZ1la8BPJfUBQ0/w8gEiKc5gxDa9w4gaTAFpUEDJSc4iklNvw1/AtQPjb
LqseH4K1JqekjXfa6TcsroEmVOHoKOmB
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:30:01 2025 by rpki-client