Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/72de343e-ded3-43ae-b207-e492c0f88566/0ef2b5ae-7ec0-394e-8b1f-d0fc47784b1b.roa
File: 0ef2b5ae-7ec0-394e-8b1f-d0fc47784b1b.roa (raw, json)
Hash identifier: pGpl7TpIO7glfNNyV1+zLdtJ9Zm0axs0sa4ljFVUvU0=
Subject key identifier: 50:60:11:DE:C4:CC:A4:B3:16:9B:07:A1:48:8C:DF:90:A0:5E:26:22
Certificate issuer: /CN=72de343e-ded3-43ae-b207-e492c0f88566
Certificate serial: 010D0C9F432858480BDA6E28B80D989609DFA400
Authority key identifier: D7:CD:F0:28:8D:BD:33:51:4C:85:B2:5F:B8:3E:4A:09:A5:8F:3C:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/72de343e-ded3-43ae-b207-e492c0f88566.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/72de343e-ded3-43ae-b207-e492c0f88566/0ef2b5ae-7ec0-394e-8b1f-d0fc47784b1b.roa
Signing time: Sat 30 Nov 2024 02:00:39 +0000
ROA not before: Sat 30 Nov 2024 02:00:39 +0000
ROA not after: Fri 28 Feb 2025 02:00:39 +0000
asID: 22803
IP address blocks: 2620:33::/48 maxlen: 48
2620:1dc::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0b:da:6e:28:b8:0d:98:96:09:df:a4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72de343e-ded3-43ae-b207-e492c0f88566
Validity
Not Before: Nov 30 02:00:39 2024 GMT
Not After : Feb 28 02:00:39 2025 GMT
Subject: CN=cd222534-dbab-4d8d-b8ef-fea46bf097f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:83:e7:53:80:f4:3f:d0:76:b3:19:0f:3a:ce:
02:ec:6d:79:4b:c0:cd:54:88:9a:2d:5f:da:a4:3b:
4b:34:41:58:f5:07:12:c4:bc:f3:65:20:3e:19:5c:
e1:4e:ca:9d:f7:85:4f:62:71:1d:04:32:f9:ae:1c:
c4:a2:7a:66:dc:d7:25:69:73:21:90:17:d8:79:19:
95:e9:a2:ba:cb:e4:69:27:d5:84:b1:98:8f:da:18:
2a:19:d5:df:00:1a:75:42:ed:fe:fc:bd:60:e2:56:
f0:1f:c7:64:15:60:40:4a:2c:12:72:bd:0f:4a:94:
32:2d:ae:b7:52:02:0a:a0:00:ad:7b:ce:c0:d8:1e:
fb:28:b9:fd:11:10:a0:9b:1d:e8:4d:77:f9:45:ce:
cf:ab:89:35:31:ee:d0:8a:37:9c:0f:db:a1:46:b2:
7d:95:21:35:57:9d:90:23:e6:07:70:38:03:7a:9a:
5a:3d:91:78:32:e4:d1:fc:60:6a:86:9a:54:86:aa:
94:14:08:50:ff:0f:f2:b3:36:c6:a1:ce:44:e8:85:
03:50:ee:81:6a:d5:81:93:b0:22:ef:a4:4e:10:e4:
d2:45:12:e2:37:37:bf:3e:4f:8b:1e:28:57:c1:74:
d2:1e:44:91:df:f5:91:96:d5:2a:a6:99:01:26:d1:
95:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:60:11:DE:C4:CC:A4:B3:16:9B:07:A1:48:8C:DF:90:A0:5E:26:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/72de343e-ded3-43ae-b207-e492c0f88566/0ef2b5ae-7ec0-394e-8b1f-d0fc47784b1b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/72de343e-ded3-43ae-b207-e492c0f88566/72de343e-ded3-43ae-b207-e492c0f88566.crl
X509v3 Authority Key Identifier:
keyid:D7:CD:F0:28:8D:BD:33:51:4C:85:B2:5F:B8:3E:4A:09:A5:8F:3C:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/72de343e-ded3-43ae-b207-e492c0f88566.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:33::/48
2620:1dc::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:64:60:d2:b4:d7:b2:3f:ef:13:87:28:c7:2e:ef:3b:c9:30:
a0:32:a8:2b:22:e0:b2:94:80:7c:8b:9b:3f:28:7a:65:ca:13:
74:58:0d:f2:64:d4:78:ed:91:a4:af:f7:2e:45:35:92:9b:2d:
0c:69:3c:40:6d:ed:5e:aa:c5:a0:cb:c2:71:4e:55:1c:1c:c8:
bc:84:5e:da:eb:0b:97:13:45:97:20:f4:ab:f4:5d:e2:6a:b6:
f6:34:3c:ec:5c:00:7e:cb:8b:6d:23:ac:6b:e3:2b:b0:2d:c1:
a0:3a:d5:90:71:f5:8e:37:37:ec:42:db:e9:5a:f4:96:49:f8:
53:1e:5c:25:ce:0e:f3:fc:26:20:24:63:09:fb:46:07:07:82:
ab:bb:85:ee:15:75:5a:c9:a6:b5:ec:25:bb:23:5a:7b:1f:8d:
21:f1:ab:69:b8:eb:cf:19:bf:01:10:e5:86:49:57:2a:e6:97:
ea:9d:67:d2:ff:d4:80:5a:7b:62:7d:f8:72:ac:ae:ab:98:53:
37:86:cc:c1:06:16:f7:05:a8:69:12:db:75:50:f7:13:c1:a9:
fe:ac:81:c2:02:8e:ac:c3:5e:1e:22:bd:4b:0a:d6:09:65:cc:
5d:aa:f4:05:16:26:12:fb:5e:23:d4:08:6e:b9:11:63:d3:75:
f1:a9:18:6c
-----BEGIN CERTIFICATE-----
MIIGTjCCBTagAwIBAgIUAQ0Mn0MoWEgL2m4ouA2YlgnfpAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzJkZTM0M2UtZGVkMy00M2FlLWIyMDctZTQ5MmMwZjg4
NTY2MB4XDTI0MTEzMDAyMDAzOVoXDTI1MDIyODAyMDAzOVowLzEtMCsGA1UEAxMk
Y2QyMjI1MzQtZGJhYi00ZDhkLWI4ZWYtZmVhNDZiZjA5N2YxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4PnU4D0P9B2sxkPOs4C7G15S8DNVIiaLV/a
pDtLNEFY9QcSxLzzZSA+GVzhTsqd94VPYnEdBDL5rhzEonpm3NclaXMhkBfYeRmV
6aK6y+RpJ9WEsZiP2hgqGdXfABp1Qu3+/L1g4lbwH8dkFWBASiwScr0PSpQyLa63
UgIKoACte87A2B77KLn9ERCgmx3oTXf5Rc7Pq4k1Me7QijecD9uhRrJ9lSE1V52Q
I+YHcDgDeppaPZF4MuTR/GBqhppUhqqUFAhQ/w/yszbGoc5E6IUDUO6BatWBk7Ai
76ROEOTSRRLiNze/Pk+LHihXwXTSHkSR3/WRltUqppkBJtGVyQIDAQABo4IDYDCC
A1wwHQYDVR0OBBYEFFBgEd7EzKSzFpsHoUiM35CgXiYiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MmRl
MzQzZS1kZWQzLTQzYWUtYjIwNy1lNDkyYzBmODg1NjYvMGVmMmI1YWUtN2VjMC0z
OTRlLThiMWYtZDBmYzQ3Nzg0YjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzJkZTM0M2UtZGVkMy00M2FlLWIy
MDctZTQ5MmMwZjg4NTY2LzcyZGUzNDNlLWRlZDMtNDNhZS1iMjA3LWU0OTJjMGY4
ODU2Ni5jcmwwHwYDVR0jBBgwFoAU183wKI29M1FMhbJfuD5KCaWPPPEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MmRlMzQzZS1kZWQzLTQzYWUtYjIwNy1lNDky
YzBmODg1NjYuY2VyMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwcAJiAAMwAA
AwYEJiAB3AAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB
FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN
BgkqhkiG9w0BAQsFAAOCAQEANmRg0rTXsj/vE4coxy7vO8kwoDKoKyLgspSAfIub
Pyh6ZcoTdFgN8mTUeO2RpK/3LkU1kpstDGk8QG3tXqrFoMvCcU5VHBzIvIRe2usL
lxNFlyD0q/Rd4mq29jQ87FwAfsuLbSOsa+MrsC3BoDrVkHH1jjc37ELb6Vr0lkn4
Ux5cJc4O8/wmICRjCftGBweCq7uF7hV1WsmmtewluyNaex+NIfGrabjrzxm/ARDl
hklXKuaX6p1n0v/UgFp7Yn34cqyuq5hTN4bMwQYW9wWoaRLbdVD3E8Gp/qyBwgKO
rMNeHiK9SwrWCWXMXar0BRYmEvteI9QIbrkRY9N18akYbA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 20:18:59 2025 by rpki-client