Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/e26e63a6-d45f-35da-bed3-1c3616a12813.roa
File: e26e63a6-d45f-35da-bed3-1c3616a12813.roa (raw, json)
Hash identifier: YencXkhK5gWY1ekMFW9GBDhYfG3AINhE5GVQV1W43Q4=
Subject key identifier: FA:0E:8A:6D:C9:BD:59:0E:E5:2F:7D:F4:C5:AD:9A:6E:91:31:59:AD
Certificate issuer: /CN=8dbe5e2d-b7f8-4dba-b97b-8b6164e83890
Certificate serial: 010D0C9F43285848159FEB4A494EF87367D35E40
Authority key identifier: CC:B0:CB:3A:A6:3A:8F:FA:2A:54:EF:E8:C8:EB:5A:7D:33:60:5C:05
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/e26e63a6-d45f-35da-bed3-1c3616a12813.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 12130
IP address blocks: 2605:7840::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:eb:4a:49:4e:f8:73:67:d3:5e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dbe5e2d-b7f8-4dba-b97b-8b6164e83890
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=50ef6312-52b1-49bf-bc94-a569d942f3dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9c:af:79:93:96:b1:3f:e6:31:6d:37:86:d5:
c3:7d:a9:3c:1f:76:59:a3:e3:bc:01:b2:a6:4b:73:
02:1c:21:e1:c2:87:b6:76:ef:a1:79:75:a7:a3:d9:
53:39:c1:14:4c:71:9a:3c:44:07:15:2e:2e:e3:79:
3a:b0:58:18:84:83:aa:3a:3c:f2:fd:e8:ed:78:d3:
25:6c:d9:d6:6a:34:49:c7:38:6e:57:bd:80:25:fd:
87:25:cc:5c:03:67:c0:6e:ed:db:ef:bd:13:29:7b:
b3:ec:2b:c6:a7:8c:d4:0b:72:56:76:0c:ee:ae:70:
03:3f:39:f1:b1:5f:9a:ed:87:0a:9a:84:5b:97:d5:
e8:05:31:15:24:f6:35:6a:80:1b:bb:90:9d:a8:aa:
0b:e2:fa:eb:ba:7d:f0:47:67:0e:b4:9c:fe:bf:a8:
e0:0f:0e:f1:b5:eb:85:4d:51:f3:00:af:16:1e:51:
29:61:29:f6:51:c2:e7:e0:58:10:9e:08:bc:5d:75:
bf:61:38:fb:5b:f4:42:61:c4:bf:47:ea:77:54:df:
84:12:65:d5:05:c1:41:03:dc:2f:52:54:bd:e2:72:
12:51:f4:0a:31:40:ae:99:11:ff:46:e6:30:34:9e:
a5:81:af:b3:07:02:7e:60:88:84:02:ee:2e:84:ee:
54:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0E:8A:6D:C9:BD:59:0E:E5:2F:7D:F4:C5:AD:9A:6E:91:31:59:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/e26e63a6-d45f-35da-bed3-1c3616a12813.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.crl
X509v3 Authority Key Identifier:
keyid:CC:B0:CB:3A:A6:3A:8F:FA:2A:54:EF:E8:C8:EB:5A:7D:33:60:5C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:7840::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:b7:b6:d7:47:3e:b5:6d:9d:3a:42:94:eb:cd:b1:6d:4a:75:
e6:c9:8b:7c:a1:c8:e5:d6:f8:5d:8c:40:1b:6c:f1:d8:56:e0:
cc:6c:fc:42:8b:2b:57:74:5a:ae:80:c3:1f:e4:1f:fa:00:0b:
78:7b:fe:df:a4:c3:34:99:a8:c5:c0:f4:6a:03:49:62:85:46:
1c:fb:5e:2d:9c:f2:04:51:f3:34:48:9c:c3:d9:01:47:8e:06:
51:9c:33:b9:73:bd:81:ae:12:81:e2:4a:42:75:f4:85:f9:0d:
24:52:af:25:26:7d:32:42:b5:fe:50:ed:ba:af:10:82:73:f9:
29:4c:18:81:d4:62:36:a9:66:f8:ec:78:c0:7b:04:cd:3b:9f:
5d:79:4f:ee:29:e3:e7:eb:a0:ce:51:83:77:39:57:7c:5b:29:
a4:76:a2:3a:1f:14:80:fe:39:60:ac:34:b0:ee:e5:6c:e4:1a:
61:7a:e0:6b:94:1d:8c:22:24:16:1a:43:af:1b:81:53:22:0a:
aa:af:56:68:a1:ca:9c:20:5f:98:1c:32:55:e2:01:54:3e:b4:
92:dc:de:66:e1:2b:c3:1b:3e:ae:11:c9:e8:6f:9d:e6:dd:37:
10:34:ae:b2:5e:73:32:e1:16:a6:4e:f5:be:ed:1d:9d:20:5f:
46:18:76:1c
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEgVn+tKSU74c2fTXkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGRiZTVlMmQtYjdmOC00ZGJhLWI5N2ItOGI2MTY0ZTgz
ODkwMB4XDTI0MTIwMzE0MDA1MloXDTI1MDMwMzE0MDA1MlowLzEtMCsGA1UEAxMk
NTBlZjYzMTItNTJiMS00OWJmLWJjOTQtYTU2OWQ5NDJmM2RjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5yveZOWsT/mMW03htXDfak8H3ZZo+O8AbKm
S3MCHCHhwoe2du+heXWno9lTOcEUTHGaPEQHFS4u43k6sFgYhIOqOjzy/ejteNMl
bNnWajRJxzhuV72AJf2HJcxcA2fAbu3b770TKXuz7CvGp4zUC3JWdgzurnADPznx
sV+a7YcKmoRbl9XoBTEVJPY1aoAbu5CdqKoL4vrrun3wR2cOtJz+v6jgDw7xteuF
TVHzAK8WHlEpYSn2UcLn4FgQngi8XXW/YTj7W/RCYcS/R+p3VN+EEmXVBcFBA9wv
UlS94nISUfQKMUCumRH/RuYwNJ6lga+zBwJ+YIiEAu4uhO5UbQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFPoOim3JvVkO5S999MWtmm6RMVmtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZGJl
NWUyZC1iN2Y4LTRkYmEtYjk3Yi04YjYxNjRlODM4OTAvZTI2ZTYzYTYtZDQ1Zi0z
NWRhLWJlZDMtMWMzNjE2YTEyODEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGRiZTVlMmQtYjdmOC00ZGJhLWI5
N2ItOGI2MTY0ZTgzODkwLzhkYmU1ZTJkLWI3ZjgtNGRiYS1iOTdiLThiNjE2NGU4
Mzg5MC5jcmwwHwYDVR0jBBgwFoAUzLDLOqY6j/oqVO/oyOtafTNgXAUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84ZGJlNWUyZC1iN2Y4LTRkYmEtYjk3Yi04YjYx
NjRlODM4OTAuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgV4QDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAgt7bXRz61bZ06QpTrzbFtSnXmyYt8ocjl1vhdjEAbbPHYVuDMbPxC
iytXdFqugMMf5B/6AAt4e/7fpMM0majFwPRqA0lihUYc+14tnPIEUfM0SJzD2QFH
jgZRnDO5c72BrhKB4kpCdfSF+Q0kUq8lJn0yQrX+UO26rxCCc/kpTBiB1GI2qWb4
7HjAewTNO59deU/uKePn66DOUYN3OVd8WymkdqI6HxSA/jlgrDSw7uVs5BpheuBr
lB2MIiQWGkOvG4FTIgqqr1ZoocqcIF+YHDJV4gFUPrSS3N5m4SvDGz6uEcnob53m
3TcQNK6yXnMy4RamTvW+7R2dIF9GGHYc
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:47:51 2025 by rpki-client