Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c/4df008ac-91b7-379a-aa5f-326dc986cbe8.roa
File: 4df008ac-91b7-379a-aa5f-326dc986cbe8.roa (raw, json)
Hash identifier: 98HRqg3tSoo/jQlHeJg4FajF75X/FHkmUsqUQKiqYfw=
Subject key identifier: 8D:EE:C2:97:EF:86:D8:4A:46:7A:6A:99:FD:26:F7:40:8A:B8:2B:62
Certificate issuer: /CN=f0682b49-784e-4da6-8c82-9a4562d0b08c
Certificate serial: 010D0C9F43285848748B1DA8AE1DDD6EBFD58C00
Authority key identifier: C3:76:B5:48:78:AD:92:A1:DA:19:D5:D4:9D:0D:28:22:AA:E7:47:86
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c/4df008ac-91b7-379a-aa5f-326dc986cbe8.roa
Signing time: Mon 06 Jan 2025 14:00:52 +0000
ROA not before: Mon 06 Jan 2025 14:00:52 +0000
ROA not after: Sun 06 Apr 2025 13:00:52 +0000
asID: 19382
IP address blocks: 2620:13c:e001::/48 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:74:8b:1d:a8:ae:1d:dd:6e:bf:d5:8c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0682b49-784e-4da6-8c82-9a4562d0b08c
Validity
Not Before: Jan 6 14:00:52 2025 GMT
Not After : Apr 6 13:00:52 2025 GMT
Subject: CN=8cec802a-7e1b-4436-a78f-4d0ce7be106f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5b:bd:15:8b:d7:7a:da:5f:02:72:7c:a8:05:
b3:6d:42:b8:06:1d:58:16:4e:b8:ea:4e:f5:4e:c5:
f1:0d:7a:14:98:5e:a1:e5:77:77:44:44:e4:f1:71:
d2:b6:c2:55:e3:98:74:96:4a:d2:d3:f1:a5:48:d1:
73:b3:06:bf:d7:3b:9f:66:ad:f8:56:41:6c:86:e7:
99:03:24:b1:25:40:bb:07:5e:e1:26:5d:10:70:52:
cc:76:a1:28:45:0a:4e:9e:1d:9a:fb:52:aa:b4:9d:
8e:a3:64:68:cc:8a:61:a4:71:be:c7:55:d5:45:72:
f4:46:62:1e:0b:7d:6a:2f:c2:f3:05:75:f1:f1:bc:
41:21:88:03:6e:f4:00:9a:b5:c9:d1:dd:96:d8:eb:
06:eb:89:15:fb:77:6c:58:96:c4:1c:34:e4:12:38:
15:49:06:f9:5f:b9:23:9f:7d:99:a9:06:12:54:cc:
99:21:e6:33:78:a9:20:82:61:e8:0d:84:09:4f:1e:
2d:8c:0c:95:43:ce:52:51:3f:6b:6e:f7:bc:43:61:
85:ac:71:7c:22:3a:df:bd:0e:59:e8:73:2c:49:e6:
2f:fb:20:07:dc:e3:d1:33:0a:1f:f4:dc:89:de:3c:
4e:1e:2f:bb:bf:ea:ec:e5:68:f7:ec:b4:00:50:23:
ce:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:EE:C2:97:EF:86:D8:4A:46:7A:6A:99:FD:26:F7:40:8A:B8:2B:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c/4df008ac-91b7-379a-aa5f-326dc986cbe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c/f0682b49-784e-4da6-8c82-9a4562d0b08c.crl
X509v3 Authority Key Identifier:
keyid:C3:76:B5:48:78:AD:92:A1:DA:19:D5:D4:9D:0D:28:22:AA:E7:47:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:13c:e001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:32:32:b0:20:a8:f1:aa:8b:04:01:bd:5b:73:b6:c9:b4:cb:
34:ae:87:ba:74:f7:ef:6c:3b:96:ef:f8:4e:a9:99:68:01:ce:
be:e2:f7:3f:42:f9:14:63:8e:a5:d8:3c:c1:38:c4:8e:67:33:
f1:ca:03:09:62:65:ff:0b:ab:b4:a0:12:85:ff:9a:fd:9d:58:
9a:84:b5:59:59:4a:71:05:78:11:64:6f:9b:50:fa:50:f8:74:
db:2d:42:09:8a:f6:5e:83:13:a3:9a:e3:9b:59:93:6a:7f:4c:
5d:ab:ea:4a:44:ab:81:55:09:bc:35:36:ad:68:3e:f4:75:48:
c5:cd:ad:16:b4:2b:0a:79:07:e1:13:55:ca:ab:50:6a:c3:87:
dd:17:c1:58:a5:74:33:f9:5b:15:65:eb:7e:c0:ca:47:d0:d9:
58:57:83:d2:26:b8:a7:2e:11:6e:a4:ee:61:80:46:88:8e:88:
f4:b7:32:16:99:b4:40:ec:ad:f4:66:68:5c:b1:b8:fb:90:d0:
a1:0e:b0:16:f9:f5:84:b7:05:8e:b1:6b:dd:33:37:b2:1b:32:
b4:85:ee:5c:05:05:71:38:ef:17:a3:cb:c4:6b:0d:2d:4f:cb:
29:e6:61:68:ab:b2:05:94:73:83:25:76:28:71:06:20:4b:c3:
64:9b:32:33
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEh0ix2orh3dbr/VjAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjA2ODJiNDktNzg0ZS00ZGE2LThjODItOWE0NTYyZDBi
MDhjMB4XDTI1MDEwNjE0MDA1MloXDTI1MDQwNjEzMDA1MlowLzEtMCsGA1UEAxMk
OGNlYzgwMmEtN2UxYi00NDM2LWE3OGYtNGQwY2U3YmUxMDZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1u9FYvXetpfAnJ8qAWzbUK4Bh1YFk646k71
TsXxDXoUmF6h5Xd3RETk8XHStsJV45h0lkrS0/GlSNFzswa/1zufZq34VkFshueZ
AySxJUC7B17hJl0QcFLMdqEoRQpOnh2a+1KqtJ2Oo2RozIphpHG+x1XVRXL0RmIe
C31qL8LzBXXx8bxBIYgDbvQAmrXJ0d2W2OsG64kV+3dsWJbEHDTkEjgVSQb5X7kj
n32ZqQYSVMyZIeYzeKkggmHoDYQJTx4tjAyVQ85SUT9rbve8Q2GFrHF8IjrfvQ5Z
6HMsSeYv+yAH3OPRMwof9NyJ3jxOHi+7v+rs5Wj37LQAUCPO0QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFI3uwpfvhthKRnpqmf0m90CKuCtiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMDY4
MmI0OS03ODRlLTRkYTYtOGM4Mi05YTQ1NjJkMGIwOGMvNGRmMDA4YWMtOTFiNy0z
NzlhLWFhNWYtMzI2ZGM5ODZjYmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjA2ODJiNDktNzg0ZS00ZGE2LThj
ODItOWE0NTYyZDBiMDhjL2YwNjgyYjQ5LTc4NGUtNGRhNi04YzgyLTlhNDU2MmQw
YjA4Yy5jcmwwHwYDVR0jBBgwFoAUw3a1SHitkqHaGdXUnQ0oIqrnR4YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9mMDY4MmI0OS03ODRlLTRkYTYtOGM4Mi05YTQ1
NjJkMGIwOGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABPOAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACsyMrAgqPGqiwQBvVtztsm0yzSuh7p09+9sO5bv+E6pmWgBzr7i
9z9C+RRjjqXYPME4xI5nM/HKAwliZf8Lq7SgEoX/mv2dWJqEtVlZSnEFeBFkb5tQ
+lD4dNstQgmK9l6DE6Oa45tZk2p/TF2r6kpEq4FVCbw1Nq1oPvR1SMXNrRa0Kwp5
B+ETVcqrUGrDh90XwVildDP5WxVl637AykfQ2VhXg9ImuKcuEW6k7mGARoiOiPS3
MhaZtEDsrfRmaFyxuPuQ0KEOsBb59YS3BY6xa90zN7IbMrSF7lwFBXE47xejy8Rr
DS1PyynmYWirsgWUc4MldihxBiBLw2SbMjM=
-----END CERTIFICATE-----
Generated at Tue Apr 29 23:37:17 2025 by rpki-client