Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/f0c4693c-151f-3745-b1ce-9d65b68b967e.roa
File: f0c4693c-151f-3745-b1ce-9d65b68b967e.roa (raw, json)
Hash identifier: eXTWbBwpKfcIoWuyUrCXDM22boVaYRQvVHpbuZ3wEO0=
Subject key identifier: DA:1D:F8:D3:9B:BB:EB:D8:4F:C0:A3:80:40:69:84:3B:D9:DA:89:BA
Certificate issuer: /CN=a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e
Certificate serial: 010D0C9F43285848AF2B7D296717C1F98B3B0480
Authority key identifier: 8F:2C:1A:5D:87:37:7C:47:21:1E:17:7A:7A:C5:62:C1:07:5E:DE:58
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/f0c4693c-151f-3745-b1ce-9d65b68b967e.roa
Signing time: Mon 27 Jan 2025 14:00:52 +0000
ROA not before: Mon 27 Jan 2025 14:00:52 +0000
ROA not after: Sun 27 Apr 2025 13:00:52 +0000
asID: 133846
IP address blocks: 2602:fab0:10::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:2b:7d:29:67:17:c1:f9:8b:3b:04:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e
Validity
Not Before: Jan 27 14:00:52 2025 GMT
Not After : Apr 27 13:00:52 2025 GMT
Subject: CN=f695b1c0-c8c6-4e8d-8eb0-f5d598e19a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:94:0e:e8:8b:c5:11:69:7c:43:c7:4f:38:65:
63:61:be:1b:40:fa:34:c4:b7:b4:ff:53:fa:74:1c:
09:cb:12:09:2f:f4:c7:ab:a7:61:54:2c:e5:73:3e:
90:1b:dd:38:31:4c:97:aa:54:0a:ae:27:e5:24:11:
da:65:73:5d:16:08:e5:5f:72:71:7f:19:e6:3f:68:
79:e5:e9:49:cd:c0:ba:c6:7b:e5:48:05:be:f3:4d:
c4:05:37:36:47:da:0b:ce:56:5a:39:f2:0d:5f:2f:
27:a5:49:cc:96:fd:64:a8:40:0e:c9:2d:e6:41:4b:
cd:ee:fc:70:d6:a9:f0:91:5d:6e:0d:61:82:f2:1b:
98:4e:0c:2e:e6:38:20:31:90:c3:80:d3:cf:8a:e7:
22:ea:69:f6:55:ad:23:20:8d:bf:b0:fa:f6:8a:a1:
48:4a:74:e2:b7:93:b0:da:ac:40:a1:d6:0e:32:f5:
49:2e:a7:e7:04:e4:ac:97:02:10:eb:a6:7d:ab:1c:
70:97:94:74:44:3e:ea:fd:ba:ec:a2:d3:b8:16:41:
f2:fa:dd:a1:d8:e9:58:6b:75:46:1f:17:43:ef:87:
2a:89:8d:23:69:55:a7:4c:c8:af:b5:07:93:00:1b:
05:3e:2b:f8:4f:ba:80:a0:28:69:dc:2f:ac:f1:ef:
00:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:1D:F8:D3:9B:BB:EB:D8:4F:C0:A3:80:40:69:84:3B:D9:DA:89:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/f0c4693c-151f-3745-b1ce-9d65b68b967e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.crl
X509v3 Authority Key Identifier:
keyid:8F:2C:1A:5D:87:37:7C:47:21:1E:17:7A:7A:C5:62:C1:07:5E:DE:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fab0:10::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:ac:92:55:75:a7:bd:6b:00:2e:62:4b:56:31:b1:9e:89:85:
d4:aa:1c:ea:b4:5b:f3:5b:47:08:bf:a9:46:64:2f:06:51:7c:
cd:b4:01:49:6c:f1:78:52:11:7e:de:65:0e:04:93:f2:5b:7a:
55:a5:d1:d6:1f:5c:62:be:43:0b:bb:05:0b:3a:d7:8f:12:b2:
cc:29:cf:c9:db:8d:6b:03:0a:df:90:c9:9f:15:3e:50:46:ba:
f4:4e:2e:ef:40:50:7e:63:56:0e:e1:02:6b:d2:2e:a7:21:3b:
3b:38:b1:e4:ca:7d:97:fb:42:26:ef:4f:6d:98:0e:36:87:c5:
43:b0:66:31:04:d1:c0:da:0c:ff:32:df:a1:b8:25:a0:44:82:
d2:0c:43:c3:f5:b6:a2:46:15:cf:43:58:b2:8c:50:38:c2:1c:
84:01:1d:0c:b2:f5:76:1a:6d:fb:0f:12:85:67:3d:4d:b3:03:
de:21:06:66:46:c2:c0:ad:e4:10:94:1e:09:ba:3f:d7:20:31:
e1:4f:f7:62:c5:23:e1:33:3d:21:a0:fb:68:b4:ec:a8:8a:ee:
ef:91:cd:46:1d:12:e8:4a:f6:3e:97:68:49:b8:f0:48:3e:77:
b8:33:e4:56:b2:41:4e:8f:08:7f:bc:d4:7b:6c:9f:2c:4d:55:
82:6f:0b:7e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEivK30pZxfB+Ys7BIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTc0YmIyZjEtNTk2Ni00YzRhLWE1ZTQtYWNlNTllMWZh
MjdlMB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk
ZjY5NWIxYzAtYzhjNi00ZThkLThlYjAtZjVkNTk4ZTE5YTNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZQO6IvFEWl8Q8dPOGVjYb4bQPo0xLe0/1P6
dBwJyxIJL/THq6dhVCzlcz6QG904MUyXqlQKriflJBHaZXNdFgjlX3JxfxnmP2h5
5elJzcC6xnvlSAW+803EBTc2R9oLzlZaOfINXy8npUnMlv1kqEAOyS3mQUvN7vxw
1qnwkV1uDWGC8huYTgwu5jggMZDDgNPPiuci6mn2Va0jII2/sPr2iqFISnTit5Ow
2qxAodYOMvVJLqfnBOSslwIQ66Z9qxxwl5R0RD7q/brsotO4FkHy+t2h2OlYa3VG
HxdD74cqiY0jaVWnTMivtQeTABsFPiv4T7qAoChp3C+s8e8ADQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNod+NObu+vYT8CjgEBphDvZ2om6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzRi
YjJmMS01OTY2LTRjNGEtYTVlNC1hY2U1OWUxZmEyN2UvZjBjNDY5M2MtMTUxZi0z
NzQ1LWIxY2UtOWQ2NWI2OGI5NjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTc0YmIyZjEtNTk2Ni00YzRhLWE1
ZTQtYWNlNTllMWZhMjdlL2E3NGJiMmYxLTU5NjYtNGM0YS1hNWU0LWFjZTU5ZTFm
YTI3ZS5jcmwwHwYDVR0jBBgwFoAUjywaXYc3fEchHhd6esViwQde3lgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hNzRiYjJmMS01OTY2LTRjNGEtYTVlNC1hY2U1
OWUxZmEyN2UuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL6sAAQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAI6sklV1p71rAC5iS1YxsZ6JhdSqHOq0W/NbRwi/qUZkLwZRfM20
AUls8XhSEX7eZQ4Ek/JbelWl0dYfXGK+Qwu7BQs6148Ssswpz8nbjWsDCt+QyZ8V
PlBGuvROLu9AUH5jVg7hAmvSLqchOzs4seTKfZf7QibvT22YDjaHxUOwZjEE0cDa
DP8y36G4JaBEgtIMQ8P1tqJGFc9DWLKMUDjCHIQBHQyy9XYabfsPEoVnPU2zA94h
BmZGwsCt5BCUHgm6P9cgMeFP92LFI+EzPSGg+2i07KiK7u+RzUYdEuhK9j6XaEm4
8Eg+d7gz5FayQU6PCH+81HtsnyxNVYJvC34=
-----END CERTIFICATE-----
Generated at Wed Apr 9 00:55:55 2025 by rpki-client