Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/4ff3abe9-248f-3291-a35a-2d55a79ae1d9.roa
File: 4ff3abe9-248f-3291-a35a-2d55a79ae1d9.roa (raw, json)
Hash identifier: m+FX+Txa7EncRFo2p17AfHdP6jQB46st7na9Jd03JJg=
Subject key identifier: E1:CF:A9:BD:FB:C2:1F:89:B9:A0:64:9C:C1:02:2A:67:A7:54:F7:79
Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Certificate serial: 010D0C9F43285848A1361BF1287D96A08F46A480
Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/4ff3abe9-248f-3291-a35a-2d55a79ae1d9.roa
Signing time: Wed 22 Jan 2025 14:00:52 +0000
ROA not before: Wed 22 Jan 2025 14:00:52 +0000
ROA not after: Tue 22 Apr 2025 13:00:52 +0000
asID: 399612
IP address blocks: 2604:7e00:31::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:36:1b:f1:28:7d:96:a0:8f:46:a4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Validity
Not Before: Jan 22 14:00:52 2025 GMT
Not After : Apr 22 13:00:52 2025 GMT
Subject: CN=bc1e2be8-ba1b-45a4-a5b4-b5fc9b4fefd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a5:7e:61:03:1f:14:b4:4f:7c:e5:27:2c:2a:
26:6a:af:da:4e:c8:02:c2:c6:d9:c7:bb:a7:bf:d5:
3e:14:c5:22:0b:3f:d9:1b:94:fc:0a:d5:eb:ed:58:
87:78:11:e3:c0:74:69:f7:b4:5c:53:94:6e:75:80:
a1:f7:89:65:d7:7f:e5:2d:4a:27:c9:55:6f:27:6c:
70:bc:aa:e0:b9:f0:bf:6d:0b:b2:6b:32:60:a1:f9:
1d:bc:e9:5a:a8:91:d6:de:29:34:18:8c:e2:80:d2:
cf:21:a9:6a:92:73:22:f6:3b:b1:17:8b:c8:de:44:
af:77:24:86:8b:2a:4e:30:c2:c5:d0:df:81:aa:4d:
a3:f3:af:16:db:f1:42:7f:c1:89:46:1c:a8:ec:ee:
63:e5:a8:a7:8a:75:12:20:19:36:57:1b:fb:97:50:
e7:1b:cb:4f:31:bc:f1:7e:e1:d0:36:5c:9c:01:f9:
a6:94:dc:c7:b3:09:77:68:08:1f:29:fe:35:49:30:
bb:4e:29:a4:b7:4e:20:63:5c:64:b3:0f:a7:dd:2a:
68:7d:84:7a:70:be:5b:32:a0:63:1b:71:7f:99:b9:
c6:c1:c6:5f:aa:86:58:b8:d2:dc:f1:42:94:7f:0c:
34:bf:d6:db:b9:49:52:16:36:78:56:b7:3d:f3:3c:
f1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:CF:A9:BD:FB:C2:1F:89:B9:A0:64:9C:C1:02:2A:67:A7:54:F7:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/4ff3abe9-248f-3291-a35a-2d55a79ae1d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
X509v3 Authority Key Identifier:
keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:7e00:31::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:07:5a:ed:7a:60:bf:fa:92:f4:b8:88:d6:3f:ec:c5:c8:d0:
34:a3:c7:dc:c7:2d:22:4d:2a:b9:2d:35:22:e0:79:0e:d0:ba:
62:9e:6b:59:54:9d:bd:c4:b5:f4:60:9b:26:b1:03:fb:8b:68:
2a:ab:50:b2:a4:72:8b:3d:be:8c:eb:d0:e4:18:68:99:ed:e9:
27:1a:29:13:ef:93:f0:02:7b:65:38:87:35:95:48:33:86:db:
41:67:c3:c7:2d:c6:e4:e8:c8:9e:0c:55:c7:9b:fe:23:35:04:
fe:67:08:0f:e1:99:c0:c3:78:e8:c1:70:86:fc:45:fd:64:84:
5a:77:b3:b0:8d:1a:66:7e:43:fc:d4:2c:33:30:0e:5c:74:04:
37:69:ef:b6:3d:d5:5d:04:e5:3a:a1:10:d0:db:60:0a:db:de:
86:88:c0:b5:d3:9e:c7:14:1b:f0:47:30:bb:bf:5f:f0:64:a8:
0f:bd:08:1a:dd:08:9e:f5:dd:92:b8:7d:5c:2f:77:39:17:19:
40:84:f5:84:da:b6:a4:5b:3f:25:99:aa:56:86:76:29:75:ca:
56:3d:55:8a:97:e1:3b:22:b0:ef:5b:91:40:6e:9f:d1:9a:f2:
93:db:e8:ad:91:3f:9a:2b:34:6c:a1:a9:23:dd:0f:6d:f0:f2:
23:da:fa:f2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEihNhvxKH2WoI9GpIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3
OWZmMB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk
YmMxZTJiZTgtYmExYi00NWE0LWE1YjQtYjVmYzliNGZlZmQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6V+YQMfFLRPfOUnLComaq/aTsgCwsbZx7un
v9U+FMUiCz/ZG5T8CtXr7ViHeBHjwHRp97RcU5RudYCh94ll13/lLUonyVVvJ2xw
vKrgufC/bQuyazJgofkdvOlaqJHW3ik0GIzigNLPIalqknMi9juxF4vI3kSvdySG
iypOMMLF0N+Bqk2j868W2/FCf8GJRhyo7O5j5aininUSIBk2Vxv7l1DnG8tPMbzx
fuHQNlycAfmmlNzHswl3aAgfKf41STC7Timkt04gY1xksw+n3SpofYR6cL5bMqBj
G3F/mbnGwcZfqoZYuNLc8UKUfww0v9bbuUlSFjZ4Vrc98zzxnwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOHPqb37wh+JuaBknMECKmenVPd5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4
YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvNGZmM2FiZTktMjQ4Zi0z
MjkxLWEzNWEtMmQ1NWE3OWFlMWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4
MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0
NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0
ODJmNDc5ZmYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgR+AAAx
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAF4HWu16YL/6kvS4iNY/7MXI0DSjx9zHLSJNKrktNSLgeQ7QumKe
a1lUnb3EtfRgmyaxA/uLaCqrULKkcos9vozr0OQYaJnt6ScaKRPvk/ACe2U4hzWV
SDOG20Fnw8ctxuToyJ4MVceb/iM1BP5nCA/hmcDDeOjBcIb8Rf1khFp3s7CNGmZ+
Q/zULDMwDlx0BDdp77Y91V0E5TqhENDbYArb3oaIwLXTnscUG/BHMLu/X/BkqA+9
CBrdCJ713ZK4fVwvdzkXGUCE9YTatqRbPyWZqlaGdil1ylY9VYqX4TsisO9bkUBu
n9Ga8pPb6K2RP5orNGyhqSPdD23w8iPa+vI=
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:35:14 2025 by rpki-client