Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/4fd3b07a-aba9-3f5e-87b9-9307e5870d4c.roa
File: 4fd3b07a-aba9-3f5e-87b9-9307e5870d4c.roa (raw, json)
Hash identifier: 5GEfqES2tJHMLT1PaBdJsGzAqAC1Fiv4nFxZs5AkV/4=
Subject key identifier: 43:89:DB:1A:F9:54:E6:72:95:5A:76:64:A7:CD:F2:E7:92:6C:5E:4B
Certificate issuer: /CN=3a3095c5-fb6a-4400-bb74-b55eff2073bc
Certificate serial: 010D0C9F43285848EFC621515ACA05E68EE35200
Authority key identifier: 10:A0:E1:F5:16:FB:75:75:1F:9D:D3:8F:00:2D:CE:15:BE:77:4E:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/4fd3b07a-aba9-3f5e-87b9-9307e5870d4c.roa
Signing time: Wed 19 Feb 2025 17:24:17 +0000
ROA not before: Wed 19 Feb 2025 17:24:17 +0000
ROA not after: Tue 20 May 2025 16:24:17 +0000
asID: 399970
IP address blocks: 2602:fc3b:400::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:c6:21:51:5a:ca:05:e6:8e:e3:52:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3095c5-fb6a-4400-bb74-b55eff2073bc
Validity
Not Before: Feb 19 17:24:17 2025 GMT
Not After : May 20 16:24:17 2025 GMT
Subject: CN=7f81f845-cbe8-4690-abc8-9ca4d5dafee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:be:d0:de:d4:0b:02:a2:ae:13:a9:ac:14:a5:
7d:d6:de:71:6e:38:c5:cb:23:95:2a:64:71:69:0f:
a3:11:68:9a:67:c5:06:68:a5:51:ac:26:97:bb:a8:
c6:ad:23:81:19:a1:f0:bf:0a:72:79:28:7e:1d:27:
9f:60:14:1c:ff:2c:45:f0:c3:59:a1:1c:8e:aa:58:
6d:c3:ec:a6:b6:20:ba:04:20:44:a0:61:1d:80:20:
f9:87:5d:13:b8:90:8f:26:d1:d4:b5:e3:81:9d:17:
48:56:fc:42:d4:0f:31:98:18:2d:2d:dc:53:70:ee:
36:c9:e4:b4:8b:a1:9e:fd:f2:11:e6:2e:4f:3e:d5:
58:55:8d:4c:1f:5e:61:e2:c4:a4:58:89:b8:fe:ce:
55:c6:03:54:67:bf:a5:72:96:e3:20:c1:61:14:64:
ea:4d:79:e7:d7:1c:a5:d6:01:00:58:f6:5e:0f:85:
1e:87:84:ac:8c:bd:03:86:c7:f9:44:9f:13:c1:21:
fe:c2:87:f7:b3:96:01:33:b6:83:86:74:2c:87:fc:
fc:6f:6b:3d:12:0b:c0:c1:28:cf:2e:41:38:b6:0e:
c7:6b:f2:5f:95:c1:9c:fd:31:ac:19:d6:c1:aa:fc:
b2:34:c8:bc:f5:50:ac:a3:42:09:22:6c:ce:6b:12:
13:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:89:DB:1A:F9:54:E6:72:95:5A:76:64:A7:CD:F2:E7:92:6C:5E:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/4fd3b07a-aba9-3f5e-87b9-9307e5870d4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/3a3095c5-fb6a-4400-bb74-b55eff2073bc.crl
X509v3 Authority Key Identifier:
keyid:10:A0:E1:F5:16:FB:75:75:1F:9D:D3:8F:00:2D:CE:15:BE:77:4E:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fc3b:400::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:83:19:67:b9:1f:65:9c:a0:25:66:a9:2c:56:7a:18:22:10:
f1:85:f7:f1:97:69:36:b2:5d:a3:e7:19:df:7b:cc:1c:24:14:
c7:52:12:27:51:a7:ef:0f:ae:23:f6:73:fa:17:84:fc:56:61:
54:d1:75:a3:41:c2:0b:a3:49:04:f6:68:72:71:62:9e:c1:88:
ea:82:1c:96:ba:0b:96:67:ad:c4:28:22:09:b0:7f:0a:12:66:
89:e3:35:da:21:15:47:2a:b7:28:19:53:c8:c0:68:98:02:a4:
64:5d:ad:81:03:fd:86:00:6e:73:d0:5f:0d:2e:da:d4:d9:e2:
95:6e:4e:b0:97:26:ab:a3:2c:17:25:ff:ea:4b:de:da:9c:c8:
0c:03:4c:22:5d:38:84:31:4e:36:cb:cc:bf:f6:73:6a:fb:93:
2d:2c:ae:74:be:d3:38:cf:bc:54:27:83:9e:2d:b6:68:81:02:
4a:ec:c4:49:f9:69:1e:6b:1a:68:4c:43:2a:98:1c:4e:bc:d2:
f4:7b:b8:10:15:d1:2b:9f:3f:e7:15:ec:65:1e:a2:47:2a:9a:
62:69:95:d8:23:10:0c:c1:b2:fa:ac:02:ee:f5:b5:f7:f4:62:
45:5d:85:9e:bf:de:a3:49:cb:2a:a1:3e:2b:a2:38:1a:87:6b:
e8:bf:c1:97
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjvxiFRWsoF5o7jUgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2EzMDk1YzUtZmI2YS00NDAwLWJiNzQtYjU1ZWZmMjA3
M2JjMB4XDTI1MDIxOTE3MjQxN1oXDTI1MDUyMDE2MjQxN1owLzEtMCsGA1UEAxMk
N2Y4MWY4NDUtY2JlOC00NjkwLWFiYzgtOWNhNGQ1ZGFmZWU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk77Q3tQLAqKuE6msFKV91t5xbjjFyyOVKmRx
aQ+jEWiaZ8UGaKVRrCaXu6jGrSOBGaHwvwpyeSh+HSefYBQc/yxF8MNZoRyOqlht
w+ymtiC6BCBEoGEdgCD5h10TuJCPJtHUteOBnRdIVvxC1A8xmBgtLdxTcO42yeS0
i6Ge/fIR5i5PPtVYVY1MH15h4sSkWIm4/s5VxgNUZ7+lcpbjIMFhFGTqTXnn1xyl
1gEAWPZeD4Ueh4SsjL0Dhsf5RJ8TwSH+wof3s5YBM7aDhnQsh/z8b2s9EgvAwSjP
LkE4tg7Ha/JflcGc/TGsGdbBqvyyNMi89VCso0IJImzOaxIT6QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEOJ2xr5VOZylVp2ZKfN8ueSbF5LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zYTMw
OTVjNS1mYjZhLTQ0MDAtYmI3NC1iNTVlZmYyMDczYmMvNGZkM2IwN2EtYWJhOS0z
ZjVlLTg3YjktOTMwN2U1ODcwZDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2EzMDk1YzUtZmI2YS00NDAwLWJi
NzQtYjU1ZWZmMjA3M2JjLzNhMzA5NWM1LWZiNmEtNDQwMC1iYjc0LWI1NWVmZjIw
NzNiYy5jcmwwHwYDVR0jBBgwFoAUEKDh9Rb7dXUfndOPAC3OFb53TqIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8zYTMwOTVjNS1mYjZhLTQ0MDAtYmI3NC1iNTVl
ZmYyMDczYmMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8OwQA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAG+DGWe5H2WcoCVmqSxWehgiEPGF9/GXaTayXaPnGd97zBwkFMdS
EidRp+8PriP2c/oXhPxWYVTRdaNBwgujSQT2aHJxYp7BiOqCHJa6C5ZnrcQoIgmw
fwoSZonjNdohFUcqtygZU8jAaJgCpGRdrYED/YYAbnPQXw0u2tTZ4pVuTrCXJquj
LBcl/+pL3tqcyAwDTCJdOIQxTjbLzL/2c2r7ky0srnS+0zjPvFQng54ttmiBAkrs
xEn5aR5rGmhMQyqYHE680vR7uBAV0SufP+cV7GUeokcqmmJpldgjEAzBsvqsAu71
tff0YkVdhZ6/3qNJyyqhPiuiOBqHa+i/wZc=
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:31:28 2025 by rpki-client