Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/f76ffdbd-e124-38a9-bd0f-3cf770bb8ebb.roa
File: f76ffdbd-e124-38a9-bd0f-3cf770bb8ebb.roa (raw, json)
Hash identifier: tWpLwNL80RRxnTEgQLIjt0gb9qzZ+nuaUsLpEMR8AQs=
Subject key identifier: 72:D5:72:A7:3C:8E:BA:33:17:C1:09:19:F4:A4:07:9E:93:F4:D8:E8
Certificate issuer: /CN=9f983207-8073-42af-88ee-df4902c8adaf
Certificate serial: 010D0C9F432858488AE0A4034E591F42FB1CEC80
Authority key identifier: C3:2C:B9:FB:7A:22:7F:4A:05:1E:4A:99:A8:FB:6E:8D:68:59:CA:A1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/f76ffdbd-e124-38a9-bd0f-3cf770bb8ebb.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 65535
IP address blocks: 2602:fa2e:100::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:a4:03:4e:59:1f:42:fb:1c:ec:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f983207-8073-42af-88ee-df4902c8adaf
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=68171f79-b243-42e5-af6c-75376ce8dabf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bf:42:4e:fc:59:f4:92:39:97:be:db:b2:c6:
60:5a:58:8b:43:a8:e4:2d:34:88:d3:9e:32:41:f6:
47:b1:d3:79:e4:54:2b:96:84:84:a2:3f:2c:20:86:
57:6b:f6:f1:fa:d0:44:9f:96:f3:73:1f:7e:58:15:
3f:c2:e9:11:1a:3d:9f:e8:ac:49:58:39:92:e6:1a:
28:ac:87:c1:0f:3c:b0:77:11:be:d0:b6:2d:b8:55:
e6:03:f0:c2:55:04:6e:4c:3d:87:c8:47:bf:4e:00:
f6:5b:c6:34:ca:dc:7e:4e:89:08:a6:31:6e:ed:97:
46:e8:d6:d4:ae:40:56:10:35:ab:5f:12:a6:7a:3f:
5b:0d:83:5d:1f:e1:ca:99:ff:75:5d:5c:6c:ab:f9:
92:63:f4:64:a3:aa:4c:b7:f2:d2:34:ef:12:7b:44:
68:1b:5e:4f:45:2f:7f:b8:01:78:dc:64:55:f2:db:
78:ee:45:f9:d8:4e:d7:97:22:ec:a7:0a:79:b0:9e:
74:25:44:bb:a2:e1:15:a4:f6:54:94:49:c3:b0:06:
2c:eb:d9:55:99:2c:e6:c9:b2:83:8d:3e:61:0e:08:
34:7d:d1:e5:8a:68:ef:df:3b:32:64:a0:36:21:23:
02:3c:c1:36:08:60:52:7b:11:0a:a6:33:21:01:99:
a1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D5:72:A7:3C:8E:BA:33:17:C1:09:19:F4:A4:07:9E:93:F4:D8:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/f76ffdbd-e124-38a9-bd0f-3cf770bb8ebb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/9f983207-8073-42af-88ee-df4902c8adaf.crl
X509v3 Authority Key Identifier:
keyid:C3:2C:B9:FB:7A:22:7F:4A:05:1E:4A:99:A8:FB:6E:8D:68:59:CA:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fa2e:100::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c6:d8:c3:94:f2:8d:a5:37:29:dc:c4:12:df:bd:2c:d4:27:13:
9d:78:a5:19:70:2b:d9:15:64:f7:e5:ac:04:95:b2:b0:5a:23:
2a:e7:27:cf:7e:da:76:0d:99:31:8f:3f:46:af:6e:14:61:88:
c1:cd:19:16:00:3c:8c:ad:1e:c3:68:95:a7:36:ee:20:7b:ee:
6e:36:f0:6c:db:6a:d3:99:de:36:2e:71:4e:a7:cd:1b:b3:12:
ac:71:ae:74:f4:44:66:01:21:b1:a6:73:07:49:ce:3f:c6:5e:
d9:47:4f:cb:eb:a1:97:3b:ad:e3:10:da:87:58:4f:d8:5d:f4:
e3:7c:6c:25:70:c9:71:28:0f:3d:bf:54:9c:32:b5:11:b8:dc:
83:58:35:32:95:dd:59:48:06:bb:0b:36:96:01:c6:3f:40:f2:
82:73:bd:e4:a8:a2:d8:50:fd:a6:40:92:6d:74:f7:2e:f1:e1:
6e:5b:ea:bb:ec:d7:fa:d6:9e:42:63:b9:fa:03:b4:49:ea:6b:
2a:03:5a:31:19:6d:96:d9:0e:b9:e9:b0:0d:c8:60:68:ee:4e:
b3:a9:46:36:69:bd:ed:c2:ca:ae:ae:06:54:7f:e2:93:af:cf:
53:a7:d0:fb:07:79:51:bb:60:14:b1:bf:81:6d:22:e5:a6:04:
a6:51:e0:31
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiK4KQDTlkfQvsc7IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWY5ODMyMDctODA3My00MmFmLTg4ZWUtZGY0OTAyYzhh
ZGFmMB4XDTI1MDExNDE0MDA1MVoXDTI1MDQxNDEzMDA1MVowLzEtMCsGA1UEAxMk
NjgxNzFmNzktYjI0My00MmU1LWFmNmMtNzUzNzZjZThkYWJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmL9CTvxZ9JI5l77bssZgWliLQ6jkLTSI054y
QfZHsdN55FQrloSEoj8sIIZXa/bx+tBEn5bzcx9+WBU/wukRGj2f6KxJWDmS5hoo
rIfBDzywdxG+0LYtuFXmA/DCVQRuTD2HyEe/TgD2W8Y0ytx+TokIpjFu7ZdG6NbU
rkBWEDWrXxKmej9bDYNdH+HKmf91XVxsq/mSY/Rko6pMt/LSNO8Se0RoG15PRS9/
uAF43GRV8tt47kX52E7XlyLspwp5sJ50JUS7ouEVpPZUlEnDsAYs69lVmSzmybKD
jT5hDgg0fdHlimjv3zsyZKA2ISMCPME2CGBSexEKpjMhAZmhpQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHLVcqc8jrozF8EJGfSkB56T9NjoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85Zjk4
MzIwNy04MDczLTQyYWYtODhlZS1kZjQ5MDJjOGFkYWYvZjc2ZmZkYmQtZTEyNC0z
OGE5LWJkMGYtM2NmNzcwYmI4ZWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWY5ODMyMDctODA3My00MmFmLTg4
ZWUtZGY0OTAyYzhhZGFmLzlmOTgzMjA3LTgwNzMtNDJhZi04OGVlLWRmNDkwMmM4
YWRhZi5jcmwwHwYDVR0jBBgwFoAUwyy5+3oif0oFHkqZqPtujWhZyqEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85Zjk4MzIwNy04MDczLTQyYWYtODhlZS1kZjQ5
MDJjOGFkYWYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6LgEA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAMbYw5TyjaU3KdzEEt+9LNQnE514pRlwK9kVZPflrASVsrBaIyrn
J89+2nYNmTGPP0avbhRhiMHNGRYAPIytHsNolac27iB77m428GzbatOZ3jYucU6n
zRuzEqxxrnT0RGYBIbGmcwdJzj/GXtlHT8vroZc7reMQ2odYT9hd9ON8bCVwyXEo
Dz2/VJwytRG43INYNTKV3VlIBrsLNpYBxj9A8oJzveSoothQ/aZAkm109y7x4W5b
6rvs1/rWnkJjufoDtEnqayoDWjEZbZbZDrnpsA3IYGjuTrOpRjZpve3Cyq6uBlR/
4pOvz1On0PsHeVG7YBSxv4FtIuWmBKZR4DE=
-----END CERTIFICATE-----
Generated at Tue Apr 8 18:16:07 2025 by rpki-client