Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314/4935dcca-fda3-3095-ae33-8359b2b1cc48.roa
File: 4935dcca-fda3-3095-ae33-8359b2b1cc48.roa (raw, json)
Hash identifier: Is2H6TDPiQeHGRnlCePTobcYjaXcyViRW/g3lgvPJdQ=
Subject key identifier: 50:27:11:28:06:8B:C8:16:17:0C:D0:F3:E2:F7:71:DB:1F:CB:B5:48
Certificate issuer: /CN=d826c88d-e62d-45fe-a08c-0b0a021a5314
Certificate serial: 010D0C9F43285848D7A6530DC55051822C35D4C0
Authority key identifier: A1:CF:A2:F0:DE:CA:A4:4B:99:13:F3:EA:92:FC:76:9E:9F:EE:80:64
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314/4935dcca-fda3-3095-ae33-8359b2b1cc48.roa
Signing time: Tue 11 Feb 2025 02:00:39 +0000
ROA not before: Tue 11 Feb 2025 02:00:39 +0000
ROA not after: Mon 12 May 2025 01:00:39 +0000
asID: 7018
IP address blocks: 2620:7:2000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d7:a6:53:0d:c5:50:51:82:2c:35:d4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d826c88d-e62d-45fe-a08c-0b0a021a5314
Validity
Not Before: Feb 11 02:00:39 2025 GMT
Not After : May 12 01:00:39 2025 GMT
Subject: CN=b6be0a60-6d71-4427-a7e6-e375015e4b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:93:9b:df:9f:9a:e5:21:f1:41:5f:2d:c2:08:
9d:7c:84:3b:1f:11:6a:44:38:84:6a:96:15:40:d7:
50:65:a5:f8:0e:9e:a8:15:16:43:54:49:e6:2a:dd:
6d:82:ac:60:1e:41:b5:a1:e5:76:1f:f0:9d:a6:ec:
31:74:2d:64:3e:59:13:f5:4e:30:ae:d2:28:25:5c:
b8:fd:cc:ab:2e:a4:38:2d:2a:8e:79:62:ab:c4:81:
5d:7f:87:da:1b:c9:08:bd:a2:c7:2c:d0:81:27:f4:
ab:3c:2f:0a:18:af:f0:68:e6:a4:b3:ff:66:2e:00:
ab:a4:25:5d:ce:fa:fb:49:74:5b:00:5f:d2:5e:57:
aa:b3:3b:03:dc:d9:8c:d5:8d:37:37:db:74:8f:e6:
53:de:92:f0:98:7f:c7:fe:1f:f3:1b:95:97:0a:60:
f2:d3:d0:d2:1d:3b:52:20:16:f1:2f:85:c1:df:0e:
fd:a0:22:4e:ab:7d:a9:29:2d:cd:88:68:38:74:12:
c6:f9:4c:2a:35:60:b0:c1:31:e9:b4:41:96:8b:78:
02:89:2b:22:ac:60:a6:b5:ec:14:d7:5d:1f:bd:01:
cb:d9:2a:12:c5:67:27:f3:c8:c5:1b:d6:8b:c8:76:
0a:1a:55:e0:96:79:55:1b:04:c4:7c:65:70:5b:0f:
ee:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:27:11:28:06:8B:C8:16:17:0C:D0:F3:E2:F7:71:DB:1F:CB:B5:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314/4935dcca-fda3-3095-ae33-8359b2b1cc48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314/d826c88d-e62d-45fe-a08c-0b0a021a5314.crl
X509v3 Authority Key Identifier:
keyid:A1:CF:A2:F0:DE:CA:A4:4B:99:13:F3:EA:92:FC:76:9E:9F:EE:80:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:7:2000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:66:71:0f:22:a5:da:00:6e:fa:cd:2e:20:17:25:f5:34:86:
e1:fb:12:da:e4:77:19:08:53:ee:42:39:9c:7a:9b:28:61:4d:
a6:9b:a8:4f:8a:48:a8:1e:4a:20:35:2e:20:5a:7f:d9:59:7c:
09:22:5e:e7:4b:81:1a:fb:a1:cd:a2:36:81:9a:30:31:d9:90:
f3:91:cd:68:96:e1:38:8a:7d:83:ac:10:71:21:f1:a1:56:64:
93:a6:87:f3:eb:f7:f9:2a:a4:38:e2:b4:65:30:49:fd:4a:4b:
2b:a2:0e:64:7e:ba:9d:f4:7d:c4:a1:82:07:41:5f:49:00:59:
0f:93:9f:7d:31:52:b9:49:f7:f0:70:80:15:34:1e:1d:b9:39:
5c:13:a2:78:1d:82:fd:17:ce:37:47:fd:0e:c4:25:cb:c2:17:
20:4f:23:56:c1:ed:52:ca:55:41:b3:92:c6:48:b9:48:7a:dd:
fa:e6:c9:dd:e9:43:e7:ba:36:a8:bd:c7:17:10:f7:cb:31:53:
11:79:3a:62:f4:c4:e4:42:c9:f7:d6:4f:a4:cc:f8:bc:d8:5a:
e9:25:ca:e8:3c:11:4d:e0:1b:ef:fe:4b:30:3c:ef:3d:88:40:
00:98:b1:c4:5c:bf:e1:4f:33:2e:88:b4:d5:56:a3:e4:59:05:
28:b8:0b:41
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjXplMNxVBRgiw11MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDgyNmM4OGQtZTYyZC00NWZlLWEwOGMtMGIwYTAyMWE1
MzE0MB4XDTI1MDIxMTAyMDAzOVoXDTI1MDUxMjAxMDAzOVowLzEtMCsGA1UEAxMk
YjZiZTBhNjAtNmQ3MS00NDI3LWE3ZTYtZTM3NTAxNWU0YjRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJOb35+a5SHxQV8twgidfIQ7HxFqRDiEapYV
QNdQZaX4Dp6oFRZDVEnmKt1tgqxgHkG1oeV2H/CdpuwxdC1kPlkT9U4wrtIoJVy4
/cyrLqQ4LSqOeWKrxIFdf4faG8kIvaLHLNCBJ/SrPC8KGK/waOaks/9mLgCrpCVd
zvr7SXRbAF/SXleqszsD3NmM1Y03N9t0j+ZT3pLwmH/H/h/zG5WXCmDy09DSHTtS
IBbxL4XB3w79oCJOq32pKS3NiGg4dBLG+UwqNWCwwTHptEGWi3gCiSsirGCmtewU
110fvQHL2SoSxWcn88jFG9aLyHYKGlXglnlVGwTEfGVwWw/u0wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFAnESgGi8gWFwzQ8+L3cdsfy7VIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kODI2
Yzg4ZC1lNjJkLTQ1ZmUtYTA4Yy0wYjBhMDIxYTUzMTQvNDkzNWRjY2EtZmRhMy0z
MDk1LWFlMzMtODM1OWIyYjFjYzQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDgyNmM4OGQtZTYyZC00NWZlLWEw
OGMtMGIwYTAyMWE1MzE0L2Q4MjZjODhkLWU2MmQtNDVmZS1hMDhjLTBiMGEwMjFh
NTMxNC5jcmwwHwYDVR0jBBgwFoAUoc+i8N7KpEuZE/Pqkvx2np/ugGQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kODI2Yzg4ZC1lNjJkLTQ1ZmUtYTA4Yy0wYjBh
MDIxYTUzMTQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAByAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEpmcQ8ipdoAbvrNLiAXJfU0huH7EtrkdxkIU+5COZx6myhhTaab
qE+KSKgeSiA1LiBaf9lZfAkiXudLgRr7oc2iNoGaMDHZkPORzWiW4TiKfYOsEHEh
8aFWZJOmh/Pr9/kqpDjitGUwSf1KSyuiDmR+up30fcShggdBX0kAWQ+Tn30xUrlJ
9/BwgBU0Hh25OVwTongdgv0XzjdH/Q7EJcvCFyBPI1bB7VLKVUGzksZIuUh63frm
yd3pQ+e6Nqi9xxcQ98sxUxF5OmL0xORCyffWT6TM+LzYWuklyug8EU3gG+/+SzA8
7z2IQACYscRcv+FPMy6ItNVWo+RZBSi4C0E=
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:03:52 2025 by rpki-client