Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314/5b7271bb-0e9b-3d8d-a2b3-4176fb557047.roa
File: 5b7271bb-0e9b-3d8d-a2b3-4176fb557047.roa (raw, json)
Hash identifier: VqfUko4Q48GbT9GUnUhXilrAxm2w0Y2CjzZeR9H3vSQ=
Subject key identifier: 7F:87:8B:FB:7E:1F:DB:07:AB:2E:3B:BA:54:F0:A0:1A:43:79:00:70
Certificate issuer: /CN=d826c88d-e62d-45fe-a08c-0b0a021a5314
Certificate serial: 010D0C9F43285848D7A652F334347951C166AAC0
Authority key identifier: A1:CF:A2:F0:DE:CA:A4:4B:99:13:F3:EA:92:FC:76:9E:9F:EE:80:64
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314/5b7271bb-0e9b-3d8d-a2b3-4176fb557047.roa
Signing time: Tue 11 Feb 2025 02:00:39 +0000
ROA not before: Tue 11 Feb 2025 02:00:39 +0000
ROA not after: Mon 12 May 2025 01:00:39 +0000
asID: 393875
IP address blocks: 2620:7:2000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d7:a6:52:f3:34:34:79:51:c1:66:aa:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d826c88d-e62d-45fe-a08c-0b0a021a5314
Validity
Not Before: Feb 11 02:00:39 2025 GMT
Not After : May 12 01:00:39 2025 GMT
Subject: CN=03b0b0f3-7bf0-4691-86a9-4c79da09e2f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6f:10:73:82:2f:ad:fc:96:2e:88:e9:df:dd:
26:31:09:27:46:67:a6:f8:53:05:2c:4d:70:01:16:
73:44:a2:08:0c:92:5a:b4:72:64:98:91:de:96:fe:
cb:93:00:0d:2c:d5:fb:df:99:68:bc:2c:82:60:63:
75:b0:7b:15:62:f6:15:9f:f3:ca:ce:b2:8d:19:eb:
16:3a:d0:56:91:c5:49:16:bd:33:3e:9e:0e:46:bb:
64:ae:7e:94:50:50:e1:af:63:1c:2d:4a:1f:28:31:
23:13:ae:5e:e3:23:88:4b:07:69:cf:ea:15:e2:fd:
9d:0e:49:2a:4e:f3:59:f5:d5:ab:e4:c1:00:ec:e6:
c3:99:c3:96:a8:bc:86:ff:c4:72:ad:d8:75:b4:b8:
e6:0e:1d:47:45:f7:21:a7:bc:97:aa:92:c8:4e:c4:
81:9a:fa:c9:f1:6b:3a:3b:11:bb:f7:a1:e1:1c:e3:
83:ff:32:c6:e8:36:8b:96:83:96:40:8b:72:ba:91:
04:b1:50:58:5a:1c:96:63:c6:24:7d:30:32:48:e2:
81:91:fb:bb:ed:64:9e:4f:ed:5c:4e:8d:20:b9:76:
d1:76:0a:78:2e:c8:7c:82:dc:51:cf:11:16:3e:a3:
8d:15:72:b3:5c:55:72:1c:de:ef:e8:ab:54:36:96:
c9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:87:8B:FB:7E:1F:DB:07:AB:2E:3B:BA:54:F0:A0:1A:43:79:00:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314/5b7271bb-0e9b-3d8d-a2b3-4176fb557047.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314/d826c88d-e62d-45fe-a08c-0b0a021a5314.crl
X509v3 Authority Key Identifier:
keyid:A1:CF:A2:F0:DE:CA:A4:4B:99:13:F3:EA:92:FC:76:9E:9F:EE:80:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:7:2000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:6a:59:c8:e2:d5:06:1d:e6:cb:06:61:c4:33:10:99:aa:3d:
66:15:50:c3:39:3f:f2:53:5d:96:ff:b6:79:58:19:c1:8f:07:
be:da:41:89:a1:a1:82:e5:0b:25:95:55:44:21:43:8b:71:51:
70:05:62:3f:1c:bf:ec:ab:79:bb:be:93:29:da:1d:45:55:88:
0c:2a:77:1f:1c:8a:21:be:e4:30:90:b0:a4:ae:82:dd:6b:c3:
36:9b:fc:b2:ea:5f:01:70:ff:f9:af:58:79:d9:e3:3c:c5:fe:
88:3f:84:cc:ee:28:ae:73:63:e2:a3:5d:38:a3:1a:39:59:88:
a0:75:d8:85:de:ad:69:11:91:7d:8a:21:e5:37:37:a7:12:56:
c9:dd:21:89:8f:44:ab:cc:f0:d6:3e:87:df:31:85:e6:d8:67:
b9:a5:af:47:3c:a3:1b:bf:ed:bc:fa:f4:1c:2b:64:03:79:e6:
d6:09:6e:74:8c:6c:a0:4a:b6:25:75:47:f5:fb:30:2b:ef:aa:
77:58:1e:87:63:12:a1:76:04:b9:e6:33:64:61:7a:e1:09:9b:
ee:42:2f:0c:ec:52:30:aa:41:76:8e:e3:a0:91:0e:98:37:dd:
59:2d:92:06:80:f3:3e:c6:7a:0b:ee:93:ee:63:c1:7d:4e:8f:
c8:38:5f:12
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjXplLzNDR5UcFmqsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDgyNmM4OGQtZTYyZC00NWZlLWEwOGMtMGIwYTAyMWE1
MzE0MB4XDTI1MDIxMTAyMDAzOVoXDTI1MDUxMjAxMDAzOVowLzEtMCsGA1UEAxMk
MDNiMGIwZjMtN2JmMC00NjkxLTg2YTktNGM3OWRhMDllMmY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApW8Qc4IvrfyWLojp390mMQknRmem+FMFLE1w
ARZzRKIIDJJatHJkmJHelv7LkwANLNX735lovCyCYGN1sHsVYvYVn/PKzrKNGesW
OtBWkcVJFr0zPp4ORrtkrn6UUFDhr2McLUofKDEjE65e4yOISwdpz+oV4v2dDkkq
TvNZ9dWr5MEA7ObDmcOWqLyG/8Ryrdh1tLjmDh1HRfchp7yXqpLITsSBmvrJ8Ws6
OxG796HhHOOD/zLG6DaLloOWQItyupEEsVBYWhyWY8YkfTAySOKBkfu77WSeT+1c
To0guXbRdgp4Lsh8gtxRzxEWPqONFXKzXFVyHN7v6KtUNpbJWQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFH+Hi/t+H9sHqy47ulTwoBpDeQBwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kODI2
Yzg4ZC1lNjJkLTQ1ZmUtYTA4Yy0wYjBhMDIxYTUzMTQvNWI3MjcxYmItMGU5Yi0z
ZDhkLWEyYjMtNDE3NmZiNTU3MDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDgyNmM4OGQtZTYyZC00NWZlLWEw
OGMtMGIwYTAyMWE1MzE0L2Q4MjZjODhkLWU2MmQtNDVmZS1hMDhjLTBiMGEwMjFh
NTMxNC5jcmwwHwYDVR0jBBgwFoAUoc+i8N7KpEuZE/Pqkvx2np/ugGQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kODI2Yzg4ZC1lNjJkLTQ1ZmUtYTA4Yy0wYjBh
MDIxYTUzMTQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAByAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFpqWcji1QYd5ssGYcQzEJmqPWYVUMM5P/JTXZb/tnlYGcGPB77a
QYmhoYLlCyWVVUQhQ4txUXAFYj8cv+yrebu+kynaHUVViAwqdx8ciiG+5DCQsKSu
gt1rwzab/LLqXwFw//mvWHnZ4zzF/og/hMzuKK5zY+KjXTijGjlZiKB12IXerWkR
kX2KIeU3N6cSVsndIYmPRKvM8NY+h98xhebYZ7mlr0c8oxu/7bz69BwrZAN55tYJ
bnSMbKBKtiV1R/X7MCvvqndYHodjEqF2BLnmM2RheuEJm+5CLwzsUjCqQXaO46CR
Dpg33VktkgaA8z7Gegvuk+5jwX1Oj8g4XxI=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:36:46 2025 by rpki-client