Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/de865b2a-8f4f-483a-937a-3947af6e6924/ad842b11-8a6a-3efa-aaee-b1cab0cacfc2.roa
File: ad842b11-8a6a-3efa-aaee-b1cab0cacfc2.roa (raw, json)
Hash identifier: vLuXbBXZFxpqb//Kh048AdzGYMjE5X4ERAnjJTvS87w=
Subject key identifier: 43:E2:A0:0C:C8:CD:AD:DB:36:FE:37:A8:1B:B8:D7:20:DF:CF:E6:DC
Certificate issuer: /CN=de865b2a-8f4f-483a-937a-3947af6e6924
Certificate serial: 010D0C9F432858446BD75AF2D7E2A2DE6CE139A0
Authority key identifier: D5:8A:FC:33:7A:DB:C0:F3:D6:54:00:8E:A1:6B:0A:08:D9:7D:D1:55
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/de865b2a-8f4f-483a-937a-3947af6e6924.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/de865b2a-8f4f-483a-937a-3947af6e6924/ad842b11-8a6a-3efa-aaee-b1cab0cacfc2.roa
Signing time: Tue 02 Jan 2024 16:04:33 +0000
ROA not before: Tue 02 Jan 2024 16:04:33 +0000
ROA not after: Mon 01 Apr 2024 15:04:33 +0000
asID: 399970
IP address blocks: 2602:fc3b::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:6b:d7:5a:f2:d7:e2:a2:de:6c:e1:39:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de865b2a-8f4f-483a-937a-3947af6e6924
Validity
Not Before: Jan 2 16:04:33 2024 GMT
Not After : Apr 1 15:04:33 2024 GMT
Subject: CN=a4c54154-7c88-4d66-8784-537e45acec75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:5d:b5:08:a0:ca:13:84:93:01:ae:c8:23:a9:
28:b8:6a:7c:3c:ca:a0:15:c1:a3:54:7a:37:65:5a:
12:34:66:0f:0d:ab:9f:bd:cb:9d:71:cd:09:ca:77:
30:32:14:fa:98:54:cc:70:18:5a:4c:6d:8d:b6:5d:
fa:da:8b:43:dc:32:21:91:83:61:d6:5a:f4:22:f0:
29:e4:d1:39:fa:cd:2c:56:2e:f3:4d:0f:6e:2e:b1:
b9:67:89:0a:a3:54:0b:a6:c6:68:14:25:af:ca:bd:
da:f0:79:d9:fd:97:d7:9e:24:02:cc:64:76:da:62:
8c:2c:2d:94:6e:99:54:ac:28:e8:ef:4c:8e:35:a7:
77:47:37:19:ba:3f:96:85:df:09:85:0b:8b:3f:1c:
a4:aa:f5:d3:8b:aa:2b:42:24:5a:a5:68:07:18:f2:
f1:32:bf:70:0a:f0:ef:42:e6:07:dd:e0:ca:86:fa:
40:21:9b:44:11:1f:58:6e:db:44:04:b7:63:51:27:
1e:25:9d:15:99:62:22:c3:d6:32:e7:ef:d5:a6:c0:
0a:12:e8:84:62:12:1c:30:1c:b4:0b:66:cb:07:fb:
59:63:33:d8:18:35:f2:28:bc:a2:49:1c:f8:ae:2f:
ac:4f:d8:2a:b6:fa:78:0d:46:d0:21:69:6a:2b:a3:
cb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E2:A0:0C:C8:CD:AD:DB:36:FE:37:A8:1B:B8:D7:20:DF:CF:E6:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/de865b2a-8f4f-483a-937a-3947af6e6924/ad842b11-8a6a-3efa-aaee-b1cab0cacfc2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/de865b2a-8f4f-483a-937a-3947af6e6924/de865b2a-8f4f-483a-937a-3947af6e6924.crl
X509v3 Authority Key Identifier:
keyid:D5:8A:FC:33:7A:DB:C0:F3:D6:54:00:8E:A1:6B:0A:08:D9:7D:D1:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/de865b2a-8f4f-483a-937a-3947af6e6924.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fc3b::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:55:64:10:df:7b:ed:6a:8e:1d:36:f2:dc:2d:37:bd:bf:a2:
62:c8:16:90:28:cf:f8:a7:de:7b:16:1f:5c:fc:5a:0d:3b:08:
4e:2c:12:f8:e4:bd:93:57:0f:8c:15:9c:6d:8c:30:8e:b0:31:
8e:3e:8d:7a:73:31:2a:70:e7:31:49:72:e2:99:37:56:67:29:
94:e0:12:1f:95:db:60:3d:39:6d:ea:e7:c7:58:c6:b6:51:99:
6b:52:09:f7:8c:88:36:56:b6:9d:cd:02:ea:75:74:cc:f5:fc:
4d:a0:0f:20:94:da:d2:de:c2:18:13:56:c8:ab:ee:82:b6:7d:
4f:d1:b1:9a:f4:f6:f3:a2:f5:ee:41:de:a0:15:28:2a:37:70:
1e:8c:ff:f9:32:c2:14:6a:3e:6f:3f:c1:4d:18:b7:dd:24:c1:
a0:55:54:f2:c0:c8:32:ca:8e:e1:f4:3d:a6:e1:cd:4b:96:35:
72:2e:c5:93:ec:c8:d6:3c:fe:cf:38:78:ea:f1:d6:e8:73:04:
d0:dc:5f:44:62:3b:0d:cb:6b:69:25:f0:43:e1:05:f8:a6:97:
50:17:8f:82:f4:a8:c3:5d:3a:e4:b6:b5:af:a0:ef:f8:91:04:
7f:4d:d8:17:97:0f:8b:6d:95:3f:59:4c:79:8d:e8:dc:18:82:
a5:c9:df:65
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWERr11ry1+Ki3mzhOaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGU4NjViMmEtOGY0Zi00ODNhLTkzN2EtMzk0N2FmNmU2
OTI0MB4XDTI0MDEwMjE2MDQzM1oXDTI0MDQwMTE1MDQzM1owLzEtMCsGA1UEAxMk
YTRjNTQxNTQtN2M4OC00ZDY2LTg3ODQtNTM3ZTQ1YWNlYzc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9l21CKDKE4STAa7II6kouGp8PMqgFcGjVHo3
ZVoSNGYPDaufvcudcc0JyncwMhT6mFTMcBhaTG2Ntl362otD3DIhkYNh1lr0IvAp
5NE5+s0sVi7zTQ9uLrG5Z4kKo1QLpsZoFCWvyr3a8HnZ/ZfXniQCzGR22mKMLC2U
bplUrCjo70yONad3RzcZuj+Whd8JhQuLPxykqvXTi6orQiRapWgHGPLxMr9wCvDv
QuYH3eDKhvpAIZtEER9YbttEBLdjUSceJZ0VmWIiw9Yy5+/VpsAKEuiEYhIcMBy0
C2bLB/tZYzPYGDXyKLyiSRz4ri+sT9gqtvp4DUbQIWlqK6PLDwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFEPioAzIza3bNv43qBu41yDfz+bcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kZTg2
NWIyYS04ZjRmLTQ4M2EtOTM3YS0zOTQ3YWY2ZTY5MjQvYWQ4NDJiMTEtOGE2YS0z
ZWZhLWFhZWUtYjFjYWIwY2FjZmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZGU4NjViMmEtOGY0Zi00ODNhLTkz
N2EtMzk0N2FmNmU2OTI0L2RlODY1YjJhLThmNGYtNDgzYS05MzdhLTM5NDdhZjZl
NjkyNC5jcmwwHwYDVR0jBBgwFoAU1Yr8M3rbwPPWVACOoWsKCNl90VUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9kZTg2NWIyYS04ZjRmLTQ4M2EtOTM3YS0zOTQ3
YWY2ZTY5MjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL8OwAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEANlVkEN977WqOHTby3C03vb+iYsgWkCjP+KfeexYfXPxaDTsITiwS
+OS9k1cPjBWcbYwwjrAxjj6NenMxKnDnMUly4pk3VmcplOASH5XbYD05bernx1jG
tlGZa1IJ94yINla2nc0C6nV0zPX8TaAPIJTa0t7CGBNWyKvugrZ9T9GxmvT286L1
7kHeoBUoKjdwHoz/+TLCFGo+bz/BTRi33STBoFVU8sDIMsqO4fQ9puHNS5Y1ci7F
k+zI1jz+zzh46vHW6HME0NxfRGI7DctraSXwQ+EF+KaXUBePgvSow1065La1r6Dv
+JEEf03YF5cPi22VP1lMeY3o3BiCpcnfZQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:13 2024 by rpki-client on console-fra.rpki-client.org