Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/1e357736-1222-3f0c-927f-69cc0124766b.roa
File: 1e357736-1222-3f0c-927f-69cc0124766b.roa (raw, json)
Hash identifier: aMcreAkbFgBMCosMP409CKnAXUX0turmukWmOCP4AJw=
Subject key identifier: 86:DF:2D:A3:90:C5:4B:0F:5E:28:A6:82:1F:B1:04:26:36:D0:30:27
Certificate issuer: /CN=1d8c9167-e816-4834-8fcc-f8b0f93fe6a0
Certificate serial: 010D0C9F43285848817C64F4A0F1A40DF20B90E0
Authority key identifier: 8A:66:59:66:BE:40:91:02:45:F8:94:B2:C8:4B:D3:E1:91:C7:0C:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/1e357736-1222-3f0c-927f-69cc0124766b.roa
Signing time: Sat 11 Jan 2025 05:16:48 +0000
ROA not before: Sat 11 Jan 2025 05:16:48 +0000
ROA not after: Fri 11 Apr 2025 04:16:48 +0000
asID: 19148
IP address blocks: 2602:299::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:81:7c:64:f4:a0:f1:a4:0d:f2:0b:90:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d8c9167-e816-4834-8fcc-f8b0f93fe6a0
Validity
Not Before: Jan 11 05:16:48 2025 GMT
Not After : Apr 11 04:16:48 2025 GMT
Subject: CN=65df59c6-1d87-4284-b0c2-06433bf6780c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1e:e2:94:d6:2a:a2:ac:73:1e:8c:40:46:c0:
bf:5e:12:9a:57:7f:8c:b8:e5:f2:a2:57:a5:a5:21:
79:83:a2:93:e6:50:c3:db:29:a5:4b:c6:d2:d5:d0:
65:eb:d7:0f:b2:cb:9c:fd:68:6a:40:0e:8c:e6:2f:
76:05:36:87:da:e1:07:7a:ad:8a:b0:dd:1d:0f:c7:
d9:ad:5e:db:a6:b3:c0:99:bd:9b:13:fe:98:df:28:
6c:ea:e4:1b:02:99:2a:02:04:00:f6:59:b2:d5:86:
5f:1c:92:c3:93:44:f7:2d:fb:ca:af:fd:f2:73:62:
fe:85:62:42:5c:13:8d:ab:99:e1:5f:84:49:9b:a0:
fa:a1:d7:60:1d:5c:98:a2:b9:99:14:76:0a:9a:f0:
15:0b:c3:c8:fc:89:18:ce:9a:4f:90:b2:e0:92:16:
72:8f:1b:98:c9:92:3c:c7:3b:d7:e0:a4:49:4a:05:
89:cd:da:7d:5e:c0:91:9a:9b:12:97:40:49:30:a5:
c9:0f:1c:85:4a:24:09:19:7b:14:82:5c:59:17:2c:
1c:dc:0f:29:62:0a:b9:23:78:0d:69:b5:c0:f3:fa:
5c:34:1f:c3:67:d7:17:75:fe:9a:9d:2e:d5:91:23:
d2:b2:48:23:38:ed:ca:4b:c8:31:e4:23:14:d4:a0:
fa:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:DF:2D:A3:90:C5:4B:0F:5E:28:A6:82:1F:B1:04:26:36:D0:30:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/1e357736-1222-3f0c-927f-69cc0124766b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.crl
X509v3 Authority Key Identifier:
keyid:8A:66:59:66:BE:40:91:02:45:F8:94:B2:C8:4B:D3:E1:91:C7:0C:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:299::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:65:f0:26:99:3d:d2:f2:87:2d:f4:01:da:2f:af:5f:e2:c7:
64:c6:5f:3d:d7:71:1f:03:2b:ee:50:8f:40:1e:bf:95:e6:72:
98:78:6b:9e:c1:2f:e6:14:90:3e:d3:23:e9:02:68:73:96:c6:
f6:6f:61:a4:e3:ef:fe:b3:68:34:f1:bb:8c:5e:9f:a1:1e:c1:
7d:46:b4:d8:77:35:ca:80:65:be:79:2c:a1:6c:0f:23:c1:01:
1c:f5:d1:33:7f:2f:2d:fc:35:79:be:62:2f:62:23:9a:66:01:
d8:fe:bd:68:35:6f:0a:3b:c6:ae:1a:40:8a:3a:4e:1e:35:2b:
28:b5:cf:d6:74:5a:62:72:c8:cf:82:ab:c5:c3:12:72:d3:cc:
20:7f:c8:0b:dd:25:4e:bd:c3:af:1c:b0:64:26:04:31:60:20:
ce:f2:1c:bd:83:35:46:00:b3:c1:95:63:25:21:c6:8b:ca:28:
c2:89:eb:3a:3a:85:5b:68:03:b1:26:28:9e:82:02:e7:ea:e2:
c6:3f:a5:1a:6a:9c:18:6c:5a:30:97:4e:92:8b:27:f0:49:b9:
4c:e8:1a:da:b3:3e:4c:1e:cf:f8:ea:e6:74:c1:08:38:b0:ab:
fb:e7:8a:41:83:7e:4e:70:d8:48:82:98:e4:b2:f3:97:c8:8d:
5e:5d:c7:62
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiBfGT0oPGkDfILkOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWQ4YzkxNjctZTgxNi00ODM0LThmY2MtZjhiMGY5M2Zl
NmEwMB4XDTI1MDExMTA1MTY0OFoXDTI1MDQxMTA0MTY0OFowLzEtMCsGA1UEAxMk
NjVkZjU5YzYtMWQ4Ny00Mjg0LWIwYzItMDY0MzNiZjY3ODBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3h7ilNYqoqxzHoxARsC/XhKaV3+MuOXyolel
pSF5g6KT5lDD2ymlS8bS1dBl69cPssuc/WhqQA6M5i92BTaH2uEHeq2KsN0dD8fZ
rV7bprPAmb2bE/6Y3yhs6uQbApkqAgQA9lmy1YZfHJLDk0T3LfvKr/3yc2L+hWJC
XBONq5nhX4RJm6D6oddgHVyYormZFHYKmvAVC8PI/IkYzppPkLLgkhZyjxuYyZI8
xzvX4KRJSgWJzdp9XsCRmpsSl0BJMKXJDxyFSiQJGXsUglxZFywc3A8pYgq5I3gN
abXA8/pcNB/DZ9cXdf6anS7VkSPSskgjOO3KS8gx5CMU1KD6VQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIbfLaOQxUsPXiimgh+xBCY20DAnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xZDhj
OTE2Ny1lODE2LTQ4MzQtOGZjYy1mOGIwZjkzZmU2YTAvMWUzNTc3MzYtMTIyMi0z
ZjBjLTkyN2YtNjljYzAxMjQ3NjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWQ4YzkxNjctZTgxNi00ODM0LThm
Y2MtZjhiMGY5M2ZlNmEwLzFkOGM5MTY3LWU4MTYtNDgzNC04ZmNjLWY4YjBmOTNm
ZTZhMC5jcmwwHwYDVR0jBBgwFoAUimZZZr5AkQJF+JSyyEvT4ZHHDMAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8xZDhjOTE2Ny1lODE2LTQ4MzQtOGZjYy1mOGIw
ZjkzZmU2YTAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgICmQAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABZl8CaZPdLyhy30Adovr1/ix2TGXz3XcR8DK+5Qj0Aev5Xmcph4
a57BL+YUkD7TI+kCaHOWxvZvYaTj7/6zaDTxu4xen6EewX1GtNh3NcqAZb55LKFs
DyPBARz10TN/Ly38NXm+Yi9iI5pmAdj+vWg1bwo7xq4aQIo6Th41Kyi1z9Z0WmJy
yM+Cq8XDEnLTzCB/yAvdJU69w68csGQmBDFgIM7yHL2DNUYAs8GVYyUhxovKKMKJ
6zo6hVtoA7EmKJ6CAufq4sY/pRpqnBhsWjCXTpKLJ/BJuUzoGtqzPkwez/jq5nTB
CDiwq/vnikGDfk5w2EiCmOSy85fIjV5dx2I=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:20 2025 by rpki-client