Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e/d3a7aea3-ba5f-33a7-b00a-306269cc714b.roa
File: d3a7aea3-ba5f-33a7-b00a-306269cc714b.roa (raw, json)
Hash identifier: Ym0GFZQgCjXSg0SmOvrR/PKJN6gzHtB1DxQazCgMgSg=
Subject key identifier: E8:9F:4A:02:F0:DB:D2:E7:77:1C:94:C5:32:20:07:19:A7:DF:03:D0
Certificate issuer: /CN=590ea78c-91e2-45e2-b596-eeeedd529e3e
Certificate serial: 010D0C9F432858489A3B45B35B310B28FA647F80
Authority key identifier: 73:2F:57:E7:CB:97:A7:EA:DB:36:22:D0:66:0D:3B:E9:8B:82:6E:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e/d3a7aea3-ba5f-33a7-b00a-306269cc714b.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 11399
IP address blocks: 2602:811:3000::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:45:b3:5b:31:0b:28:fa:64:7f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590ea78c-91e2-45e2-b596-eeeedd529e3e
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=1be1376c-2aaa-4dc6-9efd-71e44d7887a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:90:aa:7c:e3:a8:b0:0f:c8:72:20:9b:c7:84:
26:84:25:6e:00:48:e3:ae:fe:f4:db:6f:0e:b3:8d:
bb:bc:68:66:fd:d9:42:e3:e0:1e:16:28:53:a2:5c:
fb:54:ba:3a:c2:22:a7:9f:b8:fd:5e:b9:99:ea:06:
f8:70:d1:d6:31:42:c1:22:85:2d:00:07:11:31:5c:
e3:22:ba:16:4f:83:aa:87:31:a7:f4:36:55:61:ec:
35:9f:87:9f:06:8f:13:5b:d5:4c:17:3c:fa:8e:a6:
fe:c1:d2:50:dc:54:52:31:6d:e7:e3:99:68:e5:1b:
38:dc:89:bb:0e:70:aa:72:a9:f2:78:c7:d3:c3:e8:
52:7e:c0:2c:5a:85:ff:9b:6a:e6:d2:e8:7f:4e:0d:
9f:7c:b9:a6:3d:20:d7:76:eb:2b:4c:04:af:fd:a9:
19:22:e6:12:1c:1c:f6:7d:8c:35:3c:60:0e:74:fc:
ea:ed:9a:6c:19:62:0c:e0:1b:1b:bd:12:5e:fb:b5:
d0:39:99:9a:39:e3:3e:87:dc:04:0c:52:34:9f:50:
17:41:e3:8e:81:ed:6d:95:1a:24:ce:de:a1:e3:60:
74:84:12:9f:b1:51:04:12:02:35:04:ae:17:53:fe:
1d:7d:26:b5:9e:b2:68:1c:9b:39:3c:d1:6c:8b:c8:
60:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9F:4A:02:F0:DB:D2:E7:77:1C:94:C5:32:20:07:19:A7:DF:03:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e/d3a7aea3-ba5f-33a7-b00a-306269cc714b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e/590ea78c-91e2-45e2-b596-eeeedd529e3e.crl
X509v3 Authority Key Identifier:
keyid:73:2F:57:E7:CB:97:A7:EA:DB:36:22:D0:66:0D:3B:E9:8B:82:6E:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:811:3000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:0f:45:d4:42:9b:f2:92:13:d5:80:28:00:e8:52:07:e1:f3:
42:fb:3b:26:20:41:b6:1a:f7:5e:0c:40:ab:17:0b:6a:1f:60:
e8:bf:98:20:93:56:bd:cb:e2:ec:87:94:bc:ff:3d:50:e1:79:
77:c7:df:cd:a0:65:c0:63:d3:1a:24:8f:fb:7f:61:8e:5a:c8:
98:0a:f4:ea:7f:ad:06:d7:f0:d7:67:52:49:8c:3d:9c:de:4b:
0c:51:24:77:a7:69:00:6a:ec:80:f3:8d:d3:5e:38:b8:0f:73:
42:fe:4b:28:35:02:06:de:68:5b:89:b9:9b:d6:18:70:49:92:
31:12:3a:55:2c:34:7d:2d:67:e9:41:ab:bd:6f:52:b2:c2:8e:
01:56:48:d2:67:cb:77:68:d5:0a:34:77:af:da:fb:0b:94:29:
64:dd:9d:18:23:4e:bf:c2:6d:c1:47:67:42:4e:44:a3:b9:7c:
a2:b4:07:9a:e3:d2:f0:ac:71:50:bd:6c:2e:15:08:79:1b:21:
34:68:96:9b:f7:dd:2a:fd:d4:c0:33:98:dc:75:af:f8:ff:4f:
58:3d:b8:bd:d4:59:07:f9:57:fb:a9:e2:be:39:a5:ca:8a:af:
be:25:f5:c9:6c:e5:a7:73:f9:82:ba:e8:9b:8a:45:b6:1f:8e:
e3:11:c7:28
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiaO0WzWzELKPpkf4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTkwZWE3OGMtOTFlMi00NWUyLWI1OTYtZWVlZWRkNTI5
ZTNlMB4XDTI1MDEyMDAyMDA0MFoXDTI1MDQyMDAxMDA0MFowLzEtMCsGA1UEAxMk
MWJlMTM3NmMtMmFhYS00ZGM2LTllZmQtNzFlNDRkNzg4N2E4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ZCqfOOosA/IciCbx4QmhCVuAEjjrv70228O
s427vGhm/dlC4+AeFihTolz7VLo6wiKnn7j9XrmZ6gb4cNHWMULBIoUtAAcRMVzj
IroWT4OqhzGn9DZVYew1n4efBo8TW9VMFzz6jqb+wdJQ3FRSMW3n45lo5Rs43Im7
DnCqcqnyeMfTw+hSfsAsWoX/m2rm0uh/Tg2ffLmmPSDXdusrTASv/akZIuYSHBz2
fYw1PGAOdPzq7ZpsGWIM4BsbvRJe+7XQOZmaOeM+h9wEDFI0n1AXQeOOge1tlRok
zt6h42B0hBKfsVEEEgI1BK4XU/4dfSa1nrJoHJs5PNFsi8hgvwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOifSgLw29LndxyUxTIgBxmn3wPQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81OTBl
YTc4Yy05MWUyLTQ1ZTItYjU5Ni1lZWVlZGQ1MjllM2UvZDNhN2FlYTMtYmE1Zi0z
M2E3LWIwMGEtMzA2MjY5Y2M3MTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTkwZWE3OGMtOTFlMi00NWUyLWI1
OTYtZWVlZWRkNTI5ZTNlLzU5MGVhNzhjLTkxZTItNDVlMi1iNTk2LWVlZWVkZDUy
OWUzZS5jcmwwHwYDVR0jBBgwFoAUcy9X58uXp+rbNiLQZg076YuCboUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS81OTBlYTc4Yy05MWUyLTQ1ZTItYjU5Ni1lZWVl
ZGQ1MjllM2UuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIIETAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFEPRdRCm/KSE9WAKADoUgfh80L7OyYgQbYa914MQKsXC2ofYOi/
mCCTVr3L4uyHlLz/PVDheXfH382gZcBj0xokj/t/YY5ayJgK9Op/rQbX8NdnUkmM
PZzeSwxRJHenaQBq7IDzjdNeOLgPc0L+Syg1AgbeaFuJuZvWGHBJkjESOlUsNH0t
Z+lBq71vUrLCjgFWSNJny3do1Qo0d6/a+wuUKWTdnRgjTr/CbcFHZ0JORKO5fKK0
B5rj0vCscVC9bC4VCHkbITRolpv33Sr91MAzmNx1r/j/T1g9uL3UWQf5V/up4r45
pcqKr74l9cls5adz+YK66JuKRbYfjuMRxyg=
-----END CERTIFICATE-----
Generated at Sun Apr 6 20:39:12 2025 by rpki-client