Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/0cefe89b-d729-38a2-87b5-8530769b82bf.roa
File: 0cefe89b-d729-38a2-87b5-8530769b82bf.roa (raw, json)
Hash identifier: m5G/OICcqXHksoAt/LZISjYY7jSVgrBM7Uks8Og37KU=
Subject key identifier: 87:DC:5E:01:75:3D:DB:27:3A:D9:51:CE:F1:A2:86:C5:EE:C0:79:9F
Certificate issuer: /CN=d0fa8e3f-67e9-4e8f-9d18-6211dd613073
Certificate serial: 010D0C9F43285848BBBB80974141F4D1290050C0
Authority key identifier: 2B:B4:63:CE:67:00:19:DA:3A:DE:BC:3B:E5:62:36:DD:BB:4D:C2:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/0cefe89b-d729-38a2-87b5-8530769b82bf.roa
Signing time: Sat 01 Feb 2025 02:00:39 +0000
ROA not before: Sat 01 Feb 2025 02:00:39 +0000
ROA not after: Fri 02 May 2025 01:00:39 +0000
asID: 14618
IP address blocks: 2602:814:b00a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bb:bb:80:97:41:41:f4:d1:29:00:50:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0fa8e3f-67e9-4e8f-9d18-6211dd613073
Validity
Not Before: Feb 1 02:00:39 2025 GMT
Not After : May 2 01:00:39 2025 GMT
Subject: CN=a50bb51f-d90d-4577-8ae5-0409e37207ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4e:4e:b6:1e:f8:56:3f:8c:c4:c2:5e:11:a5:
81:f5:09:79:74:ae:4b:7b:09:f0:90:2e:9d:8f:5f:
57:c4:66:2d:3d:7e:31:d3:69:83:0f:bb:78:77:9e:
1c:8c:67:91:87:d0:51:93:ee:ac:42:21:98:a0:c3:
f3:31:b4:09:01:86:ad:3a:5f:27:20:c5:25:3f:2a:
e5:44:dd:cf:82:3a:aa:72:3f:60:0e:00:36:84:8f:
ff:20:f3:06:a0:82:0b:fe:dc:e7:3f:b0:83:69:99:
87:b6:a8:07:85:9e:b4:42:05:c5:b9:dc:fa:44:5d:
31:dc:ee:11:2e:43:7d:6f:43:ca:1e:55:89:0c:cf:
67:64:dd:e7:69:b6:b3:0f:2d:e3:e1:ef:fb:00:42:
88:be:36:05:fc:13:5e:63:5c:2f:2e:5f:9b:1d:50:
bb:93:46:96:29:88:40:4c:b8:55:5b:16:57:bb:3b:
a1:01:cc:f0:cb:6b:84:ae:21:d3:1b:c7:0d:54:67:
de:80:28:71:c9:39:5f:a9:6c:b5:a3:8e:6b:2b:6a:
02:fe:90:1a:57:71:a0:a7:ac:11:70:91:6d:55:ce:
fd:1a:ae:37:ce:ac:f8:61:2c:51:39:10:ad:57:95:
64:3a:84:2a:63:5c:0f:09:e5:89:67:0c:db:7f:b8:
45:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:DC:5E:01:75:3D:DB:27:3A:D9:51:CE:F1:A2:86:C5:EE:C0:79:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/0cefe89b-d729-38a2-87b5-8530769b82bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.crl
X509v3 Authority Key Identifier:
keyid:2B:B4:63:CE:67:00:19:DA:3A:DE:BC:3B:E5:62:36:DD:BB:4D:C2:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:814:b00a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:ce:04:5e:25:e4:c0:fb:55:c3:c0:91:40:69:5e:23:f0:dd:
03:de:1b:8a:64:36:75:f7:ea:c9:b2:27:a5:01:14:95:96:99:
05:d9:54:43:99:f6:e5:4f:aa:0c:c9:f0:bf:0b:af:68:eb:69:
b1:0b:9a:b9:3c:c4:02:91:a9:1b:4c:a0:30:63:b7:3f:14:d8:
2c:3a:da:05:50:7a:11:92:a9:a4:ba:44:8f:e0:92:fa:2f:da:
d8:5e:45:ec:3b:ca:a6:6a:a8:6a:c0:bc:b0:4d:12:66:8e:71:
ab:a7:d0:71:3a:6b:d9:6a:9b:2d:d5:89:f5:06:05:15:83:1b:
cf:a5:d1:5e:92:75:72:85:5a:10:80:31:4b:ca:28:cf:92:8d:
7a:97:cd:2f:56:7a:83:b5:80:81:34:a4:d1:35:a2:73:b8:26:
56:f1:90:e8:f8:a3:b8:8e:70:51:a2:fa:dc:f4:8e:7a:0a:db:
40:21:30:71:9f:22:cf:9c:63:24:48:ba:f7:36:ae:bd:20:03:
18:aa:c1:43:d7:49:99:15:cf:e2:8e:f3:17:40:4b:81:da:e6:
86:4a:e4:f4:a0:c3:83:00:a8:95:6c:72:a3:85:3e:3d:33:7a:
5a:4c:77:00:3e:7a:0d:52:62:a0:2c:81:d6:18:cd:61:49:1e:
0e:64:ac:e7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEi7u4CXQUH00SkAUMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDBmYThlM2YtNjdlOS00ZThmLTlkMTgtNjIxMWRkNjEz
MDczMB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk
YTUwYmI1MWYtZDkwZC00NTc3LThhZTUtMDQwOWUzNzIwN2JhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmE5Oth74Vj+MxMJeEaWB9Ql5dK5LewnwkC6d
j19XxGYtPX4x02mDD7t4d54cjGeRh9BRk+6sQiGYoMPzMbQJAYatOl8nIMUlPyrl
RN3Pgjqqcj9gDgA2hI//IPMGoIIL/tznP7CDaZmHtqgHhZ60QgXFudz6RF0x3O4R
LkN9b0PKHlWJDM9nZN3nabazDy3j4e/7AEKIvjYF/BNeY1wvLl+bHVC7k0aWKYhA
TLhVWxZXuzuhAczwy2uEriHTG8cNVGfegChxyTlfqWy1o45rK2oC/pAaV3Ggp6wR
cJFtVc79Gq43zqz4YSxRORCtV5VkOoQqY1wPCeWJZwzbf7hFpQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIfcXgF1PdsnOtlRzvGihsXuwHmfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGZh
OGUzZi02N2U5LTRlOGYtOWQxOC02MjExZGQ2MTMwNzMvMGNlZmU4OWItZDcyOS0z
OGEyLTg3YjUtODUzMDc2OWI4MmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBmYThlM2YtNjdlOS00ZThmLTlk
MTgtNjIxMWRkNjEzMDczL2QwZmE4ZTNmLTY3ZTktNGU4Zi05ZDE4LTYyMTFkZDYx
MzA3My5jcmwwHwYDVR0jBBgwFoAUK7RjzmcAGdo63rw75WI23btNwp4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGZhOGUzZi02N2U5LTRlOGYtOWQxOC02MjEx
ZGQ2MTMwNzMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIFLAK
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAA3OBF4l5MD7VcPAkUBpXiPw3QPeG4pkNnX36smyJ6UBFJWWmQXZ
VEOZ9uVPqgzJ8L8Lr2jrabELmrk8xAKRqRtMoDBjtz8U2Cw62gVQehGSqaS6RI/g
kvov2theRew7yqZqqGrAvLBNEmaOcaun0HE6a9lqmy3VifUGBRWDG8+l0V6SdXKF
WhCAMUvKKM+SjXqXzS9WeoO1gIE0pNE1onO4JlbxkOj4o7iOcFGi+tz0jnoK20Ah
MHGfIs+cYyRIuvc2rr0gAxiqwUPXSZkVz+KO8xdAS4Ha5oZK5PSgw4MAqJVscqOF
Pj0zelpMdwA+eg1SYqAsgdYYzWFJHg5krOc=
-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:58 2025 by rpki-client on console.sobornost.net