Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/69bed0c7-0596-3a07-b7b9-ce72b1a95cef.roa
File: 69bed0c7-0596-3a07-b7b9-ce72b1a95cef.roa (raw, json)
Hash identifier: foGscqQDLM81W9nTnwoWENZTz8AzA4lvYT/wZJs8wiw=
Subject key identifier: AA:A4:67:86:F4:90:EC:B2:87:4B:1F:55:D2:D5:3D:26:42:EB:46:D5
Certificate issuer: /CN=d12ff9c7-ced8-4cc2-b3d5-adf1859a808c
Certificate serial: 010D0C9F432858482D5A8BFD55EF66458513A2C0
Authority key identifier: 5A:CD:BF:B9:70:80:A4:AA:F3:8E:B8:58:29:11:41:07:9C:EE:FD:D7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/69bed0c7-0596-3a07-b7b9-ce72b1a95cef.roa
Signing time: Thu 12 Dec 2024 02:00:38 +0000
ROA not before: Thu 12 Dec 2024 02:00:38 +0000
ROA not after: Wed 12 Mar 2025 01:00:38 +0000
asID: 16509
IP address blocks: 2620:121:5070::/45 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2d:5a:8b:fd:55:ef:66:45:85:13:a2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ff9c7-ced8-4cc2-b3d5-adf1859a808c
Validity
Not Before: Dec 12 02:00:38 2024 GMT
Not After : Mar 12 01:00:38 2025 GMT
Subject: CN=311783c5-6555-424a-b3ce-36ddde300358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:30:aa:c6:12:ce:59:d6:87:d3:67:94:4f:16:
17:16:75:1c:ca:74:88:71:2c:e8:20:47:d4:ec:95:
0b:6f:35:a9:55:0e:5e:bc:35:51:e1:a0:7f:bc:39:
37:f2:56:e2:2c:12:60:38:a5:05:97:1a:6d:7e:cb:
ba:a8:63:08:9d:13:1e:39:a9:5c:53:3e:b8:0f:ab:
a0:34:a0:a3:83:10:9f:b3:0e:2d:b0:b4:98:ef:be:
22:a8:7d:2f:87:12:e3:7d:42:ab:b0:95:de:47:d2:
45:d6:86:48:30:d3:f5:12:61:26:16:79:ee:09:20:
0f:a6:7e:2e:eb:20:67:7a:b6:4e:ba:85:df:86:ba:
70:d7:10:43:d1:40:e8:40:cc:98:ee:9e:e3:6c:0e:
ee:87:15:a9:e6:58:5d:3c:31:d2:02:54:b2:99:d0:
31:31:19:99:3d:22:78:e4:e9:1a:09:4e:e4:c9:04:
42:19:ba:9b:68:11:02:8c:ea:40:c0:4f:10:d7:eb:
80:b6:c6:6b:87:52:de:cc:f5:34:ef:9a:42:4b:4a:
36:f6:15:ad:ee:0b:8f:58:b2:2e:a3:04:36:f5:83:
41:ef:9f:fb:db:d6:ca:42:cd:be:30:6c:60:04:04:
69:d1:78:0e:45:7b:fa:59:9d:42:dc:03:e1:e7:f6:
8c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A4:67:86:F4:90:EC:B2:87:4B:1F:55:D2:D5:3D:26:42:EB:46:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/69bed0c7-0596-3a07-b7b9-ce72b1a95cef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.crl
X509v3 Authority Key Identifier:
keyid:5A:CD:BF:B9:70:80:A4:AA:F3:8E:B8:58:29:11:41:07:9C:EE:FD:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:121:5070::/45
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:46:c8:a1:cf:be:5a:66:84:ca:b3:c6:31:3f:94:87:19:4f:
63:74:80:86:86:20:e7:a7:18:0e:a7:c6:26:e5:81:56:06:f2:
8c:30:9b:7e:54:fb:34:d3:db:01:23:48:82:9d:a9:aa:0f:b4:
4a:1a:67:c5:ac:db:ff:3b:74:97:bd:99:2f:9e:99:7f:26:fd:
bd:b4:c4:b6:e9:03:5b:df:eb:d1:8c:53:8d:76:e1:a6:55:62:
af:95:9e:fa:4c:a9:73:22:64:6b:7b:f6:2d:8f:4d:76:58:b3:
f9:c8:60:27:b5:6d:dc:35:aa:9f:9c:92:6e:20:ce:af:0f:10:
ab:12:e4:07:f5:fe:c9:a7:5f:ab:75:08:2b:73:51:59:94:3e:
7c:04:37:ce:d1:35:e3:cf:f7:2f:d3:21:f3:26:08:69:f9:de:
30:e5:a6:4d:fc:98:7b:d6:ff:f5:ea:1e:de:71:1d:0e:e4:6c:
22:bd:00:5d:bf:50:aa:98:3c:57:bb:ba:76:8a:aa:0b:c9:28:
d5:c1:e3:4f:22:5e:04:2b:b0:fd:0d:0b:2b:84:c8:d9:44:39:
fc:9a:09:60:76:97:fb:d3:ac:d4:70:8e:3f:76:4d:be:be:d7:
71:a2:3a:e0:fd:cd:3f:df:40:eb:91:1d:f5:ba:bc:82:e5:f2:
c1:6b:6e:2b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgtWov9Ve9mRYUTosAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDEyZmY5YzctY2VkOC00Y2MyLWIzZDUtYWRmMTg1OWE4
MDhjMB4XDTI0MTIxMjAyMDAzOFoXDTI1MDMxMjAxMDAzOFowLzEtMCsGA1UEAxMk
MzExNzgzYzUtNjU1NS00MjRhLWIzY2UtMzZkZGRlMzAwMzU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzCqxhLOWdaH02eUTxYXFnUcynSIcSzoIEfU
7JULbzWpVQ5evDVR4aB/vDk38lbiLBJgOKUFlxptfsu6qGMInRMeOalcUz64D6ug
NKCjgxCfsw4tsLSY774iqH0vhxLjfUKrsJXeR9JF1oZIMNP1EmEmFnnuCSAPpn4u
6yBnerZOuoXfhrpw1xBD0UDoQMyY7p7jbA7uhxWp5lhdPDHSAlSymdAxMRmZPSJ4
5OkaCU7kyQRCGbqbaBECjOpAwE8Q1+uAtsZrh1LezPU075pCS0o29hWt7guPWLIu
owQ29YNB75/729bKQs2+MGxgBARp0XgORXv6WZ1C3APh5/aMawIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKqkZ4b0kOyyh0sfVdLVPSZC60bVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kMTJm
ZjljNy1jZWQ4LTRjYzItYjNkNS1hZGYxODU5YTgwOGMvNjliZWQwYzctMDU5Ni0z
YTA3LWI3YjktY2U3MmIxYTk1Y2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDEyZmY5YzctY2VkOC00Y2MyLWIz
ZDUtYWRmMTg1OWE4MDhjL2QxMmZmOWM3LWNlZDgtNGNjMi1iM2Q1LWFkZjE4NTlh
ODA4Yy5jcmwwHwYDVR0jBBgwFoAUWs2/uXCApKrzjrhYKRFBB5zu/dcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kMTJmZjljNy1jZWQ4LTRjYzItYjNkNS1hZGYx
ODU5YTgwOGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJiABIVBw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABdGyKHPvlpmhMqzxjE/lIcZT2N0gIaGIOenGA6nxiblgVYG8oww
m35U+zTT2wEjSIKdqaoPtEoaZ8Ws2/87dJe9mS+emX8m/b20xLbpA1vf69GMU412
4aZVYq+VnvpMqXMiZGt79i2PTXZYs/nIYCe1bdw1qp+ckm4gzq8PEKsS5Af1/smn
X6t1CCtzUVmUPnwEN87RNePP9y/TIfMmCGn53jDlpk38mHvW//XqHt5xHQ7kbCK9
AF2/UKqYPFe7unaKqgvJKNXB408iXgQrsP0NCyuEyNlEOfyaCWB2l/vTrNRwjj92
Tb6+13GiOuD9zT/fQOuRHfW6vILl8sFrbis=
-----END CERTIFICATE-----
Generated at Sun May 4 15:04:47 2025 by rpki-client