Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/28523adb-bf3f-3b48-b0f4-cc9433a85b13.roa
File: 28523adb-bf3f-3b48-b0f4-cc9433a85b13.roa (raw, json)
Hash identifier: Hi7wcggnHqJcu5u+d4jKxAizMYehVh8BxiUuXEsk6gc=
Subject key identifier: 42:AA:A3:13:26:ED:1A:01:1F:EF:6F:43:9E:FB:16:A5:C3:48:3B:0A
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285847E62B6ECBF91FCB774164EF00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/28523adb-bf3f-3b48-b0f4-cc9433a85b13.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 45566
IP address blocks: 2620:15c::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:6e:cb:f9:1f:cb:77:41:64:ef:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=430e9efe-1343-4225-ae83-eaceffa62ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:70:90:dd:f2:0c:90:9f:08:8c:19:8e:d1:95:
42:36:20:06:04:1f:8f:a7:54:90:dd:3e:e1:30:6e:
05:ea:61:9b:27:7f:fc:29:9d:7a:6b:a3:37:9c:29:
8c:c8:59:67:e3:37:87:18:4e:fa:4f:34:ae:d6:df:
31:48:49:52:0d:2c:3b:b1:bf:37:56:53:43:f5:ea:
df:99:5b:e6:49:56:c4:06:a1:33:a2:0f:74:38:ee:
63:49:da:a1:68:4e:ca:9f:8e:d2:a6:e8:ae:3e:9e:
42:41:47:85:ef:15:37:ce:1f:c1:ac:e8:4b:61:24:
2f:a5:b8:8e:fd:21:e8:b5:57:a8:b6:45:6a:e2:aa:
c7:31:c9:7d:71:19:69:c1:c8:22:8d:0e:01:81:9f:
14:06:dd:95:49:98:27:4b:c0:93:90:2c:50:14:28:
b0:eb:ad:1e:a2:3f:1e:47:81:e1:1b:58:0f:22:67:
56:dd:f2:d0:f6:38:88:86:f8:56:ab:c9:06:fe:ab:
31:15:91:30:89:4f:53:2c:cc:9c:09:f7:62:29:5f:
70:60:77:67:d6:63:31:a0:96:cd:79:a8:56:e8:21:
61:47:dd:8b:44:df:4e:da:63:3d:de:a9:4c:29:a6:
63:97:92:e5:dd:d7:24:f9:a1:6b:e9:c7:b6:cb:2f:
1c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:AA:A3:13:26:ED:1A:01:1F:EF:6F:43:9E:FB:16:A5:C3:48:3B:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/28523adb-bf3f-3b48-b0f4-cc9433a85b13.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:15c::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:e0:e0:b9:2d:22:5a:e7:61:be:b8:07:c5:c1:81:4d:f8:0d:
d8:13:ea:95:0f:d0:36:df:d6:40:56:7b:93:a3:20:25:a2:b8:
bc:3f:f5:e0:1c:f4:33:3e:d2:4d:17:b6:15:50:c7:75:ef:30:
31:c3:59:23:0e:f0:e9:bf:c2:e0:5b:be:5b:91:af:3d:0e:a7:
90:31:9c:c8:70:86:31:14:48:42:13:c3:a1:81:42:4a:eb:95:
79:30:5e:01:1e:8f:4a:1c:db:1b:7c:62:ad:4d:a1:2d:dc:79:
b0:38:b8:f0:11:f7:21:99:72:d6:2b:3f:40:de:35:b7:81:91:
39:a5:8a:ef:6f:c8:ed:77:9a:21:07:d8:c4:b5:29:2f:3e:c7:
c5:4d:b8:44:c9:41:4a:66:d4:86:db:ae:0d:18:a5:8c:91:30:
b1:5a:91:cd:39:d2:e1:e1:de:52:4c:b1:b0:16:91:3f:be:fa:
88:17:d4:15:37:de:f6:2c:a0:37:67:59:bf:6f:4d:66:13:6d:
01:a0:f6:75:e3:e6:56:9f:bc:65:aa:31:39:ab:86:5a:c5:41:
09:9a:cb:67:08:77:6c:f9:45:2b:f3:ee:6d:4a:05:a7:94:44:
e4:a2:1e:42:d5:99:2a:48:73:c9:cb:c2:40:49:4c:10:6a:7b:
33:7e:b0:f9
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEfmK27L+R/Ld0Fk7wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
NDMwZTllZmUtMTM0My00MjI1LWFlODMtZWFjZWZmYTYyYWMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXCQ3fIMkJ8IjBmO0ZVCNiAGBB+Pp1SQ3T7h
MG4F6mGbJ3/8KZ16a6M3nCmMyFln4zeHGE76TzSu1t8xSElSDSw7sb83VlND9erf
mVvmSVbEBqEzog90OO5jSdqhaE7Kn47SpuiuPp5CQUeF7xU3zh/BrOhLYSQvpbiO
/SHotVeotkVq4qrHMcl9cRlpwcgijQ4BgZ8UBt2VSZgnS8CTkCxQFCiw660eoj8e
R4HhG1gPImdW3fLQ9jiIhvhWq8kG/qsxFZEwiU9TLMycCfdiKV9wYHdn1mMxoJbN
eahW6CFhR92LRN9O2mM93qlMKaZjl5Ll3dck+aFr6ce2yy8ckQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFEKqoxMm7RoBH+9vQ577FqXDSDsKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMjg1MjNhZGItYmYzZi0z
YjQ4LWIwZjQtY2M5NDMzYTg1YjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJiABXAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAg+DguS0iWudhvrgHxcGBTfgN2BPqlQ/QNt/WQFZ7k6MgJaK4vD/1
4Bz0Mz7STRe2FVDHde8wMcNZIw7w6b/C4Fu+W5GvPQ6nkDGcyHCGMRRIQhPDoYFC
SuuVeTBeAR6PShzbG3xirU2hLdx5sDi48BH3IZly1is/QN41t4GROaWK72/I7Xea
IQfYxLUpLz7HxU24RMlBSmbUhtuuDRiljJEwsVqRzTnS4eHeUkyxsBaRP776iBfU
FTfe9iygN2dZv29NZhNtAaD2dePmVp+8ZaoxOauGWsVBCZrLZwh3bPlFK/PubUoF
p5RE5KIeQtWZKkhzycvCQElMEGp7M36w+Q==
-----END CERTIFICATE-----
Generated at Sun Apr 27 23:47:52 2025 by rpki-client