Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4f1b7198-ed1b-346f-8e4b-00dea457cdac.roa
File: 4f1b7198-ed1b-346f-8e4b-00dea457cdac.roa (raw, json)
Hash identifier: Cx+roPd/3PcrPhNsIM6C+fN3pkEbhvGQP28v/Sdnec0=
Subject key identifier: C6:81:32:AD:2C:28:D8:EB:DC:42:AD:9D:05:E5:1B:60:65:63:6E:97
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F432858485F9B0108B069CABC264E9320
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4f1b7198-ed1b-346f-8e4b-00dea457cdac.roa
Signing time: Mon 30 Dec 2024 02:00:39 +0000
ROA not before: Mon 30 Dec 2024 02:00:39 +0000
ROA not after: Sun 30 Mar 2025 01:00:39 +0000
asID: 54113
IP address blocks: 2607:8940:58e0::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5f:9b:01:08:b0:69:ca:bc:26:4e:93:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Dec 30 02:00:39 2024 GMT
Not After : Mar 30 01:00:39 2025 GMT
Subject: CN=ee9da9ef-c1d4-484e-accc-ada4f63b19fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1a:ac:bf:43:08:ea:3e:19:c7:5c:bd:92:c5:
35:1c:75:1a:6e:d8:5b:5a:41:19:94:51:6b:75:1e:
ec:f6:b2:e2:06:2d:58:ba:9f:c3:7d:42:2f:06:4d:
49:6a:ed:94:8a:ef:87:a8:ed:41:b6:82:b2:b0:87:
db:ab:c8:df:4e:c1:f1:fe:0a:9d:4c:90:93:0e:1e:
72:ae:b1:2d:a7:39:5f:f7:1e:11:a8:4b:f0:6c:b7:
82:19:27:9a:11:71:2c:07:e1:ef:bf:92:c8:a9:33:
06:dc:59:5d:41:70:fb:2a:d2:0b:09:38:29:ae:e1:
53:52:83:2b:98:1f:cc:3f:bd:92:59:c1:ee:30:3a:
d1:4f:93:f2:46:3a:ac:9a:14:6c:a4:f7:22:75:47:
22:4a:6c:96:b2:28:7a:ec:c0:9c:d1:88:b9:83:40:
c5:71:d3:5e:49:b5:f3:c7:50:de:26:0c:43:e8:50:
15:36:1e:7b:0a:a0:cf:ca:f0:8c:b0:04:f0:b2:f2:
bb:67:4d:0d:ef:ff:34:b4:89:07:17:f1:ac:db:ca:
03:82:d8:46:67:f0:b8:0a:da:05:fb:b1:fa:d3:63:
50:d9:a0:5d:fe:77:69:73:8b:9b:66:06:ee:18:8b:
85:75:6f:e7:8c:a4:df:ee:55:34:73:23:98:b6:b3:
03:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:81:32:AD:2C:28:D8:EB:DC:42:AD:9D:05:E5:1B:60:65:63:6E:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4f1b7198-ed1b-346f-8e4b-00dea457cdac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:58e0::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:ee:44:f0:51:01:d3:b6:6e:58:35:d0:80:87:5b:df:37:be:
bb:da:0f:56:1a:70:05:42:a0:00:2a:4e:15:c2:ea:71:69:fe:
3b:53:8d:b1:c8:e1:54:0a:e7:fa:92:02:9a:33:a7:87:26:37:
b1:53:82:c1:33:c4:26:b9:3a:2d:5b:11:c1:b0:be:ff:67:a8:
41:79:41:54:56:6f:be:9c:97:37:6d:7a:fd:43:e3:dc:5f:e8:
62:27:68:99:fe:6c:55:51:71:1c:8e:44:6a:ab:41:94:2b:30:
a5:f9:35:20:7e:f9:e6:3e:8d:a2:d1:95:93:d7:95:b8:ab:f7:
cd:fe:42:3a:35:fb:0c:35:3d:e4:93:bb:91:d6:aa:50:ec:4c:
5a:12:ea:3b:4d:78:b7:e6:2d:71:aa:72:97:95:cf:35:43:68:
f6:9c:fa:fa:55:14:ef:4f:86:16:ab:e0:84:b1:16:5e:0a:8e:
80:dd:37:79:49:eb:45:51:eb:d9:0e:2f:34:29:b1:1f:78:dd:
e9:96:cb:f8:f9:fe:0d:ca:ac:c7:55:d9:cd:9d:fa:8b:09:b3:
14:54:4c:6c:23:a8:a3:32:6d:a9:e7:1d:96:9d:d0:5b:75:e4:
96:4a:36:0a:9c:3a:d3:6a:36:1d:83:8a:28:bb:9a:87:62:53:
f5:09:30:e2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhfmwEIsGnKvCZOkyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI0MTIzMDAyMDAzOVoXDTI1MDMzMDAxMDAzOVowLzEtMCsGA1UEAxMk
ZWU5ZGE5ZWYtYzFkNC00ODRlLWFjY2MtYWRhNGY2M2IxOWZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBqsv0MI6j4Zx1y9ksU1HHUabthbWkEZlFFr
dR7s9rLiBi1Yup/DfUIvBk1Jau2Uiu+HqO1BtoKysIfbq8jfTsHx/gqdTJCTDh5y
rrEtpzlf9x4RqEvwbLeCGSeaEXEsB+Hvv5LIqTMG3FldQXD7KtILCTgpruFTUoMr
mB/MP72SWcHuMDrRT5PyRjqsmhRspPcidUciSmyWsih67MCc0Yi5g0DFcdNeSbXz
x1DeJgxD6FAVNh57CqDPyvCMsATwsvK7Z00N7/80tIkHF/Gs28oDgthGZ/C4CtoF
+7H602NQ2aBd/ndpc4ubZgbuGIuFdW/njKTf7lU0cyOYtrMDywIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMaBMq0sKNjr3EKtnQXlG2BlY26XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNGYxYjcxOTgtZWQxYi0z
NDZmLThlNGItMDBkZWE0NTdjZGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQFjg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHnuRPBRAdO2blg10ICHW983vrvaD1YacAVCoAAqThXC6nFp/jtT
jbHI4VQK5/qSApozp4cmN7FTgsEzxCa5Oi1bEcGwvv9nqEF5QVRWb76clzdtev1D
49xf6GInaJn+bFVRcRyORGqrQZQrMKX5NSB++eY+jaLRlZPXlbir983+Qjo1+ww1
PeSTu5HWqlDsTFoS6jtNeLfmLXGqcpeVzzVDaPac+vpVFO9Phhar4ISxFl4KjoDd
N3lJ60VR69kOLzQpsR943emWy/j5/g3KrMdV2c2d+osJsxRUTGwjqKMybannHZad
0Ft15JZKNgqcOtNqNh2Diii7modiU/UJMOI=
-----END CERTIFICATE-----
Generated at Fri Apr 25 23:21:40 2025 by rpki-client