Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9035b0dd-99f7-4bcd-9674-bde532fa824a/fac4c2f8-267a-3690-836d-512c52e5026d.roa
File: fac4c2f8-267a-3690-836d-512c52e5026d.roa (raw, json)
Hash identifier: 7Tzw5rNiYX0G5a8N9bX1UMqnngaIPWMdjbaoIR4HudI=
Subject key identifier: 90:07:F4:DF:4D:F6:62:C5:CB:16:01:1F:F0:18:75:85:13:B9:1C:E9
Certificate issuer: /CN=9035b0dd-99f7-4bcd-9674-bde532fa824a
Certificate serial: 010D0C9F432858480BDA5DE07DFA218F835602C0
Authority key identifier: 2A:0D:D1:39:6E:7D:DC:60:9D:9F:C3:98:50:D4:39:2A:2E:8F:2C:EB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9035b0dd-99f7-4bcd-9674-bde532fa824a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9035b0dd-99f7-4bcd-9674-bde532fa824a/fac4c2f8-267a-3690-836d-512c52e5026d.roa
Signing time: Sat 30 Nov 2024 02:00:39 +0000
ROA not before: Sat 30 Nov 2024 02:00:39 +0000
ROA not after: Fri 28 Feb 2025 02:00:39 +0000
asID: 401288
IP address blocks: 2607:cc40::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0b:da:5d:e0:7d:fa:21:8f:83:56:02:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9035b0dd-99f7-4bcd-9674-bde532fa824a
Validity
Not Before: Nov 30 02:00:39 2024 GMT
Not After : Feb 28 02:00:39 2025 GMT
Subject: CN=9a5837a2-d455-4ecd-8115-330f44d60f8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:12:a6:45:b4:23:7f:79:71:84:a8:c9:a3:a3:
8f:0d:9a:bb:5f:d3:11:ca:28:73:cf:b3:bd:89:10:
0b:9a:6e:65:28:d3:97:d4:db:01:0b:37:e0:3a:63:
62:ea:40:68:3f:38:55:f0:ba:c8:e1:f5:9c:c8:7a:
0a:1b:2b:a9:db:0b:60:89:0c:45:d3:86:ef:6b:a4:
64:a9:80:2a:e2:98:b0:1f:25:8c:ac:13:c7:41:60:
f5:40:d0:b7:3e:01:e0:08:50:29:38:10:ed:00:c2:
ba:6c:95:2f:d9:04:20:74:c2:52:ac:6b:22:e3:e7:
6d:04:c7:85:19:25:f9:d6:8d:03:44:3d:5e:b6:7f:
38:c3:1c:0f:1d:2b:e9:b1:25:47:86:ac:9f:d7:6b:
e5:6c:0c:69:f3:cb:cf:16:f3:b0:1d:8f:d4:d2:65:
f7:10:f5:ce:81:1b:8b:00:78:61:ff:98:42:95:5b:
e1:a6:94:15:f4:69:1b:b2:96:eb:ff:86:4c:43:c4:
18:da:1c:fd:ff:3f:59:9c:ea:6e:70:6b:be:dc:d6:
52:7a:23:c8:45:36:7b:4b:46:86:bb:eb:85:38:2d:
73:44:54:7f:12:82:22:4a:e4:73:dc:2f:05:3f:d1:
d2:b7:da:c6:cb:d0:d8:fa:cc:59:8b:c9:b4:8d:8a:
de:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:07:F4:DF:4D:F6:62:C5:CB:16:01:1F:F0:18:75:85:13:B9:1C:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9035b0dd-99f7-4bcd-9674-bde532fa824a/fac4c2f8-267a-3690-836d-512c52e5026d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9035b0dd-99f7-4bcd-9674-bde532fa824a/9035b0dd-99f7-4bcd-9674-bde532fa824a.crl
X509v3 Authority Key Identifier:
keyid:2A:0D:D1:39:6E:7D:DC:60:9D:9F:C3:98:50:D4:39:2A:2E:8F:2C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9035b0dd-99f7-4bcd-9674-bde532fa824a.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:cc40::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:2e:6e:4a:5e:0d:43:ed:30:b2:db:7a:b8:72:9c:18:de:60:
1d:52:73:7a:f4:c7:a1:50:5e:bd:22:3e:a0:67:4e:55:69:3b:
03:6f:51:96:a1:dd:a6:b1:cc:ff:28:a7:c2:e0:02:a7:8d:1d:
3c:a5:6b:47:57:0c:02:16:98:58:63:da:a9:b4:5a:2f:4b:c5:
41:c2:92:f4:1a:13:c4:0c:4b:e9:ed:0d:af:1f:44:48:ba:0b:
42:ad:e6:b1:b7:00:e2:9c:4e:db:f4:da:6a:93:1f:f4:0b:81:
ba:8c:98:4e:e2:1f:e8:48:86:a5:a2:c8:6a:b5:37:88:c7:64:
aa:e3:74:a7:44:cd:d1:c3:5b:bc:4b:41:93:8d:14:22:2f:ed:
5f:ed:22:00:eb:86:1c:7d:e2:32:7e:2e:62:08:f6:bc:a9:9b:
52:5d:bb:d0:4f:1f:ee:a6:6c:27:d8:4b:21:c2:7c:32:cf:30:
57:2e:49:0c:b5:c0:f9:d9:4e:d7:9a:0c:a3:ec:48:97:03:50:
0a:8a:2d:75:c3:7f:62:17:5a:7d:9a:4b:c9:8e:d2:10:45:16:
21:cd:e7:59:53:f1:8b:97:5b:67:5e:d3:56:41:01:d9:74:da:
a2:46:da:47:f4:1e:7a:20:67:31:6d:ae:aa:da:c5:06:60:de:
5c:75:63:d2
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEgL2l3gffohj4NWAsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTAzNWIwZGQtOTlmNy00YmNkLTk2NzQtYmRlNTMyZmE4
MjRhMB4XDTI0MTEzMDAyMDAzOVoXDTI1MDIyODAyMDAzOVowLzEtMCsGA1UEAxMk
OWE1ODM3YTItZDQ1NS00ZWNkLTgxMTUtMzMwZjQ0ZDYwZjhmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBKmRbQjf3lxhKjJo6OPDZq7X9MRyihzz7O9
iRALmm5lKNOX1NsBCzfgOmNi6kBoPzhV8LrI4fWcyHoKGyup2wtgiQxF04bva6Rk
qYAq4piwHyWMrBPHQWD1QNC3PgHgCFApOBDtAMK6bJUv2QQgdMJSrGsi4+dtBMeF
GSX51o0DRD1etn84wxwPHSvpsSVHhqyf12vlbAxp88vPFvOwHY/U0mX3EPXOgRuL
AHhh/5hClVvhppQV9Gkbspbr/4ZMQ8QY2hz9/z9ZnOpucGu+3NZSeiPIRTZ7S0aG
u+uFOC1zRFR/EoIiSuRz3C8FP9HSt9rGy9DY+sxZi8m0jYre6wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJAH9N9N9mLFyxYBH/AYdYUTuRzpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDM1
YjBkZC05OWY3LTRiY2QtOTY3NC1iZGU1MzJmYTgyNGEvZmFjNGMyZjgtMjY3YS0z
NjkwLTgzNmQtNTEyYzUyZTUwMjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTAzNWIwZGQtOTlmNy00YmNkLTk2
NzQtYmRlNTMyZmE4MjRhLzkwMzViMGRkLTk5ZjctNGJjZC05Njc0LWJkZTUzMmZh
ODI0YS5jcmwwHwYDVR0jBBgwFoAUKg3ROW593GCdn8OYUNQ5Ki6PLOswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85MDM1YjBkZC05OWY3LTRiY2QtOTY3NC1iZGU1
MzJmYTgyNGEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfMQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBDLm5KXg1D7TCy23q4cpwY3mAdUnN69MehUF69Ij6gZ05VaTsDb1GW
od2mscz/KKfC4AKnjR08pWtHVwwCFphYY9qptFovS8VBwpL0GhPEDEvp7Q2vH0RI
ugtCreaxtwDinE7b9Npqkx/0C4G6jJhO4h/oSIaloshqtTeIx2Sq43SnRM3Rw1u8
S0GTjRQiL+1f7SIA64YcfeIyfi5iCPa8qZtSXbvQTx/upmwn2EshwnwyzzBXLkkM
tcD52U7Xmgyj7EiXA1AKii11w39iF1p9mkvJjtIQRRYhzedZU/GLl1tnXtNWQQHZ
dNqiRtpH9B56IGcxba6q2sUGYN5cdWPS
-----END CERTIFICATE-----
Generated at Sun Apr 27 07:19:33 2025 by rpki-client