Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409/8d419152-cb9a-3d9d-b08f-c378f5e8aa3c.roa
File: 8d419152-cb9a-3d9d-b08f-c378f5e8aa3c.roa (raw, json)
Hash identifier: jbXN4FwyfbtPUqRnIusRNCovB6luhs4PiGAEEfdXWSs=
Subject key identifier: 8C:94:28:BE:A6:69:49:20:5C:3C:75:B6:8E:3F:A1:FF:7C:CA:8D:21
Certificate issuer: /CN=9b1ca75e-4539-4223-b200-925398eb3409
Certificate serial: 010D0C9F432858483025427B565DCF33D3688440
Authority key identifier: DD:74:9D:1A:2F:AF:94:47:44:4E:AA:33:8B:1B:60:1C:CA:04:0E:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409/8d419152-cb9a-3d9d-b08f-c378f5e8aa3c.roa
Signing time: Fri 13 Dec 2024 02:00:39 +0000
ROA not before: Fri 13 Dec 2024 02:00:39 +0000
ROA not after: Thu 13 Mar 2025 01:00:39 +0000
asID: 16509
IP address blocks: 2607:a940:b000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:25:42:7b:56:5d:cf:33:d3:68:84:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b1ca75e-4539-4223-b200-925398eb3409
Validity
Not Before: Dec 13 02:00:39 2024 GMT
Not After : Mar 13 01:00:39 2025 GMT
Subject: CN=ec40300d-ceba-4a68-b684-92e1e0d88c98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:32:77:2d:97:5d:1d:56:92:22:35:d4:b9:5c:
de:5b:f8:9c:a0:69:92:41:19:88:dd:36:b9:3d:41:
6e:e4:96:f6:77:32:8a:1c:31:96:d6:cc:ec:30:a5:
bb:97:01:09:29:db:57:ce:6e:a9:7f:a8:05:5d:c1:
57:7e:f2:60:43:88:cb:2f:33:d8:5c:fa:a3:5a:c0:
69:d5:e8:fa:b5:92:39:61:c6:8f:98:3b:af:b7:d2:
a9:67:5c:5b:7c:c1:3d:ea:32:09:17:87:6c:15:21:
3d:cc:5f:9c:6e:a9:f1:42:da:4a:d2:18:32:1d:6d:
de:da:e0:b4:72:f1:d0:e6:e1:b7:3c:28:9b:26:21:
4e:ce:41:16:08:97:e3:85:ac:8d:bb:94:28:d5:a5:
19:20:a3:8f:32:6d:17:ca:c7:91:cd:5b:cb:80:64:
18:06:0f:13:36:88:05:b5:61:fc:5c:46:01:e1:cf:
44:51:45:67:38:8f:28:89:4a:4a:02:ae:7e:88:d0:
90:e9:3d:16:91:8d:a7:9c:5a:3b:3c:d3:b7:52:2e:
5d:16:7a:ce:43:c5:f5:4c:e7:3f:13:a0:b5:62:c5:
9b:bc:6e:41:42:59:f1:5f:2f:ca:1f:47:4e:0b:a7:
ea:6d:7e:1c:9f:22:f7:5e:1c:a3:b1:6e:42:35:3e:
70:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:94:28:BE:A6:69:49:20:5C:3C:75:B6:8E:3F:A1:FF:7C:CA:8D:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409/8d419152-cb9a-3d9d-b08f-c378f5e8aa3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409/9b1ca75e-4539-4223-b200-925398eb3409.crl
X509v3 Authority Key Identifier:
keyid:DD:74:9D:1A:2F:AF:94:47:44:4E:AA:33:8B:1B:60:1C:CA:04:0E:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:a940:b000::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:6a:1d:f1:23:7b:06:bf:c5:ea:e6:10:6b:65:bd:29:01:b6:
bc:36:0c:b2:5f:c7:e3:84:1a:82:03:80:bf:fa:e6:46:c7:c8:
18:40:43:28:06:3d:89:34:5d:ea:8e:63:0c:e5:0e:27:9e:52:
41:27:a4:5a:61:98:62:be:ab:44:2e:13:d6:1a:46:ad:4f:a9:
bc:de:e0:0b:99:f6:d4:c5:57:bf:67:54:d3:82:23:2a:f5:7e:
55:8a:b1:f7:ed:3f:09:01:13:4b:0e:5d:d2:30:b7:a9:63:82:
8c:32:23:bf:ec:4d:96:97:2f:90:04:31:95:86:2e:67:9d:f3:
91:6e:d5:f5:77:ce:c6:31:5f:96:52:be:cd:08:6a:db:65:5a:
ef:e8:be:7c:e5:4a:f5:df:ae:b7:35:cf:91:83:65:45:82:6a:
ff:1b:16:70:cc:f4:01:8e:ec:ab:95:37:d1:8b:0c:f7:fa:db:
65:ea:d0:04:0b:78:1c:f1:4b:52:f8:9d:2e:58:46:ec:7d:20:
95:d6:41:3e:36:1f:31:ed:d4:69:e7:41:b5:32:f4:b4:ff:63:
ca:26:ff:2c:02:78:13:2e:82:d9:17:99:1d:a0:60:9c:1a:52:
80:1b:e9:c7:f6:cd:8b:d8:6e:7a:b7:56:ac:58:04:cb:a3:f8:
70:92:57:d1
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEgwJUJ7Vl3PM9NohEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWIxY2E3NWUtNDUzOS00MjIzLWIyMDAtOTI1Mzk4ZWIz
NDA5MB4XDTI0MTIxMzAyMDAzOVoXDTI1MDMxMzAxMDAzOVowLzEtMCsGA1UEAxMk
ZWM0MDMwMGQtY2ViYS00YTY4LWI2ODQtOTJlMWUwZDg4Yzk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizJ3LZddHVaSIjXUuVzeW/icoGmSQRmI3Ta5
PUFu5Jb2dzKKHDGW1szsMKW7lwEJKdtXzm6pf6gFXcFXfvJgQ4jLLzPYXPqjWsBp
1ej6tZI5YcaPmDuvt9KpZ1xbfME96jIJF4dsFSE9zF+cbqnxQtpK0hgyHW3e2uC0
cvHQ5uG3PCibJiFOzkEWCJfjhayNu5Qo1aUZIKOPMm0XyseRzVvLgGQYBg8TNogF
tWH8XEYB4c9EUUVnOI8oiUpKAq5+iNCQ6T0WkY2nnFo7PNO3Ui5dFnrOQ8X1TOc/
E6C1YsWbvG5BQlnxXy/KH0dOC6fqbX4cnyL3XhyjsW5CNT5wmQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFIyUKL6maUkgXDx1to4/of98yo0hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85YjFj
YTc1ZS00NTM5LTQyMjMtYjIwMC05MjUzOThlYjM0MDkvOGQ0MTkxNTItY2I5YS0z
ZDlkLWIwOGYtYzM3OGY1ZThhYTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOWIxY2E3NWUtNDUzOS00MjIzLWIy
MDAtOTI1Mzk4ZWIzNDA5LzliMWNhNzVlLTQ1MzktNDIyMy1iMjAwLTkyNTM5OGVi
MzQwOS5jcmwwHwYDVR0jBBgwFoAU3XSdGi+vlEdETqozixtgHMoEDkIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85YjFjYTc1ZS00NTM5LTQyMjMtYjIwMC05MjUz
OThlYjM0MDkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgepQLAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAF2od8SN7Br/F6uYQa2W9KQG2vDYMsl/H44QaggOAv/rmRsfIGEBD
KAY9iTRd6o5jDOUOJ55SQSekWmGYYr6rRC4T1hpGrU+pvN7gC5n21MVXv2dU04Ij
KvV+VYqx9+0/CQETSw5d0jC3qWOCjDIjv+xNlpcvkAQxlYYuZ53zkW7V9XfOxjFf
llK+zQhq22Va7+i+fOVK9d+utzXPkYNlRYJq/xsWcMz0AY7sq5U30YsM9/rbZerQ
BAt4HPFLUvidLlhG7H0gldZBPjYfMe3UaedBtTL0tP9jyib/LAJ4Ey6C2ReZHaBg
nBpSgBvpx/bNi9huerdWrFgEy6P4cJJX0Q==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:42:15 2025 by rpki-client