Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3c58dacd-b17a-3904-a883-f1d2e402127c.roa
File: 3c58dacd-b17a-3904-a883-f1d2e402127c.roa (raw, json)
Hash identifier: cTL4ySaTdwRL5RhfhwlWtZ/yZAd5uKmwnVJ96YOPAKQ=
Subject key identifier: 58:65:5A:2F:44:1E:2B:EF:5B:E5:F3:28:94:54:EA:18:2D:C5:00:43
Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial: 010D0C9F4328584855D59AEF0290088F06BE84A0
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3c58dacd-b17a-3904-a883-f1d2e402127c.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 395831
IP address blocks: 2606:7bc0:1081::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:9a:ef:02:90:08:8f:06:be:84:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=5951d997-d988-4308-83e2-3ab50f2ccb1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2d:4b:d0:3b:81:ee:01:63:72:11:1b:08:fa:
d9:a1:da:db:fc:3f:44:d4:50:97:c9:66:59:a0:86:
18:f7:c8:f6:e7:7a:89:f0:b8:4d:67:79:54:41:13:
30:04:f0:c1:c3:2d:2c:14:4e:12:3a:d5:14:c8:6f:
a8:f4:6f:ea:3e:17:2e:f5:f5:d7:93:ec:78:54:c2:
75:a3:b5:70:2d:a7:65:37:f4:63:23:99:ff:bb:b6:
bf:a4:06:1a:98:69:0c:48:14:2f:98:17:64:e1:5c:
8a:63:44:04:21:5d:50:56:4a:b1:28:e5:23:55:2f:
a8:69:a2:31:b0:e4:70:e6:8b:f6:52:46:66:72:ab:
0d:8b:12:07:45:27:cb:76:7d:f9:27:9f:28:f4:a2:
45:89:45:28:0a:ee:6f:91:1f:96:a8:14:e9:78:ca:
6f:db:7b:7e:d5:83:cf:b3:e0:5b:88:f1:61:6e:b1:
70:09:9a:3d:56:41:a0:93:8d:1c:4f:1e:4c:55:8c:
8f:0f:60:2d:20:5f:53:7c:5b:be:0d:b2:4c:62:14:
9a:a5:5d:e7:4c:e8:b5:37:02:ee:40:46:85:fa:39:
c7:85:d0:1e:3f:7c:e4:aa:56:a5:bf:5f:c0:f7:49:
22:a4:57:ed:44:17:40:17:e0:c0:bc:24:21:bb:f2:
ec:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:65:5A:2F:44:1E:2B:EF:5B:E5:F3:28:94:54:EA:18:2D:C5:00:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3c58dacd-b17a-3904-a883-f1d2e402127c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
X509v3 Authority Key Identifier:
keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:7bc0:1081::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:24:da:65:af:b8:5d:09:35:f4:30:bd:79:61:9c:ce:4a:e2:
e7:90:10:60:65:11:51:9b:58:ae:f8:e9:17:61:95:5a:f5:90:
32:17:11:d9:90:03:25:e4:b4:42:67:44:4f:b3:3a:03:64:31:
6b:7e:fc:af:e6:fd:5a:43:55:99:74:c0:8a:9a:09:ab:75:0f:
9e:25:0c:35:a6:d5:7c:78:34:d8:3e:d2:c5:53:b5:68:ab:dc:
af:17:a9:28:7c:6e:cf:76:b2:c8:5e:a4:24:99:a3:d8:4d:d1:
a2:71:48:19:b8:cf:75:32:76:dc:2a:89:0a:06:8e:74:9f:55:
dd:30:70:6e:e8:e2:1f:60:0f:92:74:89:04:92:b4:32:88:f6:
7c:a4:75:e9:c5:35:68:25:78:b2:31:b3:52:9b:4a:ed:56:2d:
88:2a:0e:6b:87:68:4c:d8:42:ae:88:41:15:06:36:ed:38:61:
3d:c4:bb:4a:a6:01:56:e8:fc:78:93:a4:92:a7:46:3a:4e:19:
96:b4:67:31:c4:67:9e:2d:35:a9:33:14:a2:47:07:94:8f:6c:
6f:68:cd:d8:1a:29:b4:13:ba:ec:d6:ad:6a:f3:3c:96:2f:ad:
f3:0c:cf:f1:3f:15:15:32:e9:73:9d:ae:d1:2d:78:cd:2f:f1:
f7:03:51:fd
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhV1ZrvApAIjwa+hKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz
M2Q3MB4XDTI0MTIyNjE0MDA1MloXDTI1MDMyNjEzMDA1MlowLzEtMCsGA1UEAxMk
NTk1MWQ5OTctZDk4OC00MzA4LTgzZTItM2FiNTBmMmNjYjFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsy1L0DuB7gFjchEbCPrZodrb/D9E1FCXyWZZ
oIYY98j253qJ8LhNZ3lUQRMwBPDBwy0sFE4SOtUUyG+o9G/qPhcu9fXXk+x4VMJ1
o7VwLadlN/RjI5n/u7a/pAYamGkMSBQvmBdk4VyKY0QEIV1QVkqxKOUjVS+oaaIx
sORw5ov2UkZmcqsNixIHRSfLdn35J58o9KJFiUUoCu5vkR+WqBTpeMpv23t+1YPP
s+BbiPFhbrFwCZo9VkGgk40cTx5MVYyPD2AtIF9TfFu+DbJMYhSapV3nTOi1NwLu
QEaF+jnHhdAeP3zkqlalv1/A90kipFftRBdAF+DAvCQhu/LsuwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFhlWi9EHivvW+XzKJRU6hgtxQBDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl
ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvM2M1OGRhY2QtYjE3YS0z
OTA0LWE4ODMtZjFkMmU0MDIxMjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4
NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm
MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2
YzY2ZjMzZDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZ7wBCB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJ4k2mWvuF0JNfQwvXlhnM5K4ueQEGBlEVGbWK746RdhlVr1kDIX
EdmQAyXktEJnRE+zOgNkMWt+/K/m/VpDVZl0wIqaCat1D54lDDWm1Xx4NNg+0sVT
tWir3K8XqSh8bs92sshepCSZo9hN0aJxSBm4z3UydtwqiQoGjnSfVd0wcG7o4h9g
D5J0iQSStDKI9nykdenFNWgleLIxs1KbSu1WLYgqDmuHaEzYQq6IQRUGNu04YT3E
u0qmAVbo/HiTpJKnRjpOGZa0ZzHEZ54tNakzFKJHB5SPbG9ozdgaKbQTuuzWrWrz
PJYvrfMMz/E/FRUy6XOdrtEteM0v8fcDUf0=
-----END CERTIFICATE-----
Generated at Sat Apr 26 09:43:27 2025 by rpki-client