Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b512dd4e-2bcc-3c2d-b294-851fa3aa5dec.roa
File: b512dd4e-2bcc-3c2d-b294-851fa3aa5dec.roa (raw, json)
Hash identifier: B7GMKIB3YvwPkRmgsdx+dwSLGsg/aXjEXaC5PxhE3vY=
Subject key identifier: D8:37:D5:A7:77:EA:84:CF:F1:DF:AE:F3:42:F5:E9:37:2C:F6:0A:AC
Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial: 010D0C9F43285848547024CB9A82363C0F6676E0
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b512dd4e-2bcc-3c2d-b294-851fa3aa5dec.roa
Signing time: Thu 26 Dec 2024 02:00:40 +0000
ROA not before: Thu 26 Dec 2024 02:00:40 +0000
ROA not after: Wed 26 Mar 2025 01:00:40 +0000
asID: 16509
IP address blocks: 2606:7bc0:1090::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:54:70:24:cb:9a:82:36:3c:0f:66:76:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Validity
Not Before: Dec 26 02:00:40 2024 GMT
Not After : Mar 26 01:00:40 2025 GMT
Subject: CN=da504aa0-26b9-45cf-be9a-20e9b3e2688a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4f:a4:09:6c:a0:42:32:fa:c6:b2:ce:f4:23:
82:52:62:48:f8:af:65:2b:71:99:36:ee:b0:cc:7d:
40:89:b3:02:f8:ab:a4:44:61:66:45:60:34:65:87:
13:cf:1e:86:cb:59:ba:bc:ac:ee:fa:ee:1f:21:07:
85:b6:2f:80:af:1f:14:46:86:ed:89:1e:5b:c2:0d:
f6:df:33:48:09:30:fd:5b:4c:62:42:43:f7:07:e2:
2a:4b:91:3a:91:a8:7f:87:35:a5:33:c8:18:ab:69:
41:d4:d8:c0:dd:65:35:af:f5:88:da:15:2c:7f:85:
75:ef:e3:a6:69:38:98:6c:d2:19:cf:de:c9:9e:f6:
d2:cd:d1:dc:12:4d:23:d1:ed:f4:1f:29:e9:6b:ac:
b8:fe:aa:c6:bd:e9:72:d3:68:da:3c:a6:f4:d9:10:
05:73:dd:32:64:46:f9:42:1b:df:16:45:69:94:61:
f0:f3:bf:71:88:7b:63:33:d4:84:02:91:7f:95:49:
14:60:7e:d4:21:4d:45:9a:51:e1:c1:90:80:3f:08:
fc:de:d4:b1:84:0b:f5:22:b8:c9:ae:02:e3:6a:e3:
5e:81:1a:3c:6d:2c:ea:57:02:81:d2:a3:32:61:59:
b1:8d:a5:e2:83:69:eb:e9:e4:e5:f0:68:5a:9c:ed:
13:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:37:D5:A7:77:EA:84:CF:F1:DF:AE:F3:42:F5:E9:37:2C:F6:0A:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b512dd4e-2bcc-3c2d-b294-851fa3aa5dec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
X509v3 Authority Key Identifier:
keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:7bc0:1090::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:11:6a:9f:81:fa:e0:e4:c3:8d:78:05:85:54:28:6b:6e:93:
ab:52:fe:ca:6c:b5:51:7b:ee:8a:20:51:b7:84:cc:49:cb:e0:
31:6c:ea:e6:e5:e2:80:a1:05:30:58:87:58:3f:fd:51:03:fd:
9d:78:46:fa:7e:9e:7c:f5:b3:c9:1b:a0:df:6c:11:59:50:c5:
39:e8:50:fe:ed:79:38:1f:01:81:b6:b3:7f:87:cd:2c:01:20:
ed:48:a7:b9:24:86:1f:ff:f0:c0:23:b1:48:44:5f:eb:fd:c0:
5f:b2:23:23:3c:a3:ef:30:34:11:13:de:be:a8:a6:30:58:81:
64:5a:92:16:ed:e4:56:5a:cc:9a:84:6e:a1:b2:52:a6:ad:4b:
3f:89:bd:24:7a:2e:18:3d:72:23:12:22:a7:6b:fe:fa:6f:e1:
be:86:48:40:3e:2c:9e:8d:e9:31:5a:27:bc:45:91:4f:db:2c:
b9:d7:ef:d7:2d:05:98:36:e9:83:a3:7e:33:8b:f2:d3:08:eb:
1c:39:d9:68:91:a8:a3:e4:9b:ca:3f:9f:ca:f1:8b:60:a0:3c:
64:a8:da:ea:58:9d:10:10:ff:18:85:66:9d:86:2d:c7:2c:ef:
98:cd:09:02:28:92:41:a4:4a:cc:97:85:5c:78:5a:98:dc:5b:
1f:60:d6:8b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhUcCTLmoI2PA9mduAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz
M2Q3MB4XDTI0MTIyNjAyMDA0MFoXDTI1MDMyNjAxMDA0MFowLzEtMCsGA1UEAxMk
ZGE1MDRhYTAtMjZiOS00NWNmLWJlOWEtMjBlOWIzZTI2ODhhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApk+kCWygQjL6xrLO9COCUmJI+K9lK3GZNu6w
zH1AibMC+KukRGFmRWA0ZYcTzx6Gy1m6vKzu+u4fIQeFti+Arx8URobtiR5bwg32
3zNICTD9W0xiQkP3B+IqS5E6kah/hzWlM8gYq2lB1NjA3WU1r/WI2hUsf4V17+Om
aTiYbNIZz97JnvbSzdHcEk0j0e30Hynpa6y4/qrGvely02jaPKb02RAFc90yZEb5
QhvfFkVplGHw879xiHtjM9SEApF/lUkUYH7UIU1FmlHhwZCAPwj83tSxhAv1IrjJ
rgLjauNegRo8bSzqVwKB0qMyYVmxjaXig2nr6eTl8GhanO0TTwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNg31ad36oTP8d+u80L16Tcs9gqsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl
ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvYjUxMmRkNGUtMmJjYy0z
YzJkLWIyOTQtODUxZmEzYWE1ZGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4
NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm
MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2
YzY2ZjMzZDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgZ7wBCQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGwRap+B+uDkw414BYVUKGtuk6tS/spstVF77oogUbeEzEnL4DFs
6ubl4oChBTBYh1g//VED/Z14Rvp+nnz1s8kboN9sEVlQxTnoUP7teTgfAYG2s3+H
zSwBIO1Ip7kkhh//8MAjsUhEX+v9wF+yIyM8o+8wNBET3r6opjBYgWRakhbt5FZa
zJqEbqGyUqatSz+JvSR6Lhg9ciMSIqdr/vpv4b6GSEA+LJ6N6TFaJ7xFkU/bLLnX
79ctBZg26YOjfjOL8tMI6xw52WiRqKPkm8o/n8rxi2CgPGSo2upYnRAQ/xiFZp2G
Lccs75jNCQIokkGkSsyXhVx4WpjcWx9g1os=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:22:28 2025 by rpki-client