Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/f51b59c2-dbdd-3e38-9a36-408bdbdd9594.roa
File: f51b59c2-dbdd-3e38-9a36-408bdbdd9594.roa (raw, json)
Hash identifier: p5y7cNY2NGlctci0dHwSeR1J4Uq9iVCFO1m69br50RA=
Subject key identifier: 7A:FA:6B:B4:E4:06:63:08:17:C8:F7:EA:BC:55:C1:5A:40:9E:4F:23
Certificate issuer: /CN=8322c61d-99cf-48fc-b867-b2c2cce4d324
Certificate serial: 010D0C9F4328584834557EEDAE52DD7AA1A4ABC0
Authority key identifier: 23:EC:CD:25:07:2E:B6:D8:45:A9:F0:04:86:BA:91:6D:90:8F:B8:FA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/f51b59c2-dbdd-3e38-9a36-408bdbdd9594.roa
Signing time: Sat 14 Dec 2024 14:00:52 +0000
ROA not before: Sat 14 Dec 2024 14:00:52 +0000
ROA not after: Fri 14 Mar 2025 13:00:52 +0000
asID: 8070
IP address blocks: 2606:e540:c03::/48 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:34:55:7e:ed:ae:52:dd:7a:a1:a4:ab:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8322c61d-99cf-48fc-b867-b2c2cce4d324
Validity
Not Before: Dec 14 14:00:52 2024 GMT
Not After : Mar 14 13:00:52 2025 GMT
Subject: CN=999b7cf1-0c5e-422f-9a8a-55cc3725c6b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:59:d7:97:c3:c9:a5:c9:c2:e6:91:ed:9f:92:
cb:57:b1:cc:7e:f3:06:0e:50:99:88:08:69:6b:19:
34:be:46:55:cc:6e:89:9a:46:78:da:da:ad:32:5a:
b4:c2:07:0a:40:1d:49:45:31:32:9d:23:21:4b:d8:
fc:26:21:3e:c5:31:07:b6:dc:2f:a0:d1:48:88:d6:
b2:23:64:ff:e1:32:eb:63:5c:eb:99:e1:9b:02:aa:
a0:3d:62:21:61:2f:72:f9:bd:50:52:c6:d7:c0:5c:
1d:cb:c3:ff:88:28:94:f5:c5:cd:45:6b:f6:88:f1:
15:64:2b:51:ce:0f:3c:f2:ad:f6:d8:1e:4f:42:8d:
46:9e:c4:2f:3a:61:f0:e9:f4:f8:5f:b9:5d:0f:c0:
32:68:b3:68:c0:48:f3:a9:65:b4:28:74:23:c9:d4:
de:bc:f1:33:22:f2:c0:b7:20:d7:12:e4:4a:7a:b7:
bf:ca:30:85:53:cb:38:7d:8e:a1:9d:b4:b0:18:10:
d2:e1:1c:a5:07:d2:01:f9:ae:10:01:05:46:75:42:
80:35:0b:f5:91:9e:d4:af:e5:e9:18:9d:ad:67:00:
08:d3:3b:14:f5:69:d3:72:96:a0:ba:b0:36:f1:ce:
11:76:35:9b:91:2b:c2:43:ac:79:6b:a2:5f:c0:83:
29:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:FA:6B:B4:E4:06:63:08:17:C8:F7:EA:BC:55:C1:5A:40:9E:4F:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/f51b59c2-dbdd-3e38-9a36-408bdbdd9594.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.crl
X509v3 Authority Key Identifier:
keyid:23:EC:CD:25:07:2E:B6:D8:45:A9:F0:04:86:BA:91:6D:90:8F:B8:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:e540:c03::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:fe:e4:aa:03:af:cc:7a:f4:e7:65:0c:3c:7a:51:fa:53:b5:
73:e5:9d:e3:b1:b8:4b:1e:3d:88:31:56:40:df:aa:b0:8d:44:
22:74:14:a5:4a:1b:9a:4a:28:e9:13:77:70:84:67:ad:da:4a:
4e:22:0f:46:97:fb:cb:07:02:35:01:5c:39:49:94:7c:dd:c4:
75:e4:80:47:a3:1a:56:8e:33:cb:d0:d1:32:5a:c4:7b:c2:b0:
0b:e9:e0:82:49:23:01:cb:87:56:38:c1:c9:f3:ab:96:29:14:
02:e9:d2:ae:a4:2d:c3:52:f6:e1:9b:74:1d:b1:97:65:e0:e3:
b5:03:fd:34:18:b4:10:fe:13:2c:ef:8d:8f:83:9d:48:a6:1b:
7f:6d:56:32:75:87:19:e7:02:c8:f2:d5:a2:e5:06:b9:42:e0:
fa:0a:48:69:24:fc:92:b7:fd:c8:e8:7b:91:50:2e:cc:8a:41:
72:82:27:a5:d1:a9:c9:47:e0:71:eb:94:2e:2c:b8:46:bb:4b:
de:a5:1a:35:8d:f0:21:2c:58:ca:16:4e:ab:f5:e4:ab:24:71:
de:df:a3:ec:94:e9:ab:89:5e:77:c8:9d:a8:82:ef:fd:eb:79:
77:4f:af:67:14:d1:65:63:5a:57:b3:4e:60:cb:cb:a5:10:3b:
32:86:a8:8b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEg0VX7trlLdeqGkq8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMyMmM2MWQtOTljZi00OGZjLWI4NjctYjJjMmNjZTRk
MzI0MB4XDTI0MTIxNDE0MDA1MloXDTI1MDMxNDEzMDA1MlowLzEtMCsGA1UEAxMk
OTk5YjdjZjEtMGM1ZS00MjJmLTlhOGEtNTVjYzM3MjVjNmI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVnXl8PJpcnC5pHtn5LLV7HMfvMGDlCZiAhp
axk0vkZVzG6JmkZ42tqtMlq0wgcKQB1JRTEynSMhS9j8JiE+xTEHttwvoNFIiNay
I2T/4TLrY1zrmeGbAqqgPWIhYS9y+b1QUsbXwFwdy8P/iCiU9cXNRWv2iPEVZCtR
zg888q322B5PQo1GnsQvOmHw6fT4X7ldD8AyaLNowEjzqWW0KHQjydTevPEzIvLA
tyDXEuRKere/yjCFU8s4fY6hnbSwGBDS4RylB9IB+a4QAQVGdUKANQv1kZ7Ur+Xp
GJ2tZwAI0zsU9WnTcpagurA28c4RdjWbkSvCQ6x5a6JfwIMpoQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHr6a7TkBmMIF8j36rxVwVpAnk8jMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MzIy
YzYxZC05OWNmLTQ4ZmMtYjg2Ny1iMmMyY2NlNGQzMjQvZjUxYjU5YzItZGJkZC0z
ZTM4LTlhMzYtNDA4YmRiZGQ5NTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODMyMmM2MWQtOTljZi00OGZjLWI4
NjctYjJjMmNjZTRkMzI0LzgzMjJjNjFkLTk5Y2YtNDhmYy1iODY3LWIyYzJjY2U0
ZDMyNC5jcmwwHwYDVR0jBBgwFoAUI+zNJQcutthFqfAEhrqRbZCPuPowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy84MzIyYzYxZC05OWNmLTQ4ZmMtYjg2Ny1iMmMy
Y2NlNGQzMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgblQAwD
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABb+5KoDr8x69OdlDDx6UfpTtXPlneOxuEsePYgxVkDfqrCNRCJ0
FKVKG5pKKOkTd3CEZ63aSk4iD0aX+8sHAjUBXDlJlHzdxHXkgEejGlaOM8vQ0TJa
xHvCsAvp4IJJIwHLh1Y4wcnzq5YpFALp0q6kLcNS9uGbdB2xl2Xg47UD/TQYtBD+
EyzvjY+DnUimG39tVjJ1hxnnAsjy1aLlBrlC4PoKSGkk/JK3/cjoe5FQLsyKQXKC
J6XRqclH4HHrlC4suEa7S96lGjWN8CEsWMoWTqv15Kskcd7fo+yU6auJXnfInaiC
7/3reXdPr2cU0WVjWlezTmDLy6UQOzKGqIs=
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:18:19 2025 by rpki-client