Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/d1e1809b-32ce-3131-90d0-28c02d9448ea.roa
File: d1e1809b-32ce-3131-90d0-28c02d9448ea.roa (raw, json)
Hash identifier: qXPMhMGF4wTSFHcT9s7gVV+gpVrDhIGKvFuruEyOZNA=
Subject key identifier: EC:29:41:77:CC:11:77:49:38:01:0A:C1:C8:AA:FE:1D:28:7E:BA:63
Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial: 010D0C9F432858483F803DFF5618C53A9DBBF5C0
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/d1e1809b-32ce-3131-90d0-28c02d9448ea.roa
Signing time: Wed 18 Dec 2024 14:00:52 +0000
ROA not before: Wed 18 Dec 2024 14:00:52 +0000
ROA not after: Tue 18 Mar 2025 13:00:52 +0000
asID: 16839
IP address blocks: 2606:3600:4000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:80:3d:ff:56:18:c5:3a:9d:bb:f5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Validity
Not Before: Dec 18 14:00:52 2024 GMT
Not After : Mar 18 13:00:52 2025 GMT
Subject: CN=2f748007-bd25-4378-ae1b-575a68fecbf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bf:54:d7:03:09:78:34:70:71:cb:f4:70:50:
ba:af:31:43:12:27:4b:6a:ce:de:6b:42:ca:a6:0c:
95:f6:88:1a:e6:f8:d8:17:26:2a:b2:6e:0b:0f:be:
40:8d:58:1b:09:42:ca:b3:ff:75:4f:2b:86:ea:48:
94:62:3a:3a:80:9c:0d:97:8c:05:1d:1f:c0:c7:66:
06:24:bf:7c:52:3c:a3:34:b4:19:27:6d:70:50:31:
28:4e:e8:e6:5c:35:a6:4f:d0:72:55:74:bd:9e:f5:
3f:b6:04:a2:d8:e4:43:6a:92:52:25:e5:fc:db:8c:
e8:98:f8:d8:8b:95:f9:13:fa:28:b6:0b:08:4c:cd:
1c:80:b6:27:4d:83:c0:dd:10:f5:98:cb:59:7a:80:
ef:06:19:bb:9c:8f:22:cb:3f:34:88:35:1d:76:6e:
7b:3c:10:95:04:f3:30:0f:41:ef:b9:97:51:d8:6a:
1e:c5:76:0a:31:41:5a:78:e0:7b:71:db:c0:88:85:
17:43:ae:40:50:67:e9:1c:f1:d9:1a:19:ca:2b:69:
de:d1:8c:d2:2d:b0:0b:72:89:02:80:f2:f0:ce:ab:
53:81:cf:f6:4b:b5:a9:88:c4:db:b2:23:89:ca:f3:
c4:ab:fa:1c:e6:4c:0b:d7:f0:ef:68:39:de:cc:5e:
e5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:29:41:77:CC:11:77:49:38:01:0A:C1:C8:AA:FE:1D:28:7E:BA:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/d1e1809b-32ce-3131-90d0-28c02d9448ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
X509v3 Authority Key Identifier:
keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:3600:4000::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:9a:4b:42:53:4c:2b:45:4c:6b:74:15:b8:ea:1f:ef:d1:0c:
56:9f:92:b3:02:29:2c:a1:79:20:71:ef:b4:77:37:e1:d8:75:
ad:40:00:9e:38:d3:0e:64:0f:06:b6:1b:d1:78:0b:26:fc:22:
bb:a0:c6:33:67:6a:dd:f3:4e:da:ac:55:f5:6c:91:dd:2f:98:
a4:dd:b0:3b:59:d1:0b:b7:ee:8f:52:89:49:6a:c7:f6:f7:1d:
21:c0:15:4f:c2:e7:ac:38:eb:b5:a9:96:2a:0c:b5:67:83:9a:
e7:89:c3:0e:c6:b4:75:2a:ea:f8:b8:84:ec:02:ed:3f:96:e4:
e3:88:51:92:4f:bb:65:27:4c:cd:80:ac:84:c6:7b:2d:7e:9f:
10:1e:cc:58:3a:1e:0c:c6:92:a1:10:52:cf:1c:55:4c:12:d8:
3b:19:fa:a9:8f:10:9b:dd:65:73:db:c8:37:c2:57:d1:dc:e1:
08:f8:89:df:72:a4:44:1e:a1:c2:b0:91:3e:6f:6f:28:4f:c1:
e1:12:f0:e8:da:58:dd:c4:29:21:ad:ca:db:ab:25:92:89:74:
a5:cc:9b:30:34:17:81:a3:12:81:a8:42:02:1b:de:4a:ce:33:
94:f9:5e:07:23:03:9b:3d:01:18:91:4a:a9:32:a0:99:f2:f4:
8d:1c:46:db
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEg/gD3/VhjFOp279cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm
MjlhMB4XDTI0MTIxODE0MDA1MloXDTI1MDMxODEzMDA1MlowLzEtMCsGA1UEAxMk
MmY3NDgwMDctYmQyNS00Mzc4LWFlMWItNTc1YTY4ZmVjYmY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp79U1wMJeDRwccv0cFC6rzFDEidLas7ea0LK
pgyV9oga5vjYFyYqsm4LD75AjVgbCULKs/91TyuG6kiUYjo6gJwNl4wFHR/Ax2YG
JL98UjyjNLQZJ21wUDEoTujmXDWmT9ByVXS9nvU/tgSi2ORDapJSJeX824zomPjY
i5X5E/ootgsITM0cgLYnTYPA3RD1mMtZeoDvBhm7nI8iyz80iDUddm57PBCVBPMw
D0HvuZdR2GoexXYKMUFaeOB7cdvAiIUXQ65AUGfpHPHZGhnKK2ne0YzSLbALcokC
gPLwzqtTgc/2S7WpiMTbsiOJyvPEq/oc5kwL1/DvaDnezF7lrwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFOwpQXfMEXdJOAEKwciq/h0ofrpjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm
NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvZDFlMTgwOWItMzJjZS0z
MTMxLTkwZDAtMjhjMDJkOTQ0OGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk
N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk
ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh
NzgzZGYyOWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgY2AEAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAB5pLQlNMK0VMa3QVuOof79EMVp+SswIpLKF5IHHvtHc34dh1rUAA
njjTDmQPBrYb0XgLJvwiu6DGM2dq3fNO2qxV9WyR3S+YpN2wO1nRC7fuj1KJSWrH
9vcdIcAVT8LnrDjrtamWKgy1Z4Oa54nDDsa0dSrq+LiE7ALtP5bk44hRkk+7ZSdM
zYCshMZ7LX6fEB7MWDoeDMaSoRBSzxxVTBLYOxn6qY8Qm91lc9vIN8JX0dzhCPiJ
33KkRB6hwrCRPm9vKE/B4RLw6NpY3cQpIa3K26slkol0pcybMDQXgaMSgahCAhve
Ss4zlPleByMDmz0BGJFKqTKgmfL0jRxG2w==
-----END CERTIFICATE-----
Generated at Mon Apr 28 11:26:03 2025 by rpki-client