Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/2aa7585f-d51c-30da-a0fb-36d9463654ab.roa
File: 2aa7585f-d51c-30da-a0fb-36d9463654ab.roa (raw, json)
Hash identifier: og1oWPR7F8HW/kN0Aor2lyYYi746e4xNK2bddFIBRmM=
Subject key identifier: 48:B6:52:68:2F:C0:D6:31:1C:0C:64:77:4A:5A:1B:71:CF:BD:B0:8F
Certificate issuer: /CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99
Certificate serial: 010D0C9F432858482A8FE16683132CC17A1E5680
Authority key identifier: B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/2aa7585f-d51c-30da-a0fb-36d9463654ab.roa
Signing time: Wed 11 Dec 2024 02:00:38 +0000
ROA not before: Wed 11 Dec 2024 02:00:38 +0000
ROA not after: Tue 11 Mar 2025 01:00:38 +0000
asID: 0
IP address blocks: 2001:504:3d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:8f:e1:66:83:13:2c:c1:7a:1e:56:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99
Validity
Not Before: Dec 11 02:00:38 2024 GMT
Not After : Mar 11 01:00:38 2025 GMT
Subject: CN=797c9a8a-6754-48fb-9f99-b689550315ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:03:f2:90:f5:ff:5d:3f:35:71:7e:a3:0c:c8:
a4:f7:be:1c:f6:49:bc:1a:2b:d6:02:51:03:51:56:
63:04:f2:38:3d:46:b6:f4:12:ca:b2:52:46:86:14:
7f:8e:05:aa:54:f0:a8:f4:32:87:d9:40:bb:eb:5a:
09:d6:8d:00:5f:87:c8:0f:c3:d2:db:18:6e:74:de:
76:30:13:f9:ca:b7:11:dd:8a:1f:ca:9b:1a:27:97:
7e:27:98:18:17:e1:2f:75:06:4c:fb:20:a0:62:47:
05:24:be:f1:07:12:8b:b3:7e:2c:2e:e3:76:86:00:
b1:cb:29:30:5b:72:2c:f8:ec:6c:71:96:fb:1d:52:
f5:b3:ce:e9:eb:e9:28:25:13:29:32:c7:5f:5b:6a:
6a:ee:9d:f8:d3:e8:b9:fb:98:c0:d2:b6:ee:cf:1d:
55:07:10:37:86:60:f0:20:47:13:2f:dd:94:8c:a8:
e0:6f:d3:0e:9a:55:07:c5:a6:71:76:ed:d7:56:5e:
14:a2:8b:5e:fb:88:91:61:7b:61:b4:98:a3:42:d9:
f9:3b:2e:d1:f1:3a:aa:51:73:12:15:96:0f:fa:f5:
44:96:a8:e8:a3:bc:ca:b0:6f:02:a2:01:6e:cd:41:
cc:fa:75:a5:a3:4e:86:7a:69:08:34:df:d4:f0:f9:
a8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B6:52:68:2F:C0:D6:31:1C:0C:64:77:4A:5A:1B:71:CF:BD:B0:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/2aa7585f-d51c-30da-a0fb-36d9463654ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl
X509v3 Authority Key Identifier:
keyid:B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:504:3d::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:60:9c:35:e7:de:4d:3d:0c:d2:ed:73:4e:21:19:19:6c:b1:
5d:b0:10:90:a0:58:17:12:8c:59:e3:8d:0a:0e:96:08:c6:ed:
48:3e:37:06:74:c1:67:8c:30:a2:5b:a2:74:18:b5:38:82:46:
32:ba:7f:5b:72:28:e7:40:99:83:b0:e5:71:c6:90:17:23:d9:
6e:8d:13:a3:87:15:1d:12:81:50:74:8a:45:02:09:dc:86:4d:
1c:e4:dd:9a:be:e3:c0:58:55:5a:96:25:e4:c0:06:56:7a:33:
9d:f0:1b:bd:b3:77:3f:83:27:ac:30:23:94:9e:9c:10:88:de:
94:73:a5:ea:88:f6:53:d4:48:4f:fd:ee:5a:65:ef:a9:86:57:
bf:47:0e:6a:d4:21:9d:82:d2:77:66:08:f4:87:48:0c:cd:e6:
56:91:4c:59:93:45:59:80:86:a6:4f:f0:7a:d8:42:cb:96:68:
ad:00:61:80:67:d3:85:67:5b:61:a8:d4:37:52:ab:4f:3f:96:
dc:52:56:f0:8d:14:67:50:99:c4:04:a1:bc:9f:c1:41:1c:b7:
6a:8d:98:ea:0b:61:1a:e8:76:76:ee:fe:9b:b8:d5:d7:10:df:
a4:c6:13:c1:39:60:76:7b:d8:76:7e:2e:7b:6b:47:39:e2:72:
ca:00:d3:76
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgqj+FmgxMswXoeVoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWEyZTM0NGYtMDFhMC00NjFkLTljMGEtMjFkZGJjNzBh
YTk5MB4XDTI0MTIxMTAyMDAzOFoXDTI1MDMxMTAxMDAzOFowLzEtMCsGA1UEAxMk
Nzk3YzlhOGEtNjc1NC00OGZiLTlmOTktYjY4OTU1MDMxNWVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAPykPX/XT81cX6jDMik974c9km8GivWAlED
UVZjBPI4PUa29BLKslJGhhR/jgWqVPCo9DKH2UC761oJ1o0AX4fID8PS2xhudN52
MBP5yrcR3YofypsaJ5d+J5gYF+EvdQZM+yCgYkcFJL7xBxKLs34sLuN2hgCxyykw
W3Is+OxscZb7HVL1s87p6+koJRMpMsdfW2pq7p340+i5+5jA0rbuzx1VBxA3hmDw
IEcTL92UjKjgb9MOmlUHxaZxdu3XVl4Uoote+4iRYXthtJijQtn5Oy7R8TqqUXMS
FZYP+vVElqjoo7zKsG8CogFuzUHM+nWlo06GemkINN/U8Pmo6wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEi2UmgvwNYxHAxkd0paG3HPvbCPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJl
MzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRkYmM3MGFhOTkvMmFhNzU4NWYtZDUxYy0z
MGRhLWEwZmItMzZkOTQ2MzY1NGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWEyZTM0NGYtMDFhMC00NjFkLTlj
MGEtMjFkZGJjNzBhYTk5L2FhMmUzNDRmLTAxYTAtNDYxZC05YzBhLTIxZGRiYzcw
YWE5OS5jcmwwHwYDVR0jBBgwFoAUtp5aPIgevwm3Jc8FjMDBLqnEn8owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJlMzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRk
YmM3MGFhOTkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBAA9
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAC9gnDXn3k09DNLtc04hGRlssV2wEJCgWBcSjFnjjQoOlgjG7Ug+
NwZ0wWeMMKJbonQYtTiCRjK6f1tyKOdAmYOw5XHGkBcj2W6NE6OHFR0SgVB0ikUC
CdyGTRzk3Zq+48BYVVqWJeTABlZ6M53wG72zdz+DJ6wwI5SenBCI3pRzpeqI9lPU
SE/97lpl76mGV79HDmrUIZ2C0ndmCPSHSAzN5laRTFmTRVmAhqZP8HrYQsuWaK0A
YYBn04VnW2Go1DdSq08/ltxSVvCNFGdQmcQEobyfwUEct2qNmOoLYRrodnbu/pu4
1dcQ36TGE8E5YHZ72HZ+LntrRznicsoA03Y=
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:30:03 2025 by rpki-client