Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/de3bf3d7-b3eb-32d0-a539-c3cd1d677f0a.roa
File: de3bf3d7-b3eb-32d0-a539-c3cd1d677f0a.roa (raw, json)
Hash identifier: mivNjqBXjIGPSIpP8snxz+mcJZAwc+SNTAyEpyKLMW8=
Subject key identifier: D5:4D:FD:16:D8:50:DF:2D:E1:13:6D:64:75:A9:72:EB:DC:1F:39:2A
Certificate issuer: /CN=517b063f-7f88-4d7a-a5ad-1e487692f063
Certificate serial: 010D0C9F432858486C2B1FB0EE9AE6F637ECE340
Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/de3bf3d7-b3eb-32d0-a539-c3cd1d677f0a.roa
Signing time: Fri 03 Jan 2025 14:00:51 +0000
ROA not before: Fri 03 Jan 2025 14:00:51 +0000
ROA not after: Thu 03 Apr 2025 13:00:51 +0000
asID: 400618
IP address blocks: 2607:8140::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:2b:1f:b0:ee:9a:e6:f6:37:ec:e3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063
Validity
Not Before: Jan 3 14:00:51 2025 GMT
Not After : Apr 3 13:00:51 2025 GMT
Subject: CN=e0b8d0dc-2732-4c2b-bf45-b2b88ae05851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:44:4b:52:31:40:b3:52:a8:16:3c:ab:3f:85:
1b:0c:a0:9b:83:47:bc:79:5d:ae:fc:f6:38:dd:a0:
bc:95:8d:3b:f6:46:68:4c:7b:7f:69:80:d8:48:4f:
79:8e:5d:47:80:7d:72:df:75:d5:79:c7:5c:ae:7a:
81:34:da:80:fc:89:20:ff:f3:f5:9b:7d:fe:b6:b7:
f7:46:fd:93:a4:5d:1a:9f:92:b6:a4:35:b8:73:fa:
12:88:70:d9:ef:d0:98:ff:06:d8:71:35:62:3d:ca:
df:81:cb:f6:89:1b:20:83:e9:11:0b:8b:7d:9f:19:
4c:6f:fd:eb:3f:64:74:6a:b6:ce:d2:54:fa:20:4a:
aa:f6:33:c5:2a:8d:c7:9e:24:7a:47:57:f7:1e:bc:
da:3c:23:05:34:e6:46:12:e3:24:42:f8:c6:6a:00:
0f:8e:2d:f8:06:c8:db:1d:6d:3d:6d:c8:c2:45:26:
e3:07:a9:c8:1e:fa:a3:be:1a:ac:d3:5b:68:da:c5:
5e:35:86:a3:c8:f7:e9:9a:0f:ce:09:c5:cb:b0:ee:
e8:83:3b:47:32:77:9e:49:bd:59:a2:0c:58:fd:b8:
2e:8f:8a:95:42:16:66:c4:73:d5:79:a4:8e:63:ef:
5d:a6:0b:50:73:16:7f:2d:7f:16:56:fc:e7:76:15:
b0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:4D:FD:16:D8:50:DF:2D:E1:13:6D:64:75:A9:72:EB:DC:1F:39:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/de3bf3d7-b3eb-32d0-a539-c3cd1d677f0a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl
X509v3 Authority Key Identifier:
keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8140::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:d1:e0:ac:70:6f:45:bf:23:71:20:b0:05:47:49:ab:0a:e9:
f0:ea:1b:1b:36:4b:47:98:07:d8:d0:96:f7:9d:1c:57:65:95:
21:4d:b2:d1:2a:89:2d:10:3c:7d:8f:a5:c8:8b:6f:4d:c2:04:
68:84:e6:62:17:cd:a9:81:e9:4c:4d:f8:f1:e4:28:49:a6:bc:
ef:1c:62:24:c2:24:c5:8b:f7:3c:14:8b:9b:46:6a:77:d2:d1:
ab:bc:a5:45:0c:bf:d7:9e:28:0c:80:f6:2e:4b:35:d6:46:74:
34:5b:02:b1:58:ff:20:1c:e6:13:30:3b:56:54:9d:b7:ec:59:
74:c9:ca:b8:6d:76:e7:2a:76:4d:02:2a:f3:15:17:ec:3c:b1:
83:0a:f5:30:f9:64:47:bd:3b:a3:42:60:0c:54:9b:c8:41:6e:
c0:d3:60:0e:b0:95:b8:2c:a8:6d:4a:19:79:bf:f9:8f:4a:89:
b3:3b:30:f8:51:0b:32:6d:7e:33:0c:87:85:63:48:fb:d2:37:
bf:43:41:55:b3:d8:ef:85:28:ce:1e:4c:27:bb:74:ce:38:33:
34:3b:a6:85:54:72:d6:34:91:a9:2c:73:d5:e5:e6:13:c2:7f:
83:2b:ec:57:31:b5:59:36:52:77:f9:50:3a:81:5d:80:9e:3c:
c5:b4:5c:8e
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEhsKx+w7prm9jfs40AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE3YjA2M2YtN2Y4OC00ZDdhLWE1YWQtMWU0ODc2OTJm
MDYzMB4XDTI1MDEwMzE0MDA1MVoXDTI1MDQwMzEzMDA1MVowLzEtMCsGA1UEAxMk
ZTBiOGQwZGMtMjczMi00YzJiLWJmNDUtYjJiODhhZTA1ODUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0RLUjFAs1KoFjyrP4UbDKCbg0e8eV2u/PY4
3aC8lY079kZoTHt/aYDYSE95jl1HgH1y33XVecdcrnqBNNqA/Ikg//P1m33+trf3
Rv2TpF0an5K2pDW4c/oSiHDZ79CY/wbYcTViPcrfgcv2iRsgg+kRC4t9nxlMb/3r
P2R0arbO0lT6IEqq9jPFKo3HniR6R1f3HrzaPCMFNOZGEuMkQvjGagAPji34Bsjb
HW09bcjCRSbjB6nIHvqjvhqs01to2sVeNYajyPfpmg/OCcXLsO7ogztHMneeSb1Z
ogxY/bguj4qVQhZmxHPVeaSOY+9dpgtQcxZ/LX8WVvzndhWwEwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFNVN/RbYUN8t4RNtZHWpcuvcHzkqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81MTdi
MDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4NzY5MmYwNjMvZGUzYmYzZDctYjNlYi0z
MmQwLWE1MzktYzNjZDFkNjc3ZjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTE3YjA2M2YtN2Y4OC00ZDdhLWE1
YWQtMWU0ODc2OTJmMDYzLzUxN2IwNjNmLTdmODgtNGQ3YS1hNWFkLTFlNDg3Njky
ZjA2My5jcmwwHwYDVR0jBBgwFoAUBbMoGYYiMAW+fQvz/IMiJ547jVwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi81MTdiMDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4
NzY5MmYwNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgeBQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBv0eCscG9FvyNxILAFR0mrCunw6hsbNktHmAfY0Jb3nRxXZZUhTbLR
KoktEDx9j6XIi29NwgRohOZiF82pgelMTfjx5ChJprzvHGIkwiTFi/c8FIubRmp3
0tGrvKVFDL/XnigMgPYuSzXWRnQ0WwKxWP8gHOYTMDtWVJ237Fl0ycq4bXbnKnZN
AirzFRfsPLGDCvUw+WRHvTujQmAMVJvIQW7A02AOsJW4LKhtShl5v/mPSomzOzD4
UQsybX4zDIeFY0j70je/Q0FVs9jvhSjOHkwnu3TOODM0O6aFVHLWNJGpLHPV5eYT
wn+DK+xXMbVZNlJ3+VA6gV2AnjzFtFyO
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:36:50 2025 by rpki-client