Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/3faa343e-a472-3f39-808e-bb7ed55b1bb7.roa
File: 3faa343e-a472-3f39-808e-bb7ed55b1bb7.roa (raw, json)
Hash identifier: j0LdN8D2+JsRfcG2U2KRxr/HA6Bgoq+Ks508NGTnGnQ=
Subject key identifier: CF:DF:E9:AE:F6:12:C2:EE:E4:CA:C5:0D:8C:1D:24:C6:EC:96:82:E9
Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial: 010D0C9F432858487FB5E52F7338AB50731CF900
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/3faa343e-a472-3f39-808e-bb7ed55b1bb7.roa
Signing time: Fri 10 Jan 2025 14:00:51 +0000
ROA not before: Fri 10 Jan 2025 14:00:51 +0000
ROA not after: Thu 10 Apr 2025 13:00:51 +0000
asID: 20253
IP address blocks: 2606:bc40:f002::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7f:b5:e5:2f:73:38:ab:50:73:1c:f9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Validity
Not Before: Jan 10 14:00:51 2025 GMT
Not After : Apr 10 13:00:51 2025 GMT
Subject: CN=ec2ee359-4f3c-4746-9141-579f26591951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:27:9d:d6:91:91:f9:e8:4a:eb:6a:9b:60:ea:
3e:fb:6d:29:ca:ff:0a:09:88:a9:72:c4:e3:f5:14:
c7:54:dd:8f:1b:48:9b:ab:8c:d2:38:77:ec:b8:3d:
f8:c5:cc:bc:b5:1a:09:7e:7d:03:99:48:c8:39:4b:
65:d4:a1:ce:72:48:39:ab:32:89:0f:b0:04:5d:65:
f6:5c:f0:de:8c:e7:20:4c:66:3c:7c:86:45:9e:cc:
18:ac:25:1e:ef:81:af:04:6a:13:3c:6c:e2:b0:2c:
0c:74:33:98:ba:cd:11:a3:f1:c9:96:ba:8b:88:03:
1a:df:0f:09:26:41:87:77:92:95:4d:45:74:87:22:
0b:71:fc:a2:49:b7:27:16:51:04:24:78:10:67:3c:
30:dd:fb:05:93:53:ac:3a:3d:fe:d9:8f:8e:d0:7c:
5a:11:19:98:53:5f:97:a4:d9:d4:65:a3:dc:b1:99:
18:68:f9:37:c3:f7:17:a5:3e:1e:42:f2:36:76:42:
a5:d9:d2:2b:19:db:08:3f:d7:a6:7d:23:7c:f8:f2:
a5:ac:42:2b:67:5e:b4:5f:d7:b7:44:43:36:ed:f0:
d0:99:e6:14:84:10:95:9c:f1:ab:c9:bd:05:11:9d:
be:1d:79:fc:06:6d:35:62:77:8c:c6:b1:3e:65:33:
ba:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:DF:E9:AE:F6:12:C2:EE:E4:CA:C5:0D:8C:1D:24:C6:EC:96:82:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/3faa343e-a472-3f39-808e-bb7ed55b1bb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
X509v3 Authority Key Identifier:
keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:bc40:f002::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:26:72:1c:bf:57:42:61:47:22:c9:0e:5c:61:0a:da:58:b6:
20:ab:13:bb:f4:65:8a:f2:79:ee:ca:b5:a6:b6:c8:30:22:24:
59:22:de:05:27:63:62:0c:69:fa:98:9c:d1:eb:93:ca:d9:5a:
e7:b4:a1:4c:a7:a5:4e:76:a7:7e:bd:ff:ab:ef:77:99:b2:a3:
84:6b:96:be:1f:5a:fb:2f:f9:56:3b:90:4d:a2:5f:2f:68:76:
13:08:17:5f:f4:fa:24:f7:55:39:19:f5:37:91:39:07:40:67:
0b:18:c4:61:3b:2d:7f:9b:be:84:2c:8d:71:aa:ff:6e:5f:e9:
6a:2e:2f:dc:fb:8f:92:3c:48:e8:63:f0:22:fe:12:b9:88:b6:
ec:60:2c:e7:ca:0d:50:8d:4f:b1:7f:a8:92:43:6f:94:25:5d:
b3:10:ee:6e:73:69:c2:d8:0c:71:ab:1f:df:4b:e4:32:8f:b3:
13:9a:51:23:91:a4:a4:a2:f2:f1:4b:a9:66:d6:30:f1:86:8b:
27:1b:1e:61:9a:7c:82:92:06:8f:61:1c:b0:d2:ff:d8:d6:ab:
33:59:c6:4f:d4:61:89:6a:a9:0a:39:2d:af:3d:57:5f:88:27:
3d:d8:b7:ff:ac:c2:f7:ba:11:b4:b6:cc:10:39:f2:a2:f2:34:
41:36:4b:7a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEh/teUvczirUHMc+QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz
YTA3MB4XDTI1MDExMDE0MDA1MVoXDTI1MDQxMDEzMDA1MVowLzEtMCsGA1UEAxMk
ZWMyZWUzNTktNGYzYy00NzQ2LTkxNDEtNTc5ZjI2NTkxOTUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSed1pGR+ehK62qbYOo++20pyv8KCYipcsTj
9RTHVN2PG0ibq4zSOHfsuD34xcy8tRoJfn0DmUjIOUtl1KHOckg5qzKJD7AEXWX2
XPDejOcgTGY8fIZFnswYrCUe74GvBGoTPGzisCwMdDOYus0Ro/HJlrqLiAMa3w8J
JkGHd5KVTUV0hyILcfyiSbcnFlEEJHgQZzww3fsFk1OsOj3+2Y+O0HxaERmYU1+X
pNnUZaPcsZkYaPk3w/cXpT4eQvI2dkKl2dIrGdsIP9emfSN8+PKlrEIrZ160X9e3
REM27fDQmeYUhBCVnPGryb0FEZ2+HXn8Bm01YneMxrE+ZTO69QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFM/f6a72EsLu5MrFDYwdJMbsloLpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy
Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvM2ZhYTM0M2UtYTQ3Mi0z
ZjM5LTgwOGUtYmI3ZWQ1NWIxYmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi
ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm
M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4
MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QPAC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAF4mchy/V0JhRyLJDlxhCtpYtiCrE7v0ZYryee7Ktaa2yDAiJFki
3gUnY2IMafqYnNHrk8rZWue0oUynpU52p369/6vvd5myo4Rrlr4fWvsv+VY7kE2i
Xy9odhMIF1/0+iT3VTkZ9TeROQdAZwsYxGE7LX+bvoQsjXGq/25f6WouL9z7j5I8
SOhj8CL+ErmItuxgLOfKDVCNT7F/qJJDb5QlXbMQ7m5zacLYDHGrH99L5DKPsxOa
USORpKSi8vFLqWbWMPGGiycbHmGafIKSBo9hHLDS/9jWqzNZxk/UYYlqqQo5La89
V1+IJz3Yt/+swve6EbS2zBA58qLyNEE2S3o=
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:23:01 2025 by rpki-client