Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/dc2c3007-e170-37d9-aeb8-9b8e34357a13.roa
File: dc2c3007-e170-37d9-aeb8-9b8e34357a13.roa (raw, json)
Hash identifier: ZS1jIJtIxQZNcJ1+EVjf0BeIYUykIJZ7XNkKfSWYiAs=
Subject key identifier: B3:FB:C1:35:A8:85:5C:8F:47:5A:7D:74:16:31:6B:B7:79:15:37:98
Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial: 010D0C9F432858480EA51830F615510A7E78C5D0
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/dc2c3007-e170-37d9-aeb8-9b8e34357a13.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 20253
IP address blocks: 2606:bc40:19::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:18:30:f6:15:51:0a:7e:78:c5:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=64417bdd-7c0d-4d3a-9cf5-40c18f79074f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8d:55:c9:43:e5:7b:52:38:59:b2:62:7f:83:
ef:84:12:96:a8:d7:09:64:36:17:15:c8:45:06:ea:
c4:70:89:49:2f:0e:98:bd:f7:a1:50:16:a4:5d:d2:
b7:67:d3:4d:15:16:cb:74:ba:c6:4c:da:19:cb:be:
20:e3:51:2e:ed:70:28:df:ca:91:5e:b1:d2:79:50:
e2:74:76:ab:76:d4:f4:4f:11:9d:81:bb:28:35:7e:
d8:ad:a5:48:af:76:e5:74:96:db:fe:b2:fe:99:99:
48:bc:46:5a:a3:76:15:2c:cd:aa:7b:3a:4d:01:d1:
a3:6f:f8:96:f7:19:92:e2:fd:2c:f1:8a:02:5e:2b:
fb:82:20:54:7d:f0:58:70:e2:a0:61:78:fc:56:f0:
f6:1e:ac:95:97:ab:ff:3f:52:2c:1a:01:f2:c7:a1:
f7:fb:f7:ef:ab:c3:f4:21:99:a0:02:9c:ea:34:52:
59:de:6b:97:77:e4:18:42:0c:20:33:06:27:ee:1e:
b2:23:f4:44:9c:c4:2b:41:7d:a4:e5:8e:86:60:7a:
87:46:f8:4b:7d:bd:1e:8a:38:f3:d0:e2:55:dc:b9:
29:02:71:97:29:3f:cd:87:0f:26:dc:80:63:0d:09:
20:bc:ed:a3:c6:2d:23:c8:c8:72:1d:a3:7e:f1:de:
87:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:FB:C1:35:A8:85:5C:8F:47:5A:7D:74:16:31:6B:B7:79:15:37:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/dc2c3007-e170-37d9-aeb8-9b8e34357a13.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
X509v3 Authority Key Identifier:
keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:bc40:19::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:2c:e6:2f:40:e6:84:e8:7b:aa:8a:23:e2:99:d9:ad:d1:f6:
5b:a8:3a:b2:96:6e:1a:54:b2:a2:38:2d:c8:b9:52:6a:b0:81:
90:c5:9e:ec:25:3f:49:c9:79:f1:c7:15:d2:f3:ae:87:f7:91:
0d:9a:cd:4c:ce:bb:f0:f4:98:84:ae:39:ad:80:25:9c:8b:27:
12:60:5a:1c:00:95:64:e1:a5:26:ef:cd:cd:56:e1:b9:5b:88:
a4:1e:a5:31:b2:5f:06:c0:66:bf:6e:2e:05:e1:7f:ce:73:23:
65:88:51:17:e6:0c:3b:c2:5d:de:f2:13:68:57:cd:e3:c1:71:
79:d0:71:eb:c3:c6:52:23:13:67:d9:ef:a7:6a:8f:06:92:58:
9d:06:af:e9:39:91:20:ee:1f:5e:d3:58:55:71:13:4e:38:1f:
c0:c8:c3:29:ca:8f:66:43:d5:9a:c1:9f:9f:08:f8:ed:b3:eb:
cb:01:b4:9d:1b:02:02:78:e7:1a:dd:86:28:01:4b:bd:7e:1f:
00:25:3c:79:4e:4b:11:aa:45:62:4c:5f:f6:e6:a7:83:d1:98:
3f:41:59:f1:72:5e:7e:ba:9d:7d:28:33:e6:03:45:04:58:18:
98:f3:89:3d:2f:47:9f:a4:81:66:ce:0d:1b:12:7d:64:d2:15:
e6:25:01:6e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgOpRgw9hVRCn54xdAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz
YTA3MB4XDTI0MTIwMTAyMDAzOVoXDTI1MDMwMTAyMDAzOVowLzEtMCsGA1UEAxMk
NjQ0MTdiZGQtN2MwZC00ZDNhLTljZjUtNDBjMThmNzkwNzRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiI1VyUPle1I4WbJif4PvhBKWqNcJZDYXFchF
BurEcIlJLw6YvfehUBakXdK3Z9NNFRbLdLrGTNoZy74g41Eu7XAo38qRXrHSeVDi
dHardtT0TxGdgbsoNX7YraVIr3bldJbb/rL+mZlIvEZao3YVLM2qezpNAdGjb/iW
9xmS4v0s8YoCXiv7giBUffBYcOKgYXj8VvD2HqyVl6v/P1IsGgHyx6H3+/fvq8P0
IZmgApzqNFJZ3muXd+QYQgwgMwYn7h6yI/REnMQrQX2k5Y6GYHqHRvhLfb0eijjz
0OJV3LkpAnGXKT/Nhw8m3IBjDQkgvO2jxi0jyMhyHaN+8d6HFwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLP7wTWohVyPR1p9dBYxa7d5FTeYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy
Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvZGMyYzMwMDctZTE3MC0z
N2Q5LWFlYjgtOWI4ZTM0MzU3YTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi
ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm
M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4
MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QAAZ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJIs5i9A5oToe6qKI+KZ2a3R9luoOrKWbhpUsqI4Lci5UmqwgZDF
nuwlP0nJefHHFdLzrof3kQ2azUzOu/D0mISuOa2AJZyLJxJgWhwAlWThpSbvzc1W
4blbiKQepTGyXwbAZr9uLgXhf85zI2WIURfmDDvCXd7yE2hXzePBcXnQcevDxlIj
E2fZ76dqjwaSWJ0Gr+k5kSDuH17TWFVxE044H8DIwynKj2ZD1ZrBn58I+O2z68sB
tJ0bAgJ45xrdhigBS71+HwAlPHlOSxGqRWJMX/bmp4PRmD9BWfFyXn66nX0oM+YD
RQRYGJjziT0vR5+kgWbODRsSfWTSFeYlAW4=
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:50:57 2025 by rpki-client