Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/f5ad28ce-9ae5-3eb5-ae12-d0a71f8ac04e.roa
File: f5ad28ce-9ae5-3eb5-ae12-d0a71f8ac04e.roa (raw, json)
Hash identifier: u645ZF98bHYSH+2E4mUNcmnesG8xFcDCUMr+jqq6ZC4=
Subject key identifier: C5:6C:78:B1:91:DD:B8:83:1E:DC:77:F3:4B:25:B4:65:A5:75:F2:87
Certificate issuer: /CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
Certificate serial: 010D0C9F43285848345581AEF2E39C26D7C39D80
Authority key identifier: BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/f5ad28ce-9ae5-3eb5-ae12-d0a71f8ac04e.roa
Signing time: Sat 14 Dec 2024 14:00:52 +0000
ROA not before: Sat 14 Dec 2024 14:00:52 +0000
ROA not after: Fri 14 Mar 2025 13:00:52 +0000
asID: 46455
IP address blocks: 2604:c880::/32 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:34:55:81:ae:f2:e3:9c:26:d7:c3:9d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
Validity
Not Before: Dec 14 14:00:52 2024 GMT
Not After : Mar 14 13:00:52 2025 GMT
Subject: CN=ecf9d185-2ebe-472e-8fe1-8fea6bae7690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7f:4f:99:21:53:9b:13:65:32:19:f9:65:98:
bd:d0:e5:c2:75:fe:20:45:a2:97:15:4e:96:12:dd:
6f:46:b7:25:30:6b:f6:33:ae:e4:1e:5b:87:7d:6f:
35:38:be:76:9c:3f:a2:4f:66:10:38:71:2e:55:1c:
11:5c:22:bd:77:ae:4f:12:05:b4:85:9e:4f:9e:e0:
7e:f0:24:4a:6d:dd:fc:88:b1:27:0b:a9:47:6c:ba:
9e:51:03:ca:51:ed:d2:f5:97:21:6f:a5:45:80:d3:
7f:dd:a6:cf:0d:0f:07:98:9e:db:8c:ea:45:58:ea:
04:16:13:0e:8d:d5:e7:79:f2:26:57:4d:72:e5:a9:
80:9a:37:60:b0:f0:e8:f6:17:08:5e:89:50:fe:c9:
a9:49:46:0e:3d:46:80:34:9b:a4:54:41:ad:25:71:
55:97:13:76:34:ad:0a:1d:a3:b2:41:ec:b1:fe:df:
8e:21:fd:61:6b:32:a3:44:ad:ce:c1:f9:a6:92:f2:
4a:21:86:c6:40:e0:2a:4b:9c:e6:f0:3d:26:6d:e6:
16:f0:3c:82:82:b3:f8:b1:0f:6b:2a:48:61:ed:be:
68:77:6c:2c:2c:40:2a:61:b0:11:ee:60:29:a7:15:
e2:b6:08:12:13:dc:ea:3d:25:95:33:42:8a:66:2f:
e8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:6C:78:B1:91:DD:B8:83:1E:DC:77:F3:4B:25:B4:65:A5:75:F2:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/f5ad28ce-9ae5-3eb5-ae12-d0a71f8ac04e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl
X509v3 Authority Key Identifier:
keyid:BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:c880::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:6a:b1:23:27:31:2b:b3:8e:2b:f0:33:be:21:91:e6:13:ac:
3e:39:cc:43:c7:e3:de:f9:dd:98:77:41:a1:c0:7e:1e:e0:80:
2d:c6:d2:b1:75:72:d9:b5:d9:d7:d8:c3:ef:46:dc:13:bf:a8:
af:28:98:43:7d:80:7f:ea:be:85:9c:ad:f2:73:a5:f0:74:a1:
ae:5e:65:47:d3:7e:98:ff:1d:13:6e:3a:ca:b1:6f:5e:b5:24:
45:37:4e:15:29:1d:6b:ac:4f:1e:c6:2e:dc:eb:ef:b8:06:c3:
da:16:08:03:4a:02:44:22:91:09:aa:e3:98:64:72:cb:02:a2:
57:f1:fe:48:f4:ec:14:63:44:fb:d1:17:d1:90:7e:29:a4:c4:
03:20:04:5c:66:c0:fd:39:f4:68:9d:19:23:cf:60:74:2e:d6:
b8:49:f2:a8:2f:95:f5:3a:ad:0b:40:ee:c1:77:ca:38:19:06:
17:58:98:63:c1:61:87:9f:22:1b:a0:d0:0d:e1:39:67:2d:6c:
1d:f6:c3:c2:6f:d6:d3:70:86:f3:af:89:51:df:0b:9c:58:2b:
e7:df:49:b6:59:50:47:49:b5:d4:a2:29:7d:5f:82:5c:61:eb:
78:de:e5:08:4c:c2:12:02:7a:b2:45:2d:9c:d5:6f:54:f3:c8:
56:03:ec:66
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEg0VYGu8uOcJtfDnYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFjNTk5NTktZTg5OC00MmFkLTlkMGEtZjFiODdhN2Qw
MTE0MB4XDTI0MTIxNDE0MDA1MloXDTI1MDMxNDEzMDA1MlowLzEtMCsGA1UEAxMk
ZWNmOWQxODUtMmViZS00NzJlLThmZTEtOGZlYTZiYWU3NjkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwH9PmSFTmxNlMhn5ZZi90OXCdf4gRaKXFU6W
Et1vRrclMGv2M67kHluHfW81OL52nD+iT2YQOHEuVRwRXCK9d65PEgW0hZ5PnuB+
8CRKbd38iLEnC6lHbLqeUQPKUe3S9Zchb6VFgNN/3abPDQ8HmJ7bjOpFWOoEFhMO
jdXnefImV01y5amAmjdgsPDo9hcIXolQ/smpSUYOPUaANJukVEGtJXFVlxN2NK0K
HaOyQeyx/t+OIf1hazKjRK3OwfmmkvJKIYbGQOAqS5zm8D0mbeYW8DyCgrP4sQ9r
Kkhh7b5od2wsLEAqYbAR7mAppxXitggSE9zqPSWVM0KKZi/oFQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFMVseLGR3biDHtx380sltGWldfKHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYWM1
OTk1OS1lODk4LTQyYWQtOWQwYS1mMWI4N2E3ZDAxMTQvZjVhZDI4Y2UtOWFlNS0z
ZWI1LWFlMTItZDBhNzFmOGFjMDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWFjNTk5NTktZTg5OC00MmFkLTlk
MGEtZjFiODdhN2QwMTE0L2FhYzU5OTU5LWU4OTgtNDJhZC05ZDBhLWYxYjg3YTdk
MDExNC5jcmwwHwYDVR0jBBgwFoAUul4Dp25dfBcjybWEUNyNWEuvgL4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYWM1OTk1OS1lODk4LTQyYWQtOWQwYS1mMWI4
N2E3ZDAxMTQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTIgDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQC9arEjJzErs44r8DO+IZHmE6w+OcxDx+Pe+d2Yd0GhwH4e4IAtxtKx
dXLZtdnX2MPvRtwTv6ivKJhDfYB/6r6FnK3yc6XwdKGuXmVH036Y/x0TbjrKsW9e
tSRFN04VKR1rrE8exi7c6++4BsPaFggDSgJEIpEJquOYZHLLAqJX8f5I9OwUY0T7
0RfRkH4ppMQDIARcZsD9OfRonRkjz2B0Lta4SfKoL5X1Oq0LQO7Bd8o4GQYXWJhj
wWGHnyIboNAN4TlnLWwd9sPCb9bTcIbzr4lR3wucWCvn30m2WVBHSbXUoil9X4Jc
Yet43uUITMISAnqyRS2c1W9U88hWA+xm
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:54:45 2025 by rpki-client