Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/3bfcc6fd-b794-3071-99e2-b7d6b578276b.roa
File: 3bfcc6fd-b794-3071-99e2-b7d6b578276b.roa (raw, json)
Hash identifier: DWMm6tRrf7nWbNpEGlmiSAY09RFYrmyzfHZVNrH61iw=
Subject key identifier: 0E:59:27:C4:61:61:1A:AA:8A:49:47:11:58:68:9A:71:AE:9A:55:E2
Certificate issuer: /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial: 010D0C9F432858483B500DC9C250CCF64C8393C8
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/3bfcc6fd-b794-3071-99e2-b7d6b578276b.roa
Signing time: Tue 17 Dec 2024 02:00:38 +0000
ROA not before: Tue 17 Dec 2024 02:00:38 +0000
ROA not after: Mon 17 Mar 2025 01:00:38 +0000
asID: 15290
IP address blocks: 2001:4c8:1019::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3b:50:0d:c9:c2:50:cc:f6:4c:83:93:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
Validity
Not Before: Dec 17 02:00:38 2024 GMT
Not After : Mar 17 01:00:38 2025 GMT
Subject: CN=751a5587-86ef-43f2-b899-62db805ad9dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c8:77:9d:16:61:f1:4c:ff:57:48:d0:38:c4:
d1:84:be:18:23:c4:80:72:39:45:ab:ca:c2:72:d6:
4c:72:ff:a7:2c:d3:06:24:8a:02:e5:b2:d2:72:4d:
b0:4e:4a:54:fe:a8:1f:18:88:3c:23:40:52:06:22:
a6:a0:09:d0:21:f2:ec:13:16:57:32:20:24:7c:ba:
5c:b0:b1:23:83:3e:77:b5:52:c6:84:b6:0f:d1:1a:
06:d6:a1:6d:82:be:4c:f0:8e:9c:54:5c:f4:6c:10:
de:27:11:7e:f8:95:2d:98:35:c6:ab:24:77:5b:3d:
06:b0:76:0b:21:48:8d:a0:a2:c8:a4:46:0d:07:94:
ea:de:d2:35:df:c8:b0:cd:13:c2:8e:13:e3:2a:e1:
93:c9:f7:86:45:79:88:fe:aa:93:3e:9e:ce:35:ac:
dc:7c:4f:53:ff:ea:1a:74:68:5b:70:b8:95:d1:34:
12:d7:b2:de:7f:54:03:46:84:e7:ca:b3:17:76:aa:
b1:1f:49:77:0b:93:47:4b:d3:13:41:53:e3:78:bd:
43:31:0e:49:56:83:98:65:e3:bc:27:e5:44:48:ce:
2f:be:0b:8e:af:06:f1:49:f1:db:cb:8f:06:f6:a0:
4e:95:c0:db:74:8d:b8:c0:21:75:48:f9:dd:1e:0b:
3d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:59:27:C4:61:61:1A:AA:8A:49:47:11:58:68:9A:71:AE:9A:55:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/3bfcc6fd-b794-3071-99e2-b7d6b578276b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
X509v3 Authority Key Identifier:
keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4c8:1019::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:f2:9d:b8:5a:a4:d3:39:5b:19:a9:62:56:ed:b3:76:37:37:
53:86:d8:78:1e:d1:99:bf:a2:71:a2:29:fc:30:a5:a6:d5:0a:
73:16:5a:76:92:b1:5b:6d:99:72:b9:ba:64:b8:f2:ea:d7:96:
54:0a:f8:40:82:ca:20:9f:d0:8a:06:0f:d1:42:10:fe:99:5d:
de:d8:76:6a:cf:8e:d3:9e:9e:0c:12:86:07:21:51:55:42:38:
ee:91:24:6e:fc:87:09:3c:74:d0:a4:d1:36:0e:3c:a1:c7:3d:
ac:d2:d6:27:73:57:29:ac:fe:6a:7e:0d:ab:c3:b0:5d:43:fa:
05:98:49:57:cd:69:2e:24:da:cf:a1:c9:d2:1d:d0:33:7d:31:
7f:33:42:c9:9a:2c:c4:5d:4b:22:63:ac:ad:62:fb:15:0d:e7:
36:00:35:2f:b7:7b:8b:2d:f1:75:b6:63:c0:4a:ac:1e:02:41:
e8:7e:6d:a6:1a:bb:27:ff:6f:18:1f:75:86:99:f4:d3:f0:81:
cc:b6:c8:8c:10:dd:cb:a6:c4:f2:03:9a:7a:d2:12:7e:2b:f4:
58:92:24:79:ac:7e:b5:cc:e7:56:17:da:aa:ac:4c:8a:d5:96:
6e:af:82:63:fd:93:ae:3d:69:83:50:2a:02:4a:6f:de:57:18:
1b:8e:8d:8f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEg7UA3JwlDM9kyDk8gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2MzYWQ0Y2QtMDg5My00MmZjLWE3NDMtZTM2MDU4OTgz
MDY5MB4XDTI0MTIxNzAyMDAzOFoXDTI1MDMxNzAxMDAzOFowLzEtMCsGA1UEAxMk
NzUxYTU1ODctODZlZi00M2YyLWI4OTktNjJkYjgwNWFkOWRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAych3nRZh8Uz/V0jQOMTRhL4YI8SAcjlFq8rC
ctZMcv+nLNMGJIoC5bLSck2wTkpU/qgfGIg8I0BSBiKmoAnQIfLsExZXMiAkfLpc
sLEjgz53tVLGhLYP0RoG1qFtgr5M8I6cVFz0bBDeJxF++JUtmDXGqyR3Wz0GsHYL
IUiNoKLIpEYNB5Tq3tI138iwzRPCjhPjKuGTyfeGRXmI/qqTPp7ONazcfE9T/+oa
dGhbcLiV0TQS17Lef1QDRoTnyrMXdqqxH0l3C5NHS9MTQVPjeL1DMQ5JVoOYZeO8
J+VESM4vvguOrwbxSfHby48G9qBOlcDbdI24wCF1SPndHgs9CwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFA5ZJ8RhYRqqiklHEVhomnGumlXiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNh
ZDRjZC0wODkzLTQyZmMtYTc0My1lMzYwNTg5ODMwNjkvM2JmY2M2ZmQtYjc5NC0z
MDcxLTk5ZTItYjdkNmI1NzgyNzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2MzYWQ0Y2QtMDg5My00MmZjLWE3
NDMtZTM2MDU4OTgzMDY5L2NjM2FkNGNkLTA4OTMtNDJmYy1hNzQzLWUzNjA1ODk4
MzA2OS5jcmwwHwYDVR0jBBgwFoAU0BkzYCA5uLEoc26e1umhhrVK+64wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNhZDRjZC0wODkzLTQyZmMtYTc0My1lMzYw
NTg5ODMwNjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEyBAZ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGLynbhapNM5WxmpYlbts3Y3N1OG2Hge0Zm/onGiKfwwpabVCnMW
WnaSsVttmXK5umS48urXllQK+ECCyiCf0IoGD9FCEP6ZXd7YdmrPjtOengwShgch
UVVCOO6RJG78hwk8dNCk0TYOPKHHPazS1idzVyms/mp+DavDsF1D+gWYSVfNaS4k
2s+hydId0DN9MX8zQsmaLMRdSyJjrK1i+xUN5zYANS+3e4st8XW2Y8BKrB4CQeh+
baYauyf/bxgfdYaZ9NPwgcy2yIwQ3cumxPIDmnrSEn4r9FiSJHmsfrXM51YX2qqs
TIrVlm6vgmP9k649aYNQKgJKb95XGBuOjY8=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:45:04 2025 by rpki-client