Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c84b04e7-7225-3796-a6d7-411f3fbaa3d4.roa
File: c84b04e7-7225-3796-a6d7-411f3fbaa3d4.roa (raw, json)
Hash identifier: ct5d5lvAr5AjgChK5eFYYZUFiQ8Vv5H0BxPYfh4C16Q=
Subject key identifier: E8:24:AA:1C:CF:91:D3:48:EB:22:FF:8C:D5:3B:87:E9:9A:EB:DA:09
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848037A6EA1FA81311772FDB2E0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c84b04e7-7225-3796-a6d7-411f3fbaa3d4.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 11351
IP address blocks: 2600:6000:fa69::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:6e:a1:fa:81:31:17:72:fd:b2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=e080afcb-94f9-4d52-bec0-8e105ae7d65a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e9:53:27:5a:c3:32:3a:78:df:9f:f7:24:38:
9a:78:62:a0:2a:2c:83:7c:92:a3:bc:11:c3:b3:9e:
d1:2c:e4:8e:15:44:d7:89:4a:c1:d6:2c:96:e1:0b:
29:4f:d6:13:b7:2a:fb:0e:2e:f0:b7:65:83:07:0d:
d9:08:fa:51:da:c5:58:ea:51:f1:9f:85:78:ae:09:
05:7b:8b:53:ba:f0:00:03:58:d6:81:ba:6a:20:33:
a5:00:a2:bc:58:ff:4a:28:35:75:b9:a2:cf:3b:00:
d7:89:53:23:16:2d:06:2d:80:e4:82:19:89:3e:88:
20:55:0a:dd:37:90:c7:c8:ed:4b:9d:d1:1a:bf:2b:
30:54:62:8f:fb:4e:e5:34:7a:43:84:a6:ef:c1:e7:
3d:fc:e3:89:60:2f:18:94:2f:ca:95:92:53:c2:ca:
64:67:72:f0:cc:62:c0:54:88:32:d8:3e:77:2c:a7:
6b:67:91:16:9f:b0:00:f8:09:94:73:fb:c2:f8:4f:
a9:7c:b8:11:5a:12:f1:80:ac:b4:f4:35:37:25:0b:
39:d8:2d:e4:fe:06:cc:eb:67:b1:32:bb:b7:ed:8c:
e2:b4:bb:65:97:c2:a5:39:dd:cc:07:60:49:46:20:
fd:c2:13:a3:e6:8f:01:dd:8e:92:79:68:9e:37:ee:
b0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:24:AA:1C:CF:91:D3:48:EB:22:FF:8C:D5:3B:87:E9:9A:EB:DA:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c84b04e7-7225-3796-a6d7-411f3fbaa3d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:6000:fa69::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:73:dd:ec:4c:88:61:bf:28:39:64:6f:13:6b:21:26:f5:c6:
2d:ee:b9:3c:ee:83:10:77:cd:5b:a7:a1:b0:1e:19:2f:10:d4:
bb:f4:e8:05:dc:4f:53:54:85:63:53:e6:b8:cd:cd:86:bc:89:
77:dd:46:5d:a2:b7:b8:80:c7:32:62:c7:cc:5f:88:53:be:c4:
a2:15:1b:65:fe:ec:b2:5d:3c:a3:38:d5:67:f5:3e:cf:da:52:
41:25:7e:28:47:7d:fe:ff:a1:7f:78:01:94:d4:ac:e6:9d:30:
d1:5c:82:46:c8:93:0f:0f:bf:a3:03:57:73:f7:de:8f:09:6c:
15:1b:dc:7a:d8:7e:ac:f8:11:3d:70:41:de:dc:d1:12:3a:54:
a4:92:f6:9a:2f:4b:0a:b2:70:5f:5d:17:4d:e0:19:68:f4:33:
e2:c3:95:b8:67:25:7a:4f:f8:40:a5:11:52:4d:4a:4d:1a:fd:
f0:a0:58:5b:d7:29:d1:0c:7e:42:51:36:db:a3:f9:95:31:06:
28:f3:a4:2f:aa:13:df:c4:8b:6d:73:99:26:5c:ad:db:83:e5:
fa:a4:7e:21:b7:5d:a2:c8:9c:aa:fe:db:d5:53:74:fc:bd:d0:
95:36:7b:1c:c1:df:15:ae:3e:b2:23:2d:9f:9a:1c:75:ad:18:
4a:6a:0f:a6
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgDem6h+oExF3L9suAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MTEyNzAyMDAzOVoXDTI1MDIyNTAyMDAzOVowLzEtMCsGA1UEAxMk
ZTA4MGFmY2ItOTRmOS00ZDUyLWJlYzAtOGUxMDVhZTdkNjVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOlTJ1rDMjp435/3JDiaeGKgKiyDfJKjvBHD
s57RLOSOFUTXiUrB1iyW4QspT9YTtyr7Di7wt2WDBw3ZCPpR2sVY6lHxn4V4rgkF
e4tTuvAAA1jWgbpqIDOlAKK8WP9KKDV1uaLPOwDXiVMjFi0GLYDkghmJPoggVQrd
N5DHyO1LndEavyswVGKP+07lNHpDhKbvwec9/OOJYC8YlC/KlZJTwspkZ3LwzGLA
VIgy2D53LKdrZ5EWn7AA+AmUc/vC+E+pfLgRWhLxgKy09DU3JQs52C3k/gbM62ex
Mru37YzitLtll8KlOd3MB2BJRiD9whOj5o8B3Y6SeWieN+6w/wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOgkqhzPkdNI6yL/jNU7h+ma69oJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvYzg0YjA0ZTctNzIyNS0z
Nzk2LWE2ZDctNDExZjNmYmFhM2Q0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgBgAPpp
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAE9z3exMiGG/KDlkbxNrISb1xi3uuTzugxB3zVunobAeGS8Q1Lv0
6AXcT1NUhWNT5rjNzYa8iXfdRl2it7iAxzJix8xfiFO+xKIVG2X+7LJdPKM41Wf1
Ps/aUkElfihHff7/oX94AZTUrOadMNFcgkbIkw8Pv6MDV3P33o8JbBUb3HrYfqz4
ET1wQd7c0RI6VKSS9povSwqycF9dF03gGWj0M+LDlbhnJXpP+EClEVJNSk0a/fCg
WFvXKdEMfkJRNtuj+ZUxBijzpC+qE9/Ei21zmSZcrduD5fqkfiG3XaLInKr+29VT
dPy90JU2exzB3xWuPrIjLZ+aHHWtGEpqD6Y=
-----END CERTIFICATE-----
Generated at Fri Apr 25 23:58:12 2025 by rpki-client