Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d9d5ced5-8d7a-384e-a047-9db809fa8081.roa
File: d9d5ced5-8d7a-384e-a047-9db809fa8081.roa (raw, json)
Hash identifier: x4W6X0GdWcnVM8Ks/FQaQT/JBrOSdSuQCGaM1yKNVuA=
Subject key identifier: 85:0D:6C:31:40:C9:2E:D3:2B:E7:7F:E6:D4:8D:BD:BB:0E:27:6B:82
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285847DF2F4883A2C58A8A7F591440
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d9d5ced5-8d7a-384e-a047-9db809fa8081.roa
Signing time: Thu 14 Nov 2024 02:00:27 +0000
ROA not before: Thu 14 Nov 2024 02:00:27 +0000
ROA not after: Wed 12 Feb 2025 02:00:27 +0000
asID: 852
IP address blocks: 2001:56a:800b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:df:2f:48:83:a2:c5:8a:8a:7f:59:14:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Nov 14 02:00:27 2024 GMT
Not After : Feb 12 02:00:27 2025 GMT
Subject: CN=f0d59548-643c-47c0-b5bb-e0054c459bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1d:5a:a4:db:02:18:0d:36:e2:19:bb:ae:81:
d7:69:93:89:29:50:16:a3:53:4a:f0:4e:a6:25:01:
5d:e0:33:37:9b:2a:e5:9e:bd:63:90:46:af:2c:be:
0f:2c:50:70:cf:92:74:95:5c:fa:12:9c:c5:8b:58:
82:cc:73:a5:b4:23:fb:38:f7:18:4c:cd:3c:1c:67:
c4:55:61:8d:2d:15:bc:46:23:e3:fb:4c:9d:18:cf:
2d:9d:56:34:cf:1f:10:a1:96:d5:12:21:79:d4:32:
0d:07:60:f3:86:5c:50:e2:3b:23:99:ad:81:5b:0f:
80:b2:7e:c4:a1:fb:56:4b:3c:3a:d3:c5:4c:6b:2f:
71:d5:9f:2e:89:f1:3b:37:df:da:1b:da:c7:fe:b0:
b0:98:89:a3:1c:aa:7f:a5:0b:02:2e:0a:bf:b4:7d:
3d:4a:8d:d7:17:00:70:20:d7:15:b1:66:5e:f5:ee:
99:97:db:9c:cc:24:3d:41:51:64:e9:90:cf:55:7e:
7c:05:64:b0:bd:24:46:90:20:ca:6f:cd:b1:e3:c3:
3f:f1:d4:eb:2d:e8:aa:db:1f:dd:5c:7f:98:16:4a:
8c:7f:fd:2c:9e:bc:7c:a7:71:1f:05:b0:da:49:d5:
ba:3a:1c:fa:49:65:65:24:9f:2c:11:5f:26:75:df:
00:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:0D:6C:31:40:C9:2E:D3:2B:E7:7F:E6:D4:8D:BD:BB:0E:27:6B:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d9d5ced5-8d7a-384e-a047-9db809fa8081.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:56a:800b::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:24:8a:50:53:48:a4:a5:d5:62:7d:3e:bf:5a:b9:a3:3c:f4:
de:81:da:e8:19:db:dd:15:e9:7a:39:8a:34:c3:0f:b4:7b:63:
46:55:03:52:2a:54:a1:5f:4c:12:81:e2:73:10:2a:60:d6:d7:
04:a6:0f:fe:78:41:e5:92:c8:bc:03:0d:e5:a5:bd:1d:71:47:
10:08:9f:e8:fa:d2:97:51:7d:49:80:d9:61:84:74:e6:44:2b:
66:8e:e3:c5:27:89:60:4e:27:f2:d4:53:09:c5:4f:87:83:6e:
11:7a:c4:bd:2d:cc:00:b9:82:11:77:18:16:89:60:90:0d:3d:
f3:17:e2:4b:16:ff:c5:4c:8f:fc:80:14:90:d6:37:7f:fc:1a:
02:80:54:63:d4:be:7b:57:b9:ce:ee:6c:0c:dd:26:23:d7:94:
3e:a7:52:0c:43:32:60:32:71:bd:8f:7f:a8:38:e0:d5:01:bb:
ae:65:ce:54:86:f2:88:cb:ce:b8:f0:b6:e7:df:fe:89:0c:61:
aa:50:10:5d:fb:b2:91:56:d6:73:13:43:70:8b:3e:14:3e:20:
0b:19:e8:01:93:18:90:ff:24:c4:34:2c:ca:e4:6c:75:e6:6b:
e6:06:3e:7e:3c:12:31:5a:1f:38:c7:c1:7e:1c:3e:3d:2b:6c:
a3:09:0b:33
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEffL0iDosWKin9ZFEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI0MTExNDAyMDAyN1oXDTI1MDIxMjAyMDAyN1owLzEtMCsGA1UEAxMk
ZjBkNTk1NDgtNjQzYy00N2MwLWI1YmItZTAwNTRjNDU5YmRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjR1apNsCGA024hm7roHXaZOJKVAWo1NK8E6m
JQFd4DM3myrlnr1jkEavLL4PLFBwz5J0lVz6EpzFi1iCzHOltCP7OPcYTM08HGfE
VWGNLRW8RiPj+0ydGM8tnVY0zx8QoZbVEiF51DINB2DzhlxQ4jsjma2BWw+Asn7E
oftWSzw608VMay9x1Z8uifE7N9/aG9rH/rCwmImjHKp/pQsCLgq/tH09So3XFwBw
INcVsWZe9e6Zl9uczCQ9QVFk6ZDPVX58BWSwvSRGkCDKb82x48M/8dTrLeiq2x/d
XH+YFkqMf/0snrx8p3EfBbDaSdW6Ohz6SWVlJJ8sEV8mdd8AdQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIUNbDFAyS7TK+d/5tSNvbsOJ2uCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZDlkNWNlZDUtOGQ3YS0z
ODRlLWEwNDctOWRiODA5ZmE4MDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFaoAL
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHAkilBTSKSl1WJ9Pr9auaM89N6B2ugZ290V6Xo5ijTDD7R7Y0ZV
A1IqVKFfTBKB4nMQKmDW1wSmD/54QeWSyLwDDeWlvR1xRxAIn+j60pdRfUmA2WGE
dOZEK2aO48UniWBOJ/LUUwnFT4eDbhF6xL0tzAC5ghF3GBaJYJANPfMX4ksW/8VM
j/yAFJDWN3/8GgKAVGPUvntXuc7ubAzdJiPXlD6nUgxDMmAycb2Pf6g44NUBu65l
zlSG8ojLzrjwtuff/okMYapQEF37spFW1nMTQ3CLPhQ+IAsZ6AGTGJD/JMQ0LMrk
bHXma+YGPn48EjFaHzjHwX4cPj0rbKMJCzM=
-----END CERTIFICATE-----
Generated at Fri Apr 25 18:57:23 2025 by rpki-client