Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1d9b3a2c-f734-3bc3-8bde-6d5747a65920.roa
File: 1d9b3a2c-f734-3bc3-8bde-6d5747a65920.roa (raw, json)
Hash identifier: YtXHRqKc9hne1wN+os90Bsslj4NvTZcdhZ1zmHYhMh4=
Subject key identifier: 88:3A:50:3A:67:79:48:FF:D4:9D:06:BC:A2:54:4E:98:B0:57:07:9D
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584800AFBE08B263B724604E0B00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1d9b3a2c-f734-3bc3-8bde-6d5747a65920.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 33363
IP address blocks: 2605:a401:8187::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:be:08:b2:63:b7:24:60:4e:0b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=baf47f81-42d5-4a6c-9f3f-ce6b2061fa08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:79:2d:18:37:59:b0:15:48:86:6f:df:91:7a:
41:7e:9a:4c:60:cd:e4:3c:7a:e0:08:c1:24:69:ef:
bd:1a:67:0f:4f:85:74:13:11:46:cb:92:46:3d:9a:
f0:9b:69:da:49:2a:9f:38:86:5a:28:90:ce:12:82:
fa:a2:3c:89:e7:47:7a:91:4e:b8:69:4f:c8:3c:2c:
68:aa:c6:ca:81:81:b6:b9:34:6e:f4:bb:b4:b0:49:
a3:d8:b4:b6:43:ce:09:cf:84:e1:4d:11:14:9e:8f:
07:8a:0f:e2:0e:45:4d:db:72:cb:0d:10:08:cb:ae:
b6:10:d5:fc:22:2b:9c:94:3c:76:cf:50:cc:57:56:
43:f9:37:de:00:40:c8:db:fe:43:6c:3e:89:fd:25:
c1:58:52:27:d6:2e:3f:b0:20:d9:49:bd:ab:0b:19:
16:50:d9:d4:2b:aa:1f:3b:3e:02:94:c3:7b:3c:78:
3a:e3:a6:7b:be:75:bd:e3:19:1b:64:30:e7:38:81:
d8:1c:40:eb:f1:b0:e2:a4:f9:2b:f1:53:cf:2c:60:
69:4d:fa:50:ab:3c:1c:fa:da:41:3d:e8:7d:38:18:
ea:c9:5e:09:19:ea:d1:85:69:50:bc:8d:c5:75:6f:
99:99:28:a0:00:53:d9:b8:17:bc:6f:eb:66:5c:82:
25:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:3A:50:3A:67:79:48:FF:D4:9D:06:BC:A2:54:4E:98:B0:57:07:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1d9b3a2c-f734-3bc3-8bde-6d5747a65920.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:a401:8187::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:39:49:b5:26:cd:5d:1e:73:ad:e7:29:98:5d:10:bc:54:37:
3e:24:96:7b:da:b5:de:b7:58:89:78:ea:5b:71:81:5f:bb:8d:
c7:e0:5e:f8:db:fb:d7:3a:49:ad:81:2a:fc:0d:77:4d:41:53:
b0:43:58:8e:e7:62:e2:01:34:3a:91:ab:ed:c5:18:fb:7e:31:
d7:4c:a9:39:ed:0a:d7:23:1e:96:40:83:83:7e:ac:34:2b:d8:
e8:b9:ed:87:a0:0d:ec:fc:a9:da:a8:a3:ff:ad:f1:d9:af:b4:
be:e3:17:9a:77:8d:d9:60:4a:8f:f6:18:63:44:d2:4f:db:a1:
cf:7c:97:78:9c:b6:c0:d6:3e:4c:61:6f:9e:d0:f2:4e:94:79:
83:94:24:1e:bf:7c:73:f2:9f:a5:6c:d6:f3:ac:92:d3:f6:97:
05:b6:a2:a7:41:3e:78:3f:55:61:a2:4a:ec:a4:dc:1c:2e:41:
b2:9c:52:9f:3e:b7:67:36:bc:ac:82:33:9b:8e:f3:4b:0d:06:
c1:88:db:06:15:45:13:41:51:8a:cb:fa:e6:df:eb:65:a7:54:
8a:e5:ea:59:45:61:67:6c:4a:f9:47:f2:60:81:2e:22:0a:cc:
9a:f4:2f:6a:a7:5e:ff:1e:36:fb:e0:42:6d:16:b8:8c:fb:5c:
bf:9b:1f:60
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgAr74IsmO3JGBOCwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI0MTEyNjAyMDAyNloXDTI1MDIyNDAyMDAyNlowLzEtMCsGA1UEAxMk
YmFmNDdmODEtNDJkNS00YTZjLTlmM2YtY2U2YjIwNjFmYTA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXktGDdZsBVIhm/fkXpBfppMYM3kPHrgCMEk
ae+9GmcPT4V0ExFGy5JGPZrwm2naSSqfOIZaKJDOEoL6ojyJ50d6kU64aU/IPCxo
qsbKgYG2uTRu9Lu0sEmj2LS2Q84Jz4ThTREUno8Hig/iDkVN23LLDRAIy662ENX8
IiuclDx2z1DMV1ZD+TfeAEDI2/5DbD6J/SXBWFIn1i4/sCDZSb2rCxkWUNnUK6of
Oz4ClMN7PHg646Z7vnW94xkbZDDnOIHYHEDr8bDipPkr8VPPLGBpTfpQqzwc+tpB
Peh9OBjqyV4JGerRhWlQvI3FdW+ZmSigAFPZuBe8b+tmXIIluQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIg6UDpneUj/1J0GvKJUTpiwVwedMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMWQ5YjNhMmMtZjczNC0z
YmMzLThiZGUtNmQ1NzQ3YTY1OTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYGH
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJQ5SbUmzV0ec63nKZhdELxUNz4klnvatd63WIl46ltxgV+7jcfg
Xvjb+9c6Sa2BKvwNd01BU7BDWI7nYuIBNDqRq+3FGPt+MddMqTntCtcjHpZAg4N+
rDQr2Oi57YegDez8qdqoo/+t8dmvtL7jF5p3jdlgSo/2GGNE0k/boc98l3ictsDW
Pkxhb57Q8k6UeYOUJB6/fHPyn6Vs1vOsktP2lwW2oqdBPng/VWGiSuyk3BwuQbKc
Up8+t2c2vKyCM5uO80sNBsGI2wYVRRNBUYrL+ubf62WnVIrl6llFYWdsSvlH8mCB
LiIKzJr0L2qnXv8eNvvgQm0WuIz7XL+bH2A=
-----END CERTIFICATE-----
Generated at Tue May 6 19:07:27 2025 by rpki-client