Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/33c1d78b-b02f-34e3-86b1-6a5c1d8609a0.roa
File: 33c1d78b-b02f-34e3-86b1-6a5c1d8609a0.roa (raw, json)
Hash identifier: ASV6zlzCvM94TxebA01LD1eWZHl+ZK99fY09zPG/6/o=
Subject key identifier: 46:B7:F7:DC:35:9A:18:BB:47:74:D1:A9:EA:C7:3A:D7:24:6B:9A:50
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584800AFBA3E50B6A1CE67EE1200
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/33c1d78b-b02f-34e3-86b1-6a5c1d8609a0.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 33363
IP address blocks: 2605:a401:8035::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:ba:3e:50:b6:a1:ce:67:ee:12:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=b6c604c3-8f9b-41a1-8580-8611a51319ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c5:1c:08:a0:93:33:bb:1e:4a:06:44:ad:76:
b0:e5:be:9b:ff:b3:39:e8:14:23:9f:02:c5:2c:a4:
6f:ef:db:70:84:77:64:13:a0:f5:35:e4:98:5d:e0:
4b:60:b8:23:4f:e5:47:ad:ab:4e:91:4f:fd:8a:1f:
5d:a9:6d:ad:6a:10:1b:db:9e:b8:73:ba:90:d3:4a:
f2:24:74:3d:c5:6a:3f:77:df:a5:07:87:0a:da:12:
26:81:b8:10:b1:e1:9d:df:77:11:72:91:4e:65:92:
cd:8a:6d:00:74:19:9f:39:d2:47:5e:f3:90:5b:fe:
75:ff:fd:f9:46:cc:84:9c:e4:5d:5e:2e:ce:96:35:
00:00:62:d6:f3:ce:68:17:df:10:d5:9e:bd:47:99:
7f:f6:6a:49:d7:f2:ee:5c:2b:78:1f:63:ba:00:ae:
0c:48:b3:76:1d:30:76:5d:69:f8:59:55:34:2c:44:
0e:bb:22:16:9e:fa:0a:5d:6d:41:82:97:f5:22:4f:
64:56:75:7b:18:e3:29:94:dc:17:33:4c:d9:47:99:
8b:8e:c1:3c:06:0c:96:08:a8:36:03:c5:cf:4b:2d:
f0:43:34:86:3e:87:49:df:e9:91:1f:a7:ad:93:b4:
f3:36:cd:8f:b9:2c:72:4e:70:18:cf:a1:0c:bc:15:
03:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B7:F7:DC:35:9A:18:BB:47:74:D1:A9:EA:C7:3A:D7:24:6B:9A:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/33c1d78b-b02f-34e3-86b1-6a5c1d8609a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:a401:8035::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:9c:8a:e2:78:47:01:a8:7d:5d:69:ce:08:0a:7f:fb:35:98:
97:73:74:a7:07:56:57:b5:b1:8b:9c:70:91:2f:e8:57:ca:fa:
86:9e:d6:ee:3d:82:b9:5f:2f:5a:39:bd:78:c3:93:f0:3b:3a:
d1:75:6b:6e:b2:e8:f7:4b:b7:1c:8f:70:76:2d:7f:91:f3:07:
73:10:d2:f9:07:d6:be:12:fc:54:f0:18:9e:39:e2:cc:a9:f6:
e7:b0:5b:55:af:91:c2:58:07:81:f6:58:64:41:75:bc:ef:44:
c6:a0:66:82:85:41:38:67:70:09:7b:c6:39:b7:35:83:82:79:
67:dc:4a:2c:6b:78:86:45:0d:2c:90:b9:57:e2:2c:b6:0b:45:
ff:fb:6b:15:05:d7:91:2e:11:53:cf:9b:18:a9:51:c7:1f:fc:
13:2a:7e:ac:6e:46:f4:35:e5:4f:53:db:6a:e0:ae:79:d4:5b:
3a:77:7a:e0:fd:fb:b6:2a:66:83:72:ca:bd:1c:bc:80:6c:c2:
7b:0b:a4:c1:e6:df:44:0f:dd:d7:cd:2e:5d:bd:12:bb:f4:a7:
69:81:6a:27:9f:ae:a0:a3:7f:65:ab:98:ae:6d:ee:e8:e4:17:
dc:81:ab:81:d0:80:2c:5c:f4:1e:4e:dd:76:50:c5:ee:f2:ed:
d7:1d:fb:94
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgAr7o+ULahzmfuEgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI0MTEyNjAyMDAyNloXDTI1MDIyNDAyMDAyNlowLzEtMCsGA1UEAxMk
YjZjNjA0YzMtOGY5Yi00MWExLTg1ODAtODYxMWE1MTMxOWVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsUcCKCTM7seSgZErXaw5b6b/7M56BQjnwLF
LKRv79twhHdkE6D1NeSYXeBLYLgjT+VHratOkU/9ih9dqW2tahAb2564c7qQ00ry
JHQ9xWo/d9+lB4cK2hImgbgQseGd33cRcpFOZZLNim0AdBmfOdJHXvOQW/51//35
RsyEnORdXi7OljUAAGLW885oF98Q1Z69R5l/9mpJ1/LuXCt4H2O6AK4MSLN2HTB2
XWn4WVU0LEQOuyIWnvoKXW1Bgpf1Ik9kVnV7GOMplNwXM0zZR5mLjsE8BgyWCKg2
A8XPSy3wQzSGPodJ3+mRH6etk7TzNs2PuSxyTnAYz6EMvBUDfQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEa399w1mhi7R3TRqerHOtcka5pQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMzNjMWQ3OGItYjAyZi0z
NGUzLTg2YjEtNmE1YzFkODYwOWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYA1
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEmciuJ4RwGofV1pzggKf/s1mJdzdKcHVle1sYuccJEv6FfK+oae
1u49grlfL1o5vXjDk/A7OtF1a26y6PdLtxyPcHYtf5HzB3MQ0vkH1r4S/FTwGJ45
4syp9uewW1WvkcJYB4H2WGRBdbzvRMagZoKFQThncAl7xjm3NYOCeWfcSixreIZF
DSyQuVfiLLYLRf/7axUF15EuEVPPmxipUccf/BMqfqxuRvQ15U9T22rgrnnUWzp3
euD9+7YqZoNyyr0cvIBswnsLpMHm30QP3dfNLl29Erv0p2mBaiefrqCjf2WrmK5t
7ujkF9yBq4HQgCxc9B5O3XZQxe7y7dcd+5Q=
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:50:56 2025 by rpki-client