Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325/a91f849d-e3ae-31d1-8334-f081060c24ad.roa
File: a91f849d-e3ae-31d1-8334-f081060c24ad.roa (raw, json)
Hash identifier: DeROYm1JHO0Sqe1bcs7DE+NSGL2+1ImB/ApM/RFkSiE=
Subject key identifier: 7F:EE:DF:EE:09:0D:0E:63:A0:38:FB:27:AF:0F:B2:59:0A:44:33:12
Certificate issuer: /CN=d2bbf297-079d-4c91-9341-1297e788c325
Certificate serial: 010D0C9F432858481F6522E149C793FFD9D0CC80
Authority key identifier: 15:8B:E5:D1:07:F1:7F:C7:CF:6D:B1:5D:2D:49:F0:C0:2C:78:34:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325/a91f849d-e3ae-31d1-8334-f081060c24ad.roa
Signing time: Sat 07 Dec 2024 02:00:39 +0000
ROA not before: Sat 07 Dec 2024 02:00:39 +0000
ROA not after: Fri 07 Mar 2025 02:00:39 +0000
asID: 21775
IP address blocks: 2001:500:108::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1f:65:22:e1:49:c7:93:ff:d9:d0:cc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2bbf297-079d-4c91-9341-1297e788c325
Validity
Not Before: Dec 7 02:00:39 2024 GMT
Not After : Mar 7 02:00:39 2025 GMT
Subject: CN=b870e03f-a0c2-4205-9aef-83f77014f2b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a7:19:d1:f3:39:71:8d:d8:0e:53:ba:d7:9d:
2f:25:11:34:df:fe:ec:4a:ed:ba:07:c8:2e:b8:d8:
db:0b:3e:0b:99:f9:84:b4:ef:53:72:ff:ae:27:3a:
15:3d:1c:ff:53:f6:3d:44:26:ab:25:af:93:b4:5d:
a7:68:2c:69:af:0d:67:1f:0d:f7:11:b5:e7:22:c1:
8e:8b:66:98:37:a8:d6:6f:4d:40:ce:35:ca:46:71:
9d:e7:fa:76:88:53:e3:3e:3c:24:40:a2:20:af:f0:
94:5b:51:3a:1e:b5:fd:fd:7a:18:4a:3f:3d:c8:e1:
85:eb:1b:d3:ec:c0:2e:be:82:f6:07:04:69:6e:7d:
95:52:4a:97:07:0e:f2:d0:96:62:12:7b:53:0a:84:
15:b2:d1:12:23:5f:4b:f1:bd:76:30:17:44:c4:59:
1f:5a:52:be:bd:ff:3e:fc:55:c3:f5:cb:25:93:6b:
68:fd:b2:92:e1:db:1b:73:4f:87:75:a6:16:35:ba:
05:a8:98:11:a6:6b:d4:d2:1e:c7:f4:7f:7c:7f:db:
2a:30:e5:06:59:9b:4d:55:99:4c:84:22:b9:16:ec:
5c:ef:4e:c9:19:f0:e8:ef:34:19:08:8a:cd:11:af:
10:fa:e8:87:d3:7f:18:af:37:1c:29:37:e7:ca:cb:
d0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:EE:DF:EE:09:0D:0E:63:A0:38:FB:27:AF:0F:B2:59:0A:44:33:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325/a91f849d-e3ae-31d1-8334-f081060c24ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325/d2bbf297-079d-4c91-9341-1297e788c325.crl
X509v3 Authority Key Identifier:
keyid:15:8B:E5:D1:07:F1:7F:C7:CF:6D:B1:5D:2D:49:F0:C0:2C:78:34:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:108::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:e6:e2:40:59:cf:2a:ab:ad:6f:31:d2:eb:ff:e2:fd:54:9a:
fd:24:a6:1e:c8:88:71:d4:9e:84:e4:b7:77:61:16:11:5c:6a:
20:13:82:e1:d2:41:29:7f:5c:49:ec:8b:e8:9d:b1:1c:de:e9:
22:f6:e1:40:8c:2c:bd:9e:fd:a2:bc:fa:3a:f2:b1:5d:03:c8:
14:be:2c:c0:3f:a0:80:99:39:e3:b2:08:1e:5e:71:37:4f:88:
71:f6:34:d5:54:9e:d5:20:6a:fc:f9:85:57:70:a9:98:ba:37:
85:e5:31:05:4c:31:c8:f5:b7:31:bf:d1:a1:7f:c5:14:0a:e6:
38:1e:47:9d:f8:bf:97:a0:b5:06:82:86:3c:f4:54:d4:7d:c8:
5a:77:d5:c5:02:9f:83:18:d6:21:9a:fe:f5:38:ff:d1:af:a4:
cf:f9:ae:fb:b4:60:e3:a8:dc:ff:3d:a8:fb:99:29:00:f2:06:
c9:56:e0:d5:75:88:11:c5:38:c1:44:0d:08:74:36:8d:eb:9a:
2c:e5:97:ca:f8:01:02:81:c5:94:01:30:c1:78:0e:60:5e:09:
8b:8c:3b:d7:39:31:18:c9:ec:6d:9a:5f:8d:ff:9b:7d:1f:3e:
e7:fe:35:75:42:6a:e2:80:89:0e:5a:47:12:18:6d:0c:85:1a:
88:a9:1d:f7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgfZSLhSceT/9nQzIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDJiYmYyOTctMDc5ZC00YzkxLTkzNDEtMTI5N2U3ODhj
MzI1MB4XDTI0MTIwNzAyMDAzOVoXDTI1MDMwNzAyMDAzOVowLzEtMCsGA1UEAxMk
Yjg3MGUwM2YtYTBjMi00MjA1LTlhZWYtODNmNzcwMTRmMmIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhacZ0fM5cY3YDlO6150vJRE03/7sSu26B8gu
uNjbCz4LmfmEtO9Tcv+uJzoVPRz/U/Y9RCarJa+TtF2naCxprw1nHw33EbXnIsGO
i2aYN6jWb01AzjXKRnGd5/p2iFPjPjwkQKIgr/CUW1E6HrX9/XoYSj89yOGF6xvT
7MAuvoL2BwRpbn2VUkqXBw7y0JZiEntTCoQVstESI19L8b12MBdExFkfWlK+vf8+
/FXD9cslk2to/bKS4dsbc0+HdaYWNboFqJgRpmvU0h7H9H98f9sqMOUGWZtNVZlM
hCK5Fuxc707JGfDo7zQZCIrNEa8Q+uiH038YrzccKTfnysvQTwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFH/u3+4JDQ5joDj7J68PslkKRDMSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kMmJi
ZjI5Ny0wNzlkLTRjOTEtOTM0MS0xMjk3ZTc4OGMzMjUvYTkxZjg0OWQtZTNhZS0z
MWQxLTgzMzQtZjA4MTA2MGMyNGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDJiYmYyOTctMDc5ZC00YzkxLTkz
NDEtMTI5N2U3ODhjMzI1L2QyYmJmMjk3LTA3OWQtNGM5MS05MzQxLTEyOTdlNzg4
YzMyNS5jcmwwHwYDVR0jBBgwFoAUFYvl0Qfxf8fPbbFdLUnwwCx4NMkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kMmJiZjI5Ny0wNzlkLTRjOTEtOTM0MS0xMjk3
ZTc4OGMzMjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEI
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAATm4kBZzyqrrW8x0uv/4v1Umv0kph7IiHHUnoTkt3dhFhFcaiAT
guHSQSl/XEnsi+idsRze6SL24UCMLL2e/aK8+jrysV0DyBS+LMA/oICZOeOyCB5e
cTdPiHH2NNVUntUgavz5hVdwqZi6N4XlMQVMMcj1tzG/0aF/xRQK5jgeR534v5eg
tQaChjz0VNR9yFp31cUCn4MY1iGa/vU4/9GvpM/5rvu0YOOo3P89qPuZKQDyBslW
4NV1iBHFOMFEDQh0No3rmizll8r4AQKBxZQBMMF4DmBeCYuMO9c5MRjJ7G2aX43/
m30fPuf+NXVCauKAiQ5aRxIYbQyFGoipHfc=
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:35:48 2025 by rpki-client