Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325/dda0b626-a43a-3580-9250-810faca4b003.roa
File: dda0b626-a43a-3580-9250-810faca4b003.roa (raw, json)
Hash identifier: AcV2QqY4c7zaF1M8qGpleLTcMe/NGwib3G5y4qgPyeI=
Subject key identifier: FC:0D:9C:CE:D8:F6:0A:83:05:37:FB:A2:47:D9:83:D1:84:F7:6E:9C
Certificate issuer: /CN=d2bbf297-079d-4c91-9341-1297e788c325
Certificate serial: 010D0C9F43285848222FCF77499D064ACD6670C0
Authority key identifier: 15:8B:E5:D1:07:F1:7F:C7:CF:6D:B1:5D:2D:49:F0:C0:2C:78:34:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325/dda0b626-a43a-3580-9250-810faca4b003.roa
Signing time: Sun 08 Dec 2024 02:00:39 +0000
ROA not before: Sun 08 Dec 2024 02:00:39 +0000
ROA not after: Sat 08 Mar 2025 02:00:39 +0000
asID: 21775
IP address blocks: 2001:500:103::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:22:2f:cf:77:49:9d:06:4a:cd:66:70:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2bbf297-079d-4c91-9341-1297e788c325
Validity
Not Before: Dec 8 02:00:39 2024 GMT
Not After : Mar 8 02:00:39 2025 GMT
Subject: CN=8732d5e6-54bf-4cf3-b549-31f939e74752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:86:88:e9:df:66:fa:e3:5b:ac:82:c3:81:f1:
be:b6:e1:d3:7f:af:f0:d9:95:6f:56:a2:8f:5a:64:
69:28:2b:f3:27:fa:74:32:93:36:15:27:93:3e:cf:
66:16:7c:54:06:a3:bd:eb:d1:46:e6:8c:1b:61:52:
04:2f:dc:20:76:ba:e9:6e:4e:e5:63:34:f5:cc:3b:
09:e1:d9:7d:da:fc:be:da:c5:ea:cc:ec:3d:ca:b1:
5f:06:cf:28:b8:dd:eb:7d:23:b0:3f:2b:c0:48:4b:
72:d0:e4:90:35:31:81:e1:bb:d4:95:13:37:c6:be:
af:a5:82:2f:4f:59:1c:39:27:0f:89:45:f5:01:a9:
d6:99:d6:a1:5e:0a:38:41:e5:a9:e5:0d:d3:bd:f2:
52:3d:f8:68:21:71:f6:b5:7b:2b:90:a9:34:5d:27:
13:31:f1:ab:1a:c8:fa:eb:95:14:e1:f6:c9:16:7f:
45:33:4c:14:a6:cf:9f:4c:a9:38:c4:13:7a:8b:c0:
44:bf:c1:de:d8:bf:a4:2c:ad:ef:b9:ab:6b:8b:9f:
28:a5:1e:dc:20:5f:34:a9:55:15:1f:c2:21:9c:76:
41:4c:bd:5f:6b:75:03:db:fe:02:e4:11:58:ab:1d:
c0:1b:b9:d5:fd:b8:6f:cb:5e:e8:8c:4b:12:3d:e6:
df:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:0D:9C:CE:D8:F6:0A:83:05:37:FB:A2:47:D9:83:D1:84:F7:6E:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325/dda0b626-a43a-3580-9250-810faca4b003.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325/d2bbf297-079d-4c91-9341-1297e788c325.crl
X509v3 Authority Key Identifier:
keyid:15:8B:E5:D1:07:F1:7F:C7:CF:6D:B1:5D:2D:49:F0:C0:2C:78:34:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:103::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:f5:bf:a4:6e:81:4f:92:bb:81:67:04:c7:aa:4d:02:6c:18:
25:4e:65:e2:69:17:4b:7f:f0:d3:b5:ee:fb:c7:7d:d7:36:58:
50:4b:6f:b4:02:17:85:a4:8d:7c:4c:30:68:7d:dc:95:32:85:
a1:80:fb:35:aa:83:c3:00:50:94:85:7f:d6:46:be:51:2d:91:
e4:40:8f:42:23:d4:af:b8:dc:82:eb:fe:e1:e7:81:c6:27:53:
b1:5f:9b:8f:52:19:56:b3:ee:af:66:84:9e:eb:6f:ee:ae:70:
eb:6c:ae:ba:02:79:96:2c:dc:09:37:8b:d6:c4:27:ea:c9:4c:
e2:c8:17:dc:b0:8a:f9:e4:db:db:e3:26:85:48:a4:26:3f:ac:
fa:61:58:dd:95:83:e2:fd:07:b1:8e:9b:53:c2:f9:29:9a:8e:
1f:ed:5a:45:07:dc:97:79:9e:d0:8a:71:db:0a:20:76:05:7b:
60:5d:b5:81:44:ad:35:50:ab:2b:e8:26:e4:bf:07:ac:d3:be:
f7:c3:9c:09:68:0b:d3:ef:05:91:68:27:9f:ea:9f:c5:7a:51:
fd:ad:01:29:b4:5d:4d:99:01:b9:1e:5b:62:f4:ad:5c:27:26:
e0:a5:d4:8e:07:82:80:a2:d7:3e:72:d2:15:24:14:bc:74:48:
38:50:b6:6c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgiL893SZ0GSs1mcMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDJiYmYyOTctMDc5ZC00YzkxLTkzNDEtMTI5N2U3ODhj
MzI1MB4XDTI0MTIwODAyMDAzOVoXDTI1MDMwODAyMDAzOVowLzEtMCsGA1UEAxMk
ODczMmQ1ZTYtNTRiZi00Y2YzLWI1NDktMzFmOTM5ZTc0NzUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIaI6d9m+uNbrILDgfG+tuHTf6/w2ZVvVqKP
WmRpKCvzJ/p0MpM2FSeTPs9mFnxUBqO969FG5owbYVIEL9wgdrrpbk7lYzT1zDsJ
4dl92vy+2sXqzOw9yrFfBs8ouN3rfSOwPyvASEty0OSQNTGB4bvUlRM3xr6vpYIv
T1kcOScPiUX1AanWmdahXgo4QeWp5Q3TvfJSPfhoIXH2tXsrkKk0XScTMfGrGsj6
65UU4fbJFn9FM0wUps+fTKk4xBN6i8BEv8He2L+kLK3vuatri58opR7cIF80qVUV
H8IhnHZBTL1fa3UD2/4C5BFYqx3AG7nV/bhvy17ojEsSPebfnQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPwNnM7Y9gqDBTf7okfZg9GE926cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kMmJi
ZjI5Ny0wNzlkLTRjOTEtOTM0MS0xMjk3ZTc4OGMzMjUvZGRhMGI2MjYtYTQzYS0z
NTgwLTkyNTAtODEwZmFjYTRiMDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDJiYmYyOTctMDc5ZC00YzkxLTkz
NDEtMTI5N2U3ODhjMzI1L2QyYmJmMjk3LTA3OWQtNGM5MS05MzQxLTEyOTdlNzg4
YzMyNS5jcmwwHwYDVR0jBBgwFoAUFYvl0Qfxf8fPbbFdLUnwwCx4NMkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kMmJiZjI5Ny0wNzlkLTRjOTEtOTM0MS0xMjk3
ZTc4OGMzMjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAED
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAf1v6RugU+Su4FnBMeqTQJsGCVOZeJpF0t/8NO17vvHfdc2WFBL
b7QCF4WkjXxMMGh93JUyhaGA+zWqg8MAUJSFf9ZGvlEtkeRAj0Ij1K+43ILr/uHn
gcYnU7Ffm49SGVaz7q9mhJ7rb+6ucOtsrroCeZYs3Ak3i9bEJ+rJTOLIF9ywivnk
29vjJoVIpCY/rPphWN2Vg+L9B7GOm1PC+Smajh/tWkUH3Jd5ntCKcdsKIHYFe2Bd
tYFErTVQqyvoJuS/B6zTvvfDnAloC9PvBZFoJ5/qn8V6Uf2tASm0XU2ZAbkeW2L0
rVwnJuCl1I4HgoCi1z5y0hUkFLx0SDhQtmw=
-----END CERTIFICATE-----
Generated at Sun Apr 27 04:51:00 2025 by rpki-client