Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/c9ff6e96-e7d6-3b2e-9cc9-c6a1b53046ef.roa
File: c9ff6e96-e7d6-3b2e-9cc9-c6a1b53046ef.roa (raw, json)
Hash identifier: drX6cX9EJi/MoL1Nkq0ZPuvxAz9S0q1WquEOuDzh3JY=
Subject key identifier: 9E:3D:F9:7F:D6:BB:2B:19:92:CA:C7:6B:45:4E:1D:88:67:7E:08:C6
Certificate issuer: /CN=f5dd2f3b-d544-4a90-84a5-58af0db84dab
Certificate serial: 010D0C9F432858481C9A784AF3B3E039B5C78520
Authority key identifier: 2A:21:7E:D8:28:3A:D2:41:FE:CF:E5:E9:1D:32:3F:C0:B7:8A:F7:0B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/c9ff6e96-e7d6-3b2e-9cc9-c6a1b53046ef.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 11961
IP address blocks: 2607:8380::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:78:4a:f3:b3:e0:39:b5:c7:85:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5dd2f3b-d544-4a90-84a5-58af0db84dab
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=55c75915-c7cd-436f-b546-7e64e5d9a7ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c3:e2:c3:fc:a4:92:c3:aa:ab:1a:d3:1b:e7:
9d:92:f8:1e:dd:1b:ac:a9:91:c5:70:0c:7e:9e:3d:
d1:92:10:ac:35:0f:d5:d6:4e:6d:f5:5d:d5:65:75:
5d:b5:3b:06:6a:44:96:a0:be:1d:f7:78:33:b0:08:
e3:fc:07:4d:7b:cc:3f:5e:f4:e9:36:2e:d3:7a:a5:
fc:00:88:87:ff:d5:f3:21:45:fa:0d:44:98:ac:2f:
49:e1:d3:9d:d0:be:8d:e9:9a:8c:f5:0e:fb:92:b9:
85:df:e4:02:54:03:9c:bc:a5:12:83:15:5e:7a:fe:
b9:82:d6:37:65:c3:e1:08:75:f1:ad:61:b2:f4:1c:
8e:ce:1b:32:46:a7:1f:11:2c:95:a2:52:1d:77:e3:
ed:0c:3b:62:a2:a7:1b:15:fd:37:0c:58:43:58:63:
b0:18:4f:7e:d1:3c:7f:dc:84:e8:68:60:2e:ab:53:
bc:fa:f4:61:8a:8b:1a:7e:db:78:fb:75:77:01:9c:
17:a1:50:7c:ac:e0:5e:bc:55:19:2a:32:ac:0b:d7:
4b:87:8b:88:e8:bf:91:9a:c4:cf:71:30:15:9e:3a:
d8:0a:f6:0f:c1:70:ea:20:59:a5:ea:df:2c:46:33:
5a:d2:fc:6e:ce:19:9b:6e:5c:65:04:69:60:e5:79:
26:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:3D:F9:7F:D6:BB:2B:19:92:CA:C7:6B:45:4E:1D:88:67:7E:08:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/c9ff6e96-e7d6-3b2e-9cc9-c6a1b53046ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/f5dd2f3b-d544-4a90-84a5-58af0db84dab.crl
X509v3 Authority Key Identifier:
keyid:2A:21:7E:D8:28:3A:D2:41:FE:CF:E5:E9:1D:32:3F:C0:B7:8A:F7:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8380::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:03:1b:0c:eb:05:6e:8a:36:ea:e7:b7:3d:e9:5c:d1:9b:4d:
6d:97:ab:bd:be:e0:1e:54:11:eb:e4:82:95:ff:09:b8:e8:81:
5c:8a:8a:e1:8f:44:f6:30:dc:97:4a:e2:5d:29:40:88:0f:79:
ec:6e:ec:56:64:fb:7d:bf:7c:c9:0f:f3:08:56:a8:a6:bb:21:
ff:37:4c:61:54:62:99:3c:3e:10:3a:2d:d1:32:95:58:58:e5:
6f:b0:70:19:af:fb:03:5b:f9:39:8f:e8:80:05:f6:80:c4:8a:
fe:34:6e:18:bb:92:ae:67:7c:97:9c:89:b5:0e:30:b3:ea:4a:
b0:66:7c:55:34:4f:a8:48:dd:3f:1e:f1:0c:5f:7b:d1:e9:44:
c1:c9:5f:22:93:09:a9:79:f0:8d:3c:be:65:f6:03:29:ca:52:
b4:6d:77:c9:4f:0d:a5:37:65:40:52:c5:e2:27:2a:f5:c6:09:
47:a8:a0:7c:f7:44:9f:50:cc:be:5a:3e:ed:24:66:19:81:80:
66:40:8b:6c:2f:7e:34:27:0d:e2:2a:e2:89:41:03:65:12:23:
31:0e:e6:c1:0d:68:a3:09:64:fe:fe:a2:1b:93:48:e9:69:67:
eb:42:b2:c4:86:5e:3c:6f:4b:33:d7:56:87:2a:bd:1a:f3:f2:
40:82:64:53
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEgcmnhK87PgObXHhSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjVkZDJmM2ItZDU0NC00YTkwLTg0YTUtNThhZjBkYjg0
ZGFiMB4XDTI0MTIwNjAyMDAzOVoXDTI1MDMwNjAyMDAzOVowLzEtMCsGA1UEAxMk
NTVjNzU5MTUtYzdjZC00MzZmLWI1NDYtN2U2NGU1ZDlhN2NhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsPiw/ykksOqqxrTG+edkvge3RusqZHFcAx+
nj3RkhCsNQ/V1k5t9V3VZXVdtTsGakSWoL4d93gzsAjj/AdNe8w/XvTpNi7TeqX8
AIiH/9XzIUX6DUSYrC9J4dOd0L6N6ZqM9Q77krmF3+QCVAOcvKUSgxVeev65gtY3
ZcPhCHXxrWGy9ByOzhsyRqcfESyVolIdd+PtDDtioqcbFf03DFhDWGOwGE9+0Tx/
3IToaGAuq1O8+vRhiosaftt4+3V3AZwXoVB8rOBevFUZKjKsC9dLh4uI6L+RmsTP
cTAVnjrYCvYPwXDqIFml6t8sRjNa0vxuzhmbblxlBGlg5XkmgQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJ49+X/WuysZksrHa0VOHYhnfgjGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mNWRk
MmYzYi1kNTQ0LTRhOTAtODRhNS01OGFmMGRiODRkYWIvYzlmZjZlOTYtZTdkNi0z
YjJlLTljYzktYzZhMWI1MzA0NmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjVkZDJmM2ItZDU0NC00YTkwLTg0
YTUtNThhZjBkYjg0ZGFiL2Y1ZGQyZjNiLWQ1NDQtNGE5MC04NGE1LTU4YWYwZGI4
NGRhYi5jcmwwHwYDVR0jBBgwFoAUKiF+2Cg60kH+z+XpHTI/wLeK9wswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9mNWRkMmYzYi1kNTQ0LTRhOTAtODRhNS01OGFm
MGRiODRkYWIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgeDgDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCgAxsM6wVuijbq57c96VzRm01tl6u9vuAeVBHr5IKV/wm46IFciorh
j0T2MNyXSuJdKUCID3nsbuxWZPt9v3zJD/MIVqimuyH/N0xhVGKZPD4QOi3RMpVY
WOVvsHAZr/sDW/k5j+iABfaAxIr+NG4Yu5KuZ3yXnIm1DjCz6kqwZnxVNE+oSN0/
HvEMX3vR6UTByV8ikwmpefCNPL5l9gMpylK0bXfJTw2lN2VAUsXiJyr1xglHqKB8
90SfUMy+Wj7tJGYZgYBmQItsL340Jw3iKuKJQQNlEiMxDubBDWijCWT+/qIbk0jp
aWfrQrLEhl48b0sz11aHKr0a8/JAgmRT
-----END CERTIFICATE-----
Generated at Mon Apr 28 21:25:55 2025 by rpki-client