Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/b09245bf-b3ad-356b-81f0-f0f8bf033b0c.roa
File: b09245bf-b3ad-356b-81f0-f0f8bf033b0c.roa (raw, json)
Hash identifier: cYuQuASF2dHxKPHwIwewGXRDzEN4X7Lmmp2+yroGHZM=
Subject key identifier: 0E:3A:2E:00:15:52:47:36:FF:4C:A3:07:95:30:BB:E8:09:0F:A8:8D
Certificate issuer: /CN=7e4fb68f-edad-45a2-98d4-e937526bfa31
Certificate serial: 010D0C9F43285847FB1A2823DD21C7B8509C6400
Authority key identifier: 43:79:8E:C3:30:41:09:01:3D:81:6A:0F:39:2B:8F:AB:7E:9B:B8:38
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/b09245bf-b3ad-356b-81f0-f0f8bf033b0c.roa
Signing time: Sun 24 Nov 2024 02:00:27 +0000
ROA not before: Sun 24 Nov 2024 02:00:27 +0000
ROA not after: Sat 22 Feb 2025 02:00:27 +0000
asID: 958
IP address blocks: 2605:ac40:20::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fb:1a:28:23:dd:21:c7:b8:50:9c:64:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e4fb68f-edad-45a2-98d4-e937526bfa31
Validity
Not Before: Nov 24 02:00:27 2024 GMT
Not After : Feb 22 02:00:27 2025 GMT
Subject: CN=b5254343-2db1-41d1-9815-0181b7e91cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4c:29:af:56:04:4b:d8:b9:06:a5:dc:48:c3:
50:ee:36:e5:f5:59:57:49:bf:07:5c:f2:e1:48:b4:
0a:a4:3d:f9:77:c3:d3:f2:b6:be:f0:5c:76:76:a5:
02:ae:5a:b4:e1:ce:2a:e7:15:47:91:47:94:42:ff:
12:31:cc:7c:f9:d2:12:bf:81:0e:bb:f6:3b:2d:86:
bd:63:f8:c7:08:f2:01:56:63:fa:ca:36:52:c1:65:
8d:26:72:25:2c:9f:f1:91:b6:84:54:80:98:96:bd:
83:f2:af:a5:98:8f:fa:7b:1f:7f:aa:87:e6:01:29:
2e:fe:c1:0d:dd:e0:d0:77:57:80:07:a6:b7:71:c8:
73:d5:89:3e:2b:98:96:37:60:ff:dd:45:76:10:0e:
19:67:08:54:2b:73:a3:28:ce:e8:d0:a1:fc:77:53:
66:84:cf:f4:6d:1e:3c:ef:8e:9a:bb:b4:f4:24:fc:
99:ea:3f:0e:72:d9:97:19:a6:b8:fa:34:3a:74:d3:
92:58:f2:ee:28:d7:d7:cf:f0:0b:a4:eb:b0:3e:d4:
46:7b:55:2d:41:4d:71:53:3e:1b:01:16:18:79:b2:
ec:9f:81:23:b8:46:37:ad:f0:e8:9d:30:b5:29:5b:
fe:bc:26:e6:7e:2e:68:da:37:b0:3d:ad:a5:a0:89:
a6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:3A:2E:00:15:52:47:36:FF:4C:A3:07:95:30:BB:E8:09:0F:A8:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/b09245bf-b3ad-356b-81f0-f0f8bf033b0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/7e4fb68f-edad-45a2-98d4-e937526bfa31.crl
X509v3 Authority Key Identifier:
keyid:43:79:8E:C3:30:41:09:01:3D:81:6A:0F:39:2B:8F:AB:7E:9B:B8:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:ac40:20::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:2e:3f:ed:19:6f:5c:22:34:66:58:07:9f:ff:fe:ea:33:ad:
db:05:a9:91:40:4d:8d:c3:86:a7:d5:55:24:8f:06:73:e3:06:
b5:89:90:44:d1:24:bc:b4:a9:5d:fd:a9:4e:42:c1:bf:55:be:
36:2d:e9:6b:e6:6a:90:58:51:aa:32:05:06:82:60:0f:ac:87:
c4:80:fc:95:c6:86:05:53:a2:4b:50:63:d2:54:ad:f0:ec:dc:
72:0d:4b:0a:2d:2f:41:53:95:be:09:ee:10:36:82:5a:34:30:
f7:03:d6:a1:56:d1:40:09:e1:5c:53:6f:16:ec:da:14:f7:bc:
0c:db:f2:36:19:5f:db:cd:09:f3:a4:4d:c4:f1:0c:e3:d2:bf:
dc:53:1c:23:2f:10:05:44:fe:e5:38:fe:39:9d:9e:ca:2e:95:
0f:cf:11:ee:b2:66:dc:1b:e9:1d:84:4e:d4:f4:e2:ca:6f:fd:
e3:8b:67:bb:63:d6:6b:65:04:04:39:69:6a:70:5e:ed:6f:8d:
e0:fc:79:46:e2:41:51:f8:51:b0:66:e7:5b:b0:19:66:e4:ce:
0e:46:dd:25:97:26:4f:e3:2b:68:5f:c4:0b:de:b8:83:be:59:
c9:fb:7b:74:fb:5e:ce:4c:69:0b:e8:11:10:d4:ed:c9:83:ad:
74:85:9c:05
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEf7Gigj3SHHuFCcZAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0ZmI2OGYtZWRhZC00NWEyLTk4ZDQtZTkzNzUyNmJm
YTMxMB4XDTI0MTEyNDAyMDAyN1oXDTI1MDIyMjAyMDAyN1owLzEtMCsGA1UEAxMk
YjUyNTQzNDMtMmRiMS00MWQxLTk4MTUtMDE4MWI3ZTkxY2IxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0wpr1YES9i5BqXcSMNQ7jbl9VlXSb8HXPLh
SLQKpD35d8PT8ra+8Fx2dqUCrlq04c4q5xVHkUeUQv8SMcx8+dISv4EOu/Y7LYa9
Y/jHCPIBVmP6yjZSwWWNJnIlLJ/xkbaEVICYlr2D8q+lmI/6ex9/qofmASku/sEN
3eDQd1eAB6a3cchz1Yk+K5iWN2D/3UV2EA4ZZwhUK3OjKM7o0KH8d1NmhM/0bR48
746au7T0JPyZ6j8OctmXGaa4+jQ6dNOSWPLuKNfXz/ALpOuwPtRGe1UtQU1xUz4b
ARYYebLsn4EjuEY3rfDonTC1KVv+vCbmfi5o2jewPa2loImmgwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFA46LgAVUkc2/0yjB5Uwu+gJD6iNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTRm
YjY4Zi1lZGFkLTQ1YTItOThkNC1lOTM3NTI2YmZhMzEvYjA5MjQ1YmYtYjNhZC0z
NTZiLTgxZjAtZjBmOGJmMDMzYjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0ZmI2OGYtZWRhZC00NWEyLTk4
ZDQtZTkzNzUyNmJmYTMxLzdlNGZiNjhmLWVkYWQtNDVhMi05OGQ0LWU5Mzc1MjZi
ZmEzMS5jcmwwHwYDVR0jBBgwFoAUQ3mOwzBBCQE9gWoPOSuPq36buDgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTRmYjY4Zi1lZGFkLTQ1YTItOThkNC1lOTM3
NTI2YmZhMzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgWsQAAg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAK4uP+0Zb1wiNGZYB5///uozrdsFqZFATY3DhqfVVSSPBnPjBrWJ
kETRJLy0qV39qU5Cwb9VvjYt6WvmapBYUaoyBQaCYA+sh8SA/JXGhgVToktQY9JU
rfDs3HINSwotL0FTlb4J7hA2glo0MPcD1qFW0UAJ4VxTbxbs2hT3vAzb8jYZX9vN
CfOkTcTxDOPSv9xTHCMvEAVE/uU4/jmdnsoulQ/PEe6yZtwb6R2ETtT04spv/eOL
Z7tj1mtlBAQ5aWpwXu1vjeD8eUbiQVH4UbBm51uwGWbkzg5G3SWXJk/jK2hfxAve
uIO+Wcn7e3T7Xs5MaQvoERDU7cmDrXSFnAU=
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:53:48 2025 by rpki-client