Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4e870bb8-c853-32ab-afb5-51ed3c50f4a9.roa
File: 4e870bb8-c853-32ab-afb5-51ed3c50f4a9.roa (raw, json)
Hash identifier: 8S3+C4C56rLZ1bCY8TUF+4uk/ED7jwIDQ0/1wRe6YSA=
Subject key identifier: 6D:BF:6B:6C:46:0F:A5:1F:0C:FD:8D:6F:19:F9:B6:0E:7E:41:9D:8B
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584819CFD0086E40556EEF0DB9C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4e870bb8-c853-32ab-afb5-51ed3c50f4a9.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 33905
IP address blocks: 2600:1480:5000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:d0:08:6e:40:55:6e:ef:0d:b9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=e6b6faf2-4f1a-41e1-8543-a3fa7dd12f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:67:08:c4:89:fd:d9:ce:5c:ed:7c:c3:a2:bd:
84:4c:b6:02:27:1a:9f:20:ed:78:82:23:d6:f1:9f:
f8:e1:64:23:6a:a5:46:2b:20:0a:9b:f4:30:0e:a1:
e0:55:12:c6:ad:6d:de:47:53:67:74:76:1f:f9:dc:
63:94:ee:53:a8:ca:25:a5:93:c7:d4:13:fb:26:c3:
9b:a0:40:12:c7:10:76:8c:04:14:ac:1e:57:3d:ad:
54:f9:1b:d1:14:e7:f6:f1:0c:a6:34:33:75:16:a3:
bd:f6:d5:df:b8:4e:9b:50:d5:f2:5d:6b:f1:5e:07:
b5:7a:74:19:0c:cf:55:a7:18:a3:cd:ec:30:a6:29:
b0:49:19:3e:23:94:dd:d8:63:d2:1b:5f:9f:53:1b:
bb:12:58:e1:b3:4b:ed:dc:91:f5:d0:fa:11:95:f0:
d9:95:d4:a5:4d:80:52:1b:0f:99:39:b9:50:11:21:
15:71:c7:08:d9:ab:f8:8a:6b:d0:1e:08:92:67:3f:
6d:42:c0:32:63:c1:34:7a:dd:75:23:0c:7d:ce:a8:
9a:06:12:12:40:b2:f8:f0:ff:09:83:45:7e:c1:ed:
b8:5d:ff:91:a1:7a:7c:99:9b:52:47:5d:32:b8:1e:
01:94:02:41:31:83:07:a3:e1:f7:d2:23:d3:e0:5f:
ea:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:BF:6B:6C:46:0F:A5:1F:0C:FD:8D:6F:19:F9:B6:0E:7E:41:9D:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4e870bb8-c853-32ab-afb5-51ed3c50f4a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1480:5000::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:9b:1a:ce:e3:a0:ab:83:ec:0a:44:59:45:19:8b:6c:40:16:
04:79:5e:a4:11:09:37:ca:57:11:1f:51:56:f8:6f:4f:c7:b7:
89:2f:fd:49:0d:fb:1d:b7:60:d6:d8:2e:30:63:e8:43:5a:7d:
67:f2:7b:18:36:d3:4a:a3:ec:43:4d:9d:77:2d:68:2f:29:f3:
25:29:5f:e0:d1:9c:63:30:87:09:88:b4:14:84:75:e8:b1:fc:
d5:06:b1:e0:e9:37:f5:32:e3:c6:73:5a:fd:89:59:15:37:aa:
8a:2b:17:31:0a:f6:cc:2e:7e:76:c6:25:08:5a:8f:aa:76:a2:
f4:e5:b4:cb:ec:9f:e3:c0:6a:cf:8b:11:1f:8e:55:18:11:cf:
ef:22:7b:b3:4e:e3:88:d1:2b:46:cd:b6:b9:52:e4:31:1c:86:
bb:0c:da:76:81:6a:28:87:e8:21:39:49:b9:00:52:1c:37:bc:
59:46:cc:75:34:26:3c:b6:51:46:49:e3:b8:c1:aa:d7:6b:f3:
c1:42:89:fe:95:b1:d3:0a:e6:6b:27:70:63:cc:67:93:c4:f7:
9f:8f:01:8f:2b:fc:52:0e:46:1b:df:f4:33:51:b6:67:c8:2d:
dd:ea:81:46:fb:05:77:b1:67:d5:08:3a:36:84:6c:04:4d:4b:
f7:0c:b9:8b
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEgZz9AIbkBVbu8NucAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIwNTAyMDAzOVoXDTI1MDMwNTAyMDAzOVowLzEtMCsGA1UEAxMk
ZTZiNmZhZjItNGYxYS00MWUxLTg1NDMtYTNmYTdkZDEyZjgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2cIxIn92c5c7XzDor2ETLYCJxqfIO14giPW
8Z/44WQjaqVGKyAKm/QwDqHgVRLGrW3eR1NndHYf+dxjlO5TqMolpZPH1BP7JsOb
oEASxxB2jAQUrB5XPa1U+RvRFOf28QymNDN1FqO99tXfuE6bUNXyXWvxXge1enQZ
DM9VpxijzewwpimwSRk+I5Td2GPSG1+fUxu7Eljhs0vt3JH10PoRlfDZldSlTYBS
Gw+ZOblQESEVcccI2av4imvQHgiSZz9tQsAyY8E0et11Iwx9zqiaBhISQLL48P8J
g0V+we24Xf+RoXp8mZtSR10yuB4BlAJBMYMHo+H30iPT4F/qxQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFG2/a2xGD6UfDP2Nbxn5tg5+QZ2LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGU4NzBiYjgtYzg1My0z
MmFiLWFmYjUtNTFlZDNjNTBmNGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgAUgFAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAC5sazuOgq4PsCkRZRRmLbEAWBHlepBEJN8pXER9RVvhvT8e3iS/9
SQ37Hbdg1tguMGPoQ1p9Z/J7GDbTSqPsQ02ddy1oLynzJSlf4NGcYzCHCYi0FIR1
6LH81Qax4Ok39TLjxnNa/YlZFTeqiisXMQr2zC5+dsYlCFqPqnai9OW0y+yf48Bq
z4sRH45VGBHP7yJ7s07jiNErRs22uVLkMRyGuwzadoFqKIfoITlJuQBSHDe8WUbM
dTQmPLZRRknjuMGq12vzwUKJ/pWx0wrmaydwY8xnk8T3n48Bjyv8Ug5GG9/0M1G2
Z8gt3eqBRvsFd7Fn1Qg6NoRsBE1L9wy5iw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:38:42 2025 by rpki-client