Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/898410af-ac70-3e04-baa6-faae0084dd05.roa
File: 898410af-ac70-3e04-baa6-faae0084dd05.roa (raw, json)
Hash identifier: Hl2NBDMRS8qJIbiLCZAbzwzgJwHUo6V8aWfk1MjpOLY=
Subject key identifier: 35:05:B5:83:52:5A:52:DA:AB:1C:89:DA:6A:19:CD:77:63:B8:55:5A
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858481C9A8408EE00227A9FA47780
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/898410af-ac70-3e04-baa6-faae0084dd05.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 12222
IP address blocks: 2001:4878:31::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:84:08:ee:00:22:7a:9f:a4:77:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=e59c019f-6043-408b-909c-bcc36a137d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ee:bd:a1:1d:dc:a4:cb:71:b4:53:4c:cb:26:
4c:92:dd:b1:06:82:de:51:80:f2:34:71:4a:61:66:
14:f4:d8:5a:19:7e:c8:31:98:a1:fd:05:77:04:73:
19:88:ad:2e:d4:ff:6c:4a:81:f5:a4:5d:f1:05:33:
dd:c5:c5:65:27:8c:0c:a3:65:e2:36:89:f7:4d:34:
41:3b:a2:0d:b9:34:4d:74:55:e8:b5:ba:96:f4:23:
c4:29:f8:d4:7b:cd:21:19:ab:3d:3c:9e:fa:f0:6e:
07:c7:00:92:f4:24:7b:a2:ce:99:53:3d:99:84:29:
32:37:81:24:d6:e2:ee:62:f3:01:57:9f:2b:78:b7:
5b:fd:30:f5:b8:d8:24:79:06:6f:37:76:8b:75:5a:
aa:4a:11:50:03:2a:e7:27:45:10:ef:c2:77:ef:fa:
e9:a2:89:7c:4e:ca:31:d9:92:00:d7:5c:10:62:d2:
ff:0b:17:2d:52:3b:de:c8:d4:f8:94:4d:6a:67:2e:
1a:e3:05:fd:a3:60:a7:76:aa:c5:e5:3b:bf:d5:f2:
93:ff:f9:b9:2a:59:73:b5:05:87:ca:42:cc:ea:44:
b7:d5:f7:b7:20:4e:94:59:9e:77:24:77:f5:27:f9:
84:82:03:d7:6a:bc:e6:a4:07:62:12:5d:a4:bb:e2:
ca:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:05:B5:83:52:5A:52:DA:AB:1C:89:DA:6A:19:CD:77:63:B8:55:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/898410af-ac70-3e04-baa6-faae0084dd05.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4878:31::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:06:42:ad:88:d3:b6:16:3c:12:73:5d:a2:a4:7b:6f:61:34:
55:27:eb:13:f3:6b:47:cd:a7:7a:22:21:82:34:f1:df:36:d9:
42:d0:8a:7e:26:36:9a:85:68:8a:ac:bf:86:c7:ba:63:e7:1c:
79:0c:23:43:35:a2:73:ea:d5:9b:47:e1:7e:b3:74:c2:b0:ad:
0b:b9:97:56:23:6f:f6:c9:77:c1:4b:38:41:96:90:74:09:12:
57:12:be:c3:32:e5:9a:81:3c:a7:8e:2b:1a:28:83:11:bb:72:
7b:11:78:cb:9d:a8:8a:dc:47:99:95:c8:ba:a6:b8:cc:40:05:
26:4d:c6:fe:f4:3b:d4:76:c8:41:22:a6:da:30:6d:25:d2:a0:
1e:5d:27:31:48:fd:78:90:a7:7a:8b:a0:dd:d4:ee:4b:bd:88:
80:de:bb:e0:6a:c8:49:49:b8:35:3a:62:7a:e7:8a:71:0d:5b:
b1:fd:5c:cc:c4:41:1a:6a:62:22:35:40:47:36:e4:1e:42:cc:
40:76:2d:53:09:21:27:ae:cb:29:ef:10:4c:ab:14:98:b7:80:
78:d5:41:50:56:cc:10:96:53:45:de:3b:04:2c:70:a4:b4:6d:
a7:69:8b:09:e9:78:7b:19:a1:c9:bc:4f:90:dc:dd:57:c2:3f:
2e:e3:ee:b8
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgcmoQI7gAiep+kd4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIwNjAyMDAzOVoXDTI1MDMwNjAyMDAzOVowLzEtMCsGA1UEAxMk
ZTU5YzAxOWYtNjA0My00MDhiLTkwOWMtYmNjMzZhMTM3ZDE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAle69oR3cpMtxtFNMyyZMkt2xBoLeUYDyNHFK
YWYU9NhaGX7IMZih/QV3BHMZiK0u1P9sSoH1pF3xBTPdxcVlJ4wMo2XiNon3TTRB
O6INuTRNdFXotbqW9CPEKfjUe80hGas9PJ768G4HxwCS9CR7os6ZUz2ZhCkyN4Ek
1uLuYvMBV58reLdb/TD1uNgkeQZvN3aLdVqqShFQAyrnJ0UQ78J37/rpool8Tsox
2ZIA11wQYtL/CxctUjveyNT4lE1qZy4a4wX9o2CndqrF5Tu/1fKT//m5KllztQWH
ykLM6kS31fe3IE6UWZ53JHf1J/mEggPXarzmpAdiEl2ku+LK/wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDUFtYNSWlLaqxyJ2moZzXdjuFVaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODk4NDEwYWYtYWM3MC0z
ZTA0LWJhYTYtZmFhZTAwODRkZDA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeAAx
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFAGQq2I07YWPBJzXaKke29hNFUn6xPza0fNp3oiIYI08d822ULQ
in4mNpqFaIqsv4bHumPnHHkMI0M1onPq1ZtH4X6zdMKwrQu5l1Yjb/bJd8FLOEGW
kHQJElcSvsMy5ZqBPKeOKxoogxG7cnsReMudqIrcR5mVyLqmuMxABSZNxv70O9R2
yEEiptowbSXSoB5dJzFI/XiQp3qLoN3U7ku9iIDeu+BqyElJuDU6YnrninENW7H9
XMzEQRpqYiI1QEc25B5CzEB2LVMJISeuyynvEEyrFJi3gHjVQVBWzBCWU0XeOwQs
cKS0badpiwnpeHsZocm8T5Dc3VfCPy7j7rg=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:57:30 2025 by rpki-client