Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dee2de8e-c54e-3138-8de1-32dfddf86e49.roa
File: dee2de8e-c54e-3138-8de1-32dfddf86e49.roa (raw, json)
Hash identifier: PqWwu+6dgr20ixknCmyLfEmAhsSdbJlbWgAymWjpNno=
Subject key identifier: FF:49:D3:54:5C:E7:35:5D:92:49:D3:4D:8B:03:D0:3D:7D:E2:71:0A
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858481C9A86551EC394E439E28380
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dee2de8e-c54e-3138-8de1-32dfddf86e49.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 12222
IP address blocks: 2001:4878:2217::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:86:55:1e:c3:94:e4:39:e2:83:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=d99e47c0-36e9-4693-ad3e-9cf1afa8cd28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a3:8e:c1:c8:2b:7d:c2:75:9f:81:3c:06:9c:
b7:42:18:7f:01:c9:4e:f5:f2:2b:3d:bf:2f:e6:65:
52:d4:8b:4b:41:23:57:27:4b:ea:09:93:b2:01:6c:
72:56:6a:c4:ff:73:c9:de:fd:c3:94:65:bf:13:58:
6c:23:fa:3e:ac:5c:f0:cd:53:27:6b:0e:4f:80:17:
5b:f2:5e:4f:03:29:82:3c:f1:12:53:d1:00:fc:41:
39:9b:25:d9:fe:91:3c:76:77:77:28:8d:35:7d:d0:
bb:0b:fa:0a:df:b1:27:18:25:5a:55:bc:81:4a:43:
a1:26:5a:85:a8:9b:3e:0d:af:02:9e:0c:23:44:6c:
ec:82:09:68:66:c1:43:13:72:93:8c:2d:49:c3:93:
31:74:e8:c6:fe:d2:79:54:bf:c9:74:28:39:2e:33:
8e:dc:6a:fb:28:44:12:95:08:b6:6b:75:31:1b:0a:
b4:56:f7:05:fa:92:3b:f0:da:ba:f2:18:fb:a0:dc:
76:a4:00:91:36:72:92:46:53:43:3b:c9:91:cc:81:
33:6e:ee:9f:3e:d3:dd:5f:07:21:56:08:92:8c:2b:
f9:8c:01:84:35:be:4e:f3:28:58:85:d3:fc:02:67:
64:8e:ef:ec:fb:a9:84:ce:dd:5a:dd:bf:23:50:b5:
cd:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:49:D3:54:5C:E7:35:5D:92:49:D3:4D:8B:03:D0:3D:7D:E2:71:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dee2de8e-c54e-3138-8de1-32dfddf86e49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4878:2217::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:a6:e5:ea:4f:71:4a:0f:95:07:94:bb:51:38:51:2f:ed:4d:
e5:6b:8c:f4:57:e2:b3:d5:b1:39:00:af:de:25:2f:46:3f:bd:
04:14:b2:3a:3e:c3:d0:8c:43:35:5f:48:f6:b0:0c:5a:cc:73:
ba:dd:67:13:64:0a:5c:13:8f:33:c7:88:5c:8e:38:02:61:f8:
dc:6d:87:ef:78:c5:d8:a4:c6:96:16:a3:e6:ab:0c:95:f6:11:
13:9e:e8:ae:31:6d:72:3e:cd:24:bf:03:77:3d:ff:5b:45:e3:
3a:3a:97:66:10:0b:c9:8c:93:1d:91:f6:69:c3:9b:91:de:67:
27:20:d2:ba:79:4a:5a:7e:52:87:fc:06:ac:e5:68:e0:67:aa:
37:b2:07:e4:cf:81:b5:d8:28:37:2e:f3:29:43:f7:ae:ff:83:
c4:c4:80:fe:68:58:91:24:90:30:b5:b0:d1:be:b8:2f:cf:70:
ea:45:49:e8:e8:a8:05:19:1c:08:1f:83:cd:e6:66:f6:8d:35:
3c:7d:c9:bb:d0:c6:c4:d2:99:37:43:c6:aa:02:7d:e4:1b:5d:
dd:a8:94:6e:25:d7:fa:2e:79:a9:54:42:50:91:97:3d:d0:11:
23:ca:02:15:8e:88:f0:26:b2:43:5d:08:4d:99:bd:a3:cb:dc:
e5:de:ec:c9
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgcmoZVHsOU5Dnig4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIwNjAyMDAzOVoXDTI1MDMwNjAyMDAzOVowLzEtMCsGA1UEAxMk
ZDk5ZTQ3YzAtMzZlOS00NjkzLWFkM2UtOWNmMWFmYThjZDI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaOOwcgrfcJ1n4E8Bpy3Qhh/AclO9fIrPb8v
5mVS1ItLQSNXJ0vqCZOyAWxyVmrE/3PJ3v3DlGW/E1hsI/o+rFzwzVMnaw5PgBdb
8l5PAymCPPESU9EA/EE5myXZ/pE8dnd3KI01fdC7C/oK37EnGCVaVbyBSkOhJlqF
qJs+Da8CngwjRGzsggloZsFDE3KTjC1Jw5MxdOjG/tJ5VL/JdCg5LjOO3Gr7KEQS
lQi2a3UxGwq0VvcF+pI78Nq68hj7oNx2pACRNnKSRlNDO8mRzIEzbu6fPtPdXwch
VgiSjCv5jAGENb5O8yhYhdP8Amdkju/s+6mEzt1a3b8jULXNHwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFP9J01Rc5zVdkknTTYsD0D194nEKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGVlMmRlOGUtYzU0ZS0z
MTM4LThkZTEtMzJkZmRkZjg2ZTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeCIX
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHum5epPcUoPlQeUu1E4US/tTeVrjPRX4rPVsTkAr94lL0Y/vQQU
sjo+w9CMQzVfSPawDFrMc7rdZxNkClwTjzPHiFyOOAJh+Nxth+94xdikxpYWo+ar
DJX2EROe6K4xbXI+zSS/A3c9/1tF4zo6l2YQC8mMkx2R9mnDm5HeZycg0rp5Slp+
Uof8BqzlaOBnqjeyB+TPgbXYKDcu8ylD967/g8TEgP5oWJEkkDC1sNG+uC/PcOpF
SejoqAUZHAgfg83mZvaNNTx9ybvQxsTSmTdDxqoCfeQbXd2olG4l1/ouealUQlCR
lz3QESPKAhWOiPAmskNdCE2ZvaPL3OXe7Mk=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:43:59 2025 by rpki-client