Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967/1daa9c96-6c77-3e9b-8931-9c894798cfc9.roa
File: 1daa9c96-6c77-3e9b-8931-9c894798cfc9.roa (raw, json)
Hash identifier: miTDY7GhsfYAoFM8tjLVCUDoEqYQAbj7fdehBykiFbA=
Subject key identifier: 8B:56:2A:7D:11:1D:C0:DD:24:DA:54:40:5F:48:69:26:A3:51:7B:E1
Certificate issuer: /CN=5c264ed0-521b-453b-b8f6-85ab4d47c967
Certificate serial: 010D0C9F43285848BBBB85B8C76714C58E4F7B00
Authority key identifier: 9F:28:CD:08:1C:CC:44:29:16:B0:7C:6D:18:9B:2E:B9:E6:02:4F:DF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967/1daa9c96-6c77-3e9b-8931-9c894798cfc9.roa
Signing time: Sat 01 Feb 2025 02:00:39 +0000
ROA not before: Sat 01 Feb 2025 02:00:39 +0000
ROA not after: Fri 02 May 2025 01:00:39 +0000
asID: 55230
IP address blocks: 2604:c580::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bb:bb:85:b8:c7:67:14:c5:8e:4f:7b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c264ed0-521b-453b-b8f6-85ab4d47c967
Validity
Not Before: Feb 1 02:00:39 2025 GMT
Not After : May 2 01:00:39 2025 GMT
Subject: CN=827a3ca5-b2e2-4211-a60d-cd51c06ae1b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d0:c1:d2:16:77:b1:22:41:1f:28:af:a8:9f:
7b:86:a9:36:67:a0:bb:2d:7e:c2:fa:8c:eb:a6:aa:
ff:80:8e:ca:81:76:b2:95:92:21:90:3f:7b:36:96:
27:f7:39:8c:fa:5b:29:c2:a1:1e:84:17:62:82:bd:
9b:26:a8:a7:e8:8f:f6:a7:e2:b8:41:af:48:61:3a:
65:2b:70:8f:54:1b:a9:69:5c:e9:bb:a8:40:0a:9b:
90:15:ce:cf:8f:d8:ba:8c:32:a5:58:8d:61:77:e9:
31:8f:c4:b2:09:f5:80:06:05:e2:cd:cd:92:3b:ef:
46:34:53:a1:44:dd:08:9d:03:cd:03:38:71:67:a4:
5d:83:9e:ab:08:64:69:d0:bd:a8:9a:ce:0c:b5:a4:
7e:08:a1:c1:10:df:2b:fc:01:fa:c2:6c:fd:c1:40:
63:b7:58:a8:31:30:5f:14:e8:e2:79:b6:f9:7e:f8:
a3:c0:bf:02:7b:db:16:ca:e8:9f:6b:ed:09:4f:90:
a5:cb:41:b1:dc:2e:ab:b3:c5:5c:5e:49:76:0a:ff:
6f:a5:56:45:e3:3f:94:58:b3:02:e7:a7:76:38:e4:
3f:9b:13:7b:12:ca:38:67:7f:96:8e:56:97:58:39:
9c:71:61:23:a4:1b:d8:b5:6c:6d:22:7e:7d:97:1a:
8e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:56:2A:7D:11:1D:C0:DD:24:DA:54:40:5F:48:69:26:A3:51:7B:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967/1daa9c96-6c77-3e9b-8931-9c894798cfc9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967/5c264ed0-521b-453b-b8f6-85ab4d47c967.crl
X509v3 Authority Key Identifier:
keyid:9F:28:CD:08:1C:CC:44:29:16:B0:7C:6D:18:9B:2E:B9:E6:02:4F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:c580::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:68:a3:56:fc:5f:10:7a:a5:60:83:a7:2e:42:2f:11:bf:e9:
5a:dc:05:d0:9e:75:1d:07:54:93:7b:87:f0:0d:d8:e8:a2:69:
1e:91:ba:93:9b:af:b0:f1:b5:2a:91:da:87:33:19:89:9c:5f:
2c:cb:73:c7:ba:cd:4e:cb:9d:fe:b1:52:c9:92:05:5c:56:b8:
90:2a:38:e7:6a:c4:26:3a:b6:fc:b2:cb:89:87:09:65:f3:73:
56:14:93:79:d4:e9:be:b4:28:05:a6:0d:ac:41:e1:c7:3d:2d:
17:1a:e5:58:12:6b:fc:a9:7a:64:d6:16:18:fb:53:73:f8:cb:
64:12:36:26:0c:c5:8f:30:f2:73:2e:5e:fe:e6:ea:b2:47:a0:
63:21:dc:8d:0e:ba:70:ba:2c:d5:77:f2:4e:3f:a4:c7:9c:c0:
12:f2:48:58:31:bc:86:8b:fb:28:fc:98:fb:f4:43:76:8a:28:
0a:5d:1a:ed:6e:20:10:e8:ca:31:f9:42:17:ea:b0:df:02:44:
70:87:71:d0:b6:02:c8:21:e9:97:86:10:33:ec:90:dd:d0:79:
63:c7:6d:1c:a9:3b:9d:5d:e6:6a:9e:28:38:cd:b3:fb:41:ed:
8b:8a:98:bb:e2:5f:3c:89:6a:3d:d3:f9:53:fb:1f:16:9a:43:
fa:56:ec:f5
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEi7u4W4x2cUxY5PewAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWMyNjRlZDAtNTIxYi00NTNiLWI4ZjYtODVhYjRkNDdj
OTY3MB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk
ODI3YTNjYTUtYjJlMi00MjExLWE2MGQtY2Q1MWMwNmFlMWI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltDB0hZ3sSJBHyivqJ97hqk2Z6C7LX7C+ozr
pqr/gI7KgXaylZIhkD97NpYn9zmM+lspwqEehBdigr2bJqin6I/2p+K4Qa9IYTpl
K3CPVBupaVzpu6hACpuQFc7Pj9i6jDKlWI1hd+kxj8SyCfWABgXizc2SO+9GNFOh
RN0InQPNAzhxZ6Rdg56rCGRp0L2oms4MtaR+CKHBEN8r/AH6wmz9wUBjt1ioMTBf
FOjiebb5fvijwL8Ce9sWyuifa+0JT5Cly0Gx3C6rs8VcXkl2Cv9vpVZF4z+UWLMC
56d2OOQ/mxN7Eso4Z3+WjlaXWDmccWEjpBvYtWxtIn59lxqOaQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFItWKn0RHcDdJNpUQF9IaSajUXvhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YzI2
NGVkMC01MjFiLTQ1M2ItYjhmNi04NWFiNGQ0N2M5NjcvMWRhYTljOTYtNmM3Ny0z
ZTliLTg5MzEtOWM4OTQ3OThjZmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWMyNjRlZDAtNTIxYi00NTNiLWI4
ZjYtODVhYjRkNDdjOTY3LzVjMjY0ZWQwLTUyMWItNDUzYi1iOGY2LTg1YWI0ZDQ3
Yzk2Ny5jcmwwHwYDVR0jBBgwFoAUnyjNCBzMRCkWsHxtGJsuueYCT98wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi81YzI2NGVkMC01MjFiLTQ1M2ItYjhmNi04NWFi
NGQ0N2M5NjcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTFgDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCraKNW/F8QeqVgg6cuQi8Rv+la3AXQnnUdB1STe4fwDdjoomkekbqT
m6+w8bUqkdqHMxmJnF8sy3PHus1Oy53+sVLJkgVcVriQKjjnasQmOrb8ssuJhwll
83NWFJN51Om+tCgFpg2sQeHHPS0XGuVYEmv8qXpk1hYY+1Nz+MtkEjYmDMWPMPJz
Ll7+5uqyR6BjIdyNDrpwuizVd/JOP6THnMAS8khYMbyGi/so/Jj79EN2iigKXRrt
biAQ6Mox+UIX6rDfAkRwh3HQtgLIIemXhhAz7JDd0Hljx20cqTudXeZqnig4zbP7
Qe2Lipi74l88iWo90/lT+x8WmkP6Vuz1
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:01:17 2025 by rpki-client