Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/90f4c7fa-9312-3ee8-b712-7cdd62bca48d.roa
File: 90f4c7fa-9312-3ee8-b712-7cdd62bca48d.roa (raw, json)
Hash identifier: DRb8wTYmpzbwcSrGY7R3NVaApvqUwgceOFlUiQ0MfX0=
Subject key identifier: 42:5A:C4:8C:D2:CB:A7:BF:DB:B6:75:D7:B8:BF:54:21:E7:11:E7:D3
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D13D3DAAE4457BB762FE40
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/90f4c7fa-9312-3ee8-b712-7cdd62bca48d.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 11351
IP address blocks: 2600:6000:fdbd::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:3d:3d:aa:e4:45:7b:b7:62:fe:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=012822dd-49d5-48de-8c7f-eed3ccb3a00c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9a:8c:19:b4:a2:90:e7:59:51:5c:98:5e:c4:
25:16:1d:49:5b:f8:ac:59:b4:62:db:a3:29:52:e2:
c2:cf:57:7b:32:15:db:0f:e2:9c:68:0c:48:62:b2:
f5:1f:d5:aa:ac:71:52:71:c7:24:0e:2e:41:f5:41:
49:05:ad:38:4e:24:9e:38:b5:ae:39:dc:ad:c1:b4:
17:84:b1:09:1f:ba:63:6f:50:76:fe:7d:64:31:ec:
99:86:66:72:33:57:13:94:e0:00:d4:23:a0:a4:42:
81:d0:17:e8:90:02:cc:40:d2:12:d9:84:17:b7:29:
cb:42:50:8a:d0:b0:52:86:99:07:8b:09:aa:ed:64:
f1:b5:1d:74:60:26:f3:07:d1:fe:31:2c:97:f4:5a:
39:e2:1f:01:9a:b6:01:4b:c7:95:28:d0:d5:65:0c:
55:e5:c2:57:9a:9b:40:82:6a:ed:28:2a:cc:b8:91:
5a:24:dc:5b:df:7b:3e:49:4f:0d:ad:8d:36:cc:3f:
b9:92:c3:b1:ea:4d:dd:6b:55:42:7b:d2:a9:9a:ea:
1e:54:36:9d:af:a9:e2:99:36:90:d2:fb:3f:f6:47:
86:bc:ae:e4:fc:76:fd:de:31:63:f0:1d:fe:3c:19:
4a:1e:72:30:89:f3:ef:db:fe:5e:31:94:8f:01:08:
86:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:5A:C4:8C:D2:CB:A7:BF:DB:B6:75:D7:B8:BF:54:21:E7:11:E7:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/90f4c7fa-9312-3ee8-b712-7cdd62bca48d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:6000:fdbd::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:d3:80:7c:4a:16:b6:ce:e0:78:7b:23:77:1d:59:a4:29:fd:
a9:5c:9d:00:d4:bb:f4:9b:24:b1:61:f4:33:86:9d:ed:e1:37:
1a:a6:0f:9e:b4:fd:67:37:f3:eb:57:03:60:c0:fd:2f:90:57:
dc:90:54:74:0e:e6:4a:fb:53:5f:58:f0:9a:f2:06:f0:d1:d5:
db:6f:0d:e4:1d:19:82:37:8a:8e:1e:dd:93:39:41:ad:86:fe:
c3:69:91:1b:c7:0e:83:4d:c4:a9:ab:f1:9d:d0:03:31:a3:84:
e3:26:2e:63:df:3a:c1:dc:1d:64:f1:91:21:57:15:ff:2f:cb:
6d:82:3a:90:f2:f0:40:44:ab:d7:72:1a:f8:61:c9:c6:75:f6:
e7:fe:5b:eb:ce:4e:56:24:d0:4f:22:4a:f3:d9:f2:e9:6b:23:
81:7c:91:58:0c:8d:2a:1f:5a:49:34:6b:35:5c:35:f8:b8:b7:
32:36:87:41:ce:ea:9a:4b:3b:7c:69:8a:b2:fa:28:c6:ce:41:
e5:ec:e6:8a:b8:af:45:d2:1b:b0:97:0f:43:f7:ba:7a:b1:2b:
07:2e:f2:b3:75:9b:9d:63:07:c8:0e:69:82:bd:13:c1:56:2b:
08:87:90:5a:d6:74:0f:ea:22:2d:cc:20:06:c0:4b:9b:e3:37:
6a:ff:96:73
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEji0T09quRFe7di/kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
MDEyODIyZGQtNDlkNS00OGRlLThjN2YtZWVkM2NjYjNhMDBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZqMGbSikOdZUVyYXsQlFh1JW/isWbRi26Mp
UuLCz1d7MhXbD+KcaAxIYrL1H9WqrHFSccckDi5B9UFJBa04TiSeOLWuOdytwbQX
hLEJH7pjb1B2/n1kMeyZhmZyM1cTlOAA1COgpEKB0BfokALMQNIS2YQXtynLQlCK
0LBShpkHiwmq7WTxtR10YCbzB9H+MSyX9Fo54h8BmrYBS8eVKNDVZQxV5cJXmptA
gmrtKCrMuJFaJNxb33s+SU8NrY02zD+5ksOx6k3da1VCe9KpmuoeVDadr6nimTaQ
0vs/9keGvK7k/Hb93jFj8B3+PBlKHnIwifPv2/5eMZSPAQiGhwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEJaxIzSy6e/27Z117i/VCHnEefTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvOTBmNGM3ZmEtOTMxMi0z
ZWU4LWI3MTItN2NkZDYyYmNhNDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgBgAP29
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAPTgHxKFrbO4Hh7I3cdWaQp/alcnQDUu/SbJLFh9DOGne3hNxqm
D560/Wc38+tXA2DA/S+QV9yQVHQO5kr7U19Y8JryBvDR1dtvDeQdGYI3io4e3ZM5
Qa2G/sNpkRvHDoNNxKmr8Z3QAzGjhOMmLmPfOsHcHWTxkSFXFf8vy22COpDy8EBE
q9dyGvhhycZ19uf+W+vOTlYk0E8iSvPZ8ulrI4F8kVgMjSofWkk0azVcNfi4tzI2
h0HO6ppLO3xpirL6KMbOQeXs5oq4r0XSG7CXD0P3unqxKwcu8rN1m51jB8gOaYK9
E8FWKwiHkFrWdA/qIi3MIAbAS5vjN2r/lnM=
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:09:36 2025 by rpki-client