Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7afae497-a3f6-4f52-abeb-632cca8db94a/9916c0f3-dcb9-3d6b-b1d1-bd73c842be2e.roa
File: 9916c0f3-dcb9-3d6b-b1d1-bd73c842be2e.roa (raw, json)
Hash identifier: YXgDdwJ7zmmesvPolfKiZNziuRyV0K1ncKVh2pfc+y0=
Subject key identifier: 93:47:A5:A8:02:80:00:2C:6D:AE:03:F5:A2:3E:F0:DE:86:51:7A:DE
Certificate issuer: /CN=7afae497-a3f6-4f52-abeb-632cca8db94a
Certificate serial: 010D0C9F43285848DBD66DFAAD907D458F7D2380
Authority key identifier: 4C:82:BD:2B:3F:94:20:83:FF:E4:68:4E:63:B7:64:55:C2:CB:79:A4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7afae497-a3f6-4f52-abeb-632cca8db94a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7afae497-a3f6-4f52-abeb-632cca8db94a/9916c0f3-dcb9-3d6b-b1d1-bd73c842be2e.roa
Signing time: Wed 12 Feb 2025 14:00:53 +0000
ROA not before: Wed 12 Feb 2025 14:00:53 +0000
ROA not after: Tue 13 May 2025 13:00:53 +0000
asID: 7029
IP address blocks: 2606:40c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:db:d6:6d:fa:ad:90:7d:45:8f:7d:23:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7afae497-a3f6-4f52-abeb-632cca8db94a
Validity
Not Before: Feb 12 14:00:53 2025 GMT
Not After : May 13 13:00:53 2025 GMT
Subject: CN=ec1943d4-a9ff-47ae-aadb-013dc041fb71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:77:3d:a4:6f:09:81:19:a6:b5:86:e9:63:56:
27:3a:51:1a:56:69:ec:b0:f4:b0:54:f5:12:d4:90:
5a:c5:b8:1a:b3:e9:31:b7:bb:3a:b5:ba:97:ed:7e:
02:35:51:34:e8:e4:04:84:60:64:48:63:79:ca:de:
5f:f7:8e:02:f7:25:11:19:17:26:8f:94:7b:70:61:
ca:cf:b4:bb:87:74:82:4f:13:0c:99:7d:fc:32:51:
a9:d7:ec:c7:66:c7:d6:27:05:e9:48:5d:1a:8a:a2:
dc:45:e7:2c:58:3a:e5:fd:35:df:21:73:63:6b:45:
2a:31:c2:1f:c2:b2:91:e8:bc:9d:0d:90:9f:e7:dd:
c8:58:b0:b7:68:eb:ef:ac:e0:48:02:b9:db:cd:a6:
4a:88:f7:02:a1:78:02:45:b6:dc:5c:cc:fd:0d:46:
7d:e0:6b:6f:e0:41:df:44:64:dc:ad:35:e2:eb:b0:
35:7e:c0:14:2e:3f:0e:26:17:35:05:cf:d3:de:b0:
af:09:50:c5:6b:89:d7:4e:80:bf:b9:d0:7b:df:47:
82:51:08:7e:5c:f6:00:93:94:b5:07:3a:7a:88:66:
4d:36:a8:87:9a:eb:97:f1:c5:93:a8:82:6b:8a:18:
82:83:00:16:85:2a:4b:25:f4:29:75:ef:47:7c:2e:
4c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:47:A5:A8:02:80:00:2C:6D:AE:03:F5:A2:3E:F0:DE:86:51:7A:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7afae497-a3f6-4f52-abeb-632cca8db94a/9916c0f3-dcb9-3d6b-b1d1-bd73c842be2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7afae497-a3f6-4f52-abeb-632cca8db94a/7afae497-a3f6-4f52-abeb-632cca8db94a.crl
X509v3 Authority Key Identifier:
keyid:4C:82:BD:2B:3F:94:20:83:FF:E4:68:4E:63:B7:64:55:C2:CB:79:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7afae497-a3f6-4f52-abeb-632cca8db94a.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:40c0::/29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:aa:f4:34:3c:19:b1:30:5e:32:06:5e:6b:76:3a:06:91:fc:
fd:f4:cc:d1:9d:fc:ed:37:c1:2d:d2:af:5b:f5:b4:c9:30:b8:
68:3f:0c:ae:73:62:46:77:a4:ed:ea:7a:d5:7b:0f:ad:a8:63:
a0:b4:72:b1:98:cf:e3:be:a3:47:da:1e:c2:36:15:0e:86:44:
6f:f4:28:2b:6b:ec:bd:e7:04:44:e8:76:dd:68:9f:64:30:29:
c7:fa:61:b7:70:34:f6:23:37:4a:c8:2d:b1:66:4a:43:95:b3:
e2:33:4b:7a:87:78:dc:b4:e6:bd:08:93:09:02:7f:48:a8:18:
8d:f6:7f:50:4d:77:61:b4:be:f5:83:72:90:f6:c5:04:9e:07:
0b:61:14:0f:2b:7f:0e:78:0f:1a:5d:ec:e6:8d:99:b0:d2:dc:
c3:17:ee:78:a1:20:3c:eb:8d:0d:57:c3:54:35:8e:1c:28:41:
e1:03:fd:a4:bd:fa:71:11:43:f8:a1:f8:2a:00:0a:c0:f9:b0:
66:8d:cd:31:86:f1:57:44:41:4c:49:99:13:ac:3f:f0:a6:fa:
75:bf:5d:cc:86:23:56:f6:39:2c:ea:24:72:e3:df:9f:8c:81:
45:f3:3a:40:5e:95:db:05:4b:08:b9:51:a1:7c:d3:be:34:01:
d2:2d:5c:cc
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjb1m36rZB9RY99I4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2FmYWU0OTctYTNmNi00ZjUyLWFiZWItNjMyY2NhOGRi
OTRhMB4XDTI1MDIxMjE0MDA1M1oXDTI1MDUxMzEzMDA1M1owLzEtMCsGA1UEAxMk
ZWMxOTQzZDQtYTlmZi00N2FlLWFhZGItMDEzZGMwNDFmYjcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHc9pG8JgRmmtYbpY1YnOlEaVmnssPSwVPUS
1JBaxbgas+kxt7s6tbqX7X4CNVE06OQEhGBkSGN5yt5f944C9yURGRcmj5R7cGHK
z7S7h3SCTxMMmX38MlGp1+zHZsfWJwXpSF0aiqLcRecsWDrl/TXfIXNja0UqMcIf
wrKR6LydDZCf593IWLC3aOvvrOBIArnbzaZKiPcCoXgCRbbcXMz9DUZ94Gtv4EHf
RGTcrTXi67A1fsAULj8OJhc1Bc/T3rCvCVDFa4nXToC/udB730eCUQh+XPYAk5S1
Bzp6iGZNNqiHmuuX8cWTqIJrihiCgwAWhSpLJfQpde9HfC5MjQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJNHpagCgAAsba4D9aI+8N6GUXreMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83YWZh
ZTQ5Ny1hM2Y2LTRmNTItYWJlYi02MzJjY2E4ZGI5NGEvOTkxNmMwZjMtZGNiOS0z
ZDZiLWIxZDEtYmQ3M2M4NDJiZTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvN2FmYWU0OTctYTNmNi00ZjUyLWFi
ZWItNjMyY2NhOGRiOTRhLzdhZmFlNDk3LWEzZjYtNGY1Mi1hYmViLTYzMmNjYThk
Yjk0YS5jcmwwHwYDVR0jBBgwFoAUTIK9Kz+UIIP/5GhOY7dkVcLLeaQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83YWZhZTQ5Ny1hM2Y2LTRmNTItYWJlYi02MzJj
Y2E4ZGI5NGEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDJgZAwDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBdqvQ0PBmxMF4yBl5rdjoGkfz99MzRnfztN8Et0q9b9bTJMLhoPwyu
c2JGd6Tt6nrVew+tqGOgtHKxmM/jvqNH2h7CNhUOhkRv9Cgra+y95wRE6HbdaJ9k
MCnH+mG3cDT2IzdKyC2xZkpDlbPiM0t6h3jctOa9CJMJAn9IqBiN9n9QTXdhtL71
g3KQ9sUEngcLYRQPK38OeA8aXezmjZmw0tzDF+54oSA8640NV8NUNY4cKEHhA/2k
vfpxEUP4ofgqAArA+bBmjc0xhvFXREFMSZkTrD/wpvp1v13MhiNW9jks6iRy49+f
jIFF8zpAXpXbBUsIuVGhfNO+NAHSLVzM
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:09:19 2025 by rpki-client