Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/affbcdc5-3e2c-30d2-957f-7928191bbfb2.roa
File: affbcdc5-3e2c-30d2-957f-7928191bbfb2.roa (raw, json)
Hash identifier: Uwaj6QwLDyrF809LBpleqzxx2LAGF1TD1cN9F/hglPE=
Subject key identifier: C7:91:74:B3:3C:F8:05:D6:E4:2D:73:B1:03:D9:53:57:50:CB:48:26
Certificate issuer: /CN=533bea0e-cd52-49a8-9cca-a05cc33ce073
Certificate serial: 010D0C9F43285848C8F2AD183281C799C29F4680
Authority key identifier: 33:18:BF:25:9A:A7:B2:43:AA:A8:B2:C2:1D:7C:A3:8F:E9:B3:65:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/affbcdc5-3e2c-30d2-957f-7928191bbfb2.roa
Signing time: Wed 05 Feb 2025 19:37:31 +0000
ROA not before: Wed 05 Feb 2025 19:37:31 +0000
ROA not after: Tue 06 May 2025 18:37:31 +0000
asID: 11878
IP address blocks: 2607:9000::/36 maxlen: 48
2607:9000:1000::/36 maxlen: 48
2607:9000:2000::/36 maxlen: 48
2607:9000:3000::/36 maxlen: 48
2607:9000:4000::/36 maxlen: 48
2607:9000:5000::/36 maxlen: 48
2607:9000:6000::/36 maxlen: 48
2607:9000:7000::/36 maxlen: 48
2607:9000:8000::/36 maxlen: 48
2607:9000:9000::/36 maxlen: 48
2607:9000:a000::/36 maxlen: 48
2607:9000:b000::/36 maxlen: 48
2607:9000:c000::/36 maxlen: 48
2607:9000:d000::/36 maxlen: 48
2607:9000:e000::/36 maxlen: 48
2607:9000:f000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:f2:ad:18:32:81:c7:99:c2:9f:46:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533bea0e-cd52-49a8-9cca-a05cc33ce073
Validity
Not Before: Feb 5 19:37:31 2025 GMT
Not After : May 6 18:37:31 2025 GMT
Subject: CN=de6f4c26-3e0f-4dd1-830d-533f73c6434f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6c:d4:74:5d:84:12:4d:90:fd:60:e4:39:26:
b6:aa:97:cd:b0:72:74:a7:ed:02:ff:1b:08:bc:4a:
69:4f:53:67:70:7a:25:da:62:8d:5e:28:50:eb:c2:
3c:47:b1:07:35:de:2e:cd:60:0f:06:52:16:d7:39:
1a:d6:b6:96:ff:51:09:64:77:9f:1a:f1:89:3e:88:
ac:b2:cc:b4:8e:bf:55:da:db:7f:ec:1c:18:54:09:
f1:99:68:2e:e2:75:78:c7:a2:6f:f3:86:4f:6f:ac:
20:27:78:68:e5:70:74:17:f2:ed:31:b4:5d:be:a3:
c4:cc:ee:8e:59:83:8a:74:9a:9a:f9:e0:53:83:68:
0b:fc:0e:a8:20:1d:9d:cd:35:5f:b0:d5:b5:6c:8d:
91:a5:ae:3c:26:92:1d:91:96:16:75:7d:ff:f5:a1:
a9:48:fa:b7:3c:11:e1:82:4c:c6:7f:48:65:cb:c1:
fd:f7:96:dd:4d:85:b6:5f:6c:74:59:c1:96:d7:6a:
22:31:c6:c7:e0:22:69:d8:3f:33:b1:7b:71:cd:7f:
54:db:26:f6:d5:6a:30:f7:78:d8:1e:7b:8a:4a:9b:
45:63:1f:42:ad:09:c5:04:b8:94:bf:11:95:02:82:
bf:76:a9:7a:a2:78:ff:84:a0:85:c0:19:0b:83:8a:
05:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:91:74:B3:3C:F8:05:D6:E4:2D:73:B1:03:D9:53:57:50:CB:48:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/affbcdc5-3e2c-30d2-957f-7928191bbfb2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/533bea0e-cd52-49a8-9cca-a05cc33ce073.crl
X509v3 Authority Key Identifier:
keyid:33:18:BF:25:9A:A7:B2:43:AA:A8:B2:C2:1D:7C:A3:8F:E9:B3:65:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:9000::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:8d:f9:86:bf:55:58:a0:1a:54:ed:8c:61:80:da:5f:f3:a7:
03:b3:17:cd:41:2b:b8:dd:cc:dd:49:04:20:33:f2:a3:72:47:
4f:5b:5a:94:05:16:f6:38:d2:ff:74:e6:a2:c1:3d:2b:ab:64:
aa:84:30:32:fc:95:8a:60:8a:2f:6c:ac:92:93:60:38:82:4f:
91:54:4e:79:00:77:5f:24:8f:a0:e0:73:3f:95:c6:64:d9:6f:
c6:22:f3:a6:8c:2c:6f:da:cd:25:cb:32:a9:84:af:06:0b:f7:
8d:bc:bc:86:81:8e:eb:74:e5:8a:be:68:22:b9:90:b1:ad:52:
39:2d:2f:d7:b5:fe:12:56:85:1b:31:40:9a:fb:e7:f5:27:c7:
40:d8:84:8b:56:04:57:e0:29:64:1b:04:a2:18:af:39:68:c6:
b7:fd:91:5c:e7:31:48:90:c8:0a:d8:d2:78:d1:3a:2c:ef:2e:
fa:0e:a6:b7:43:cb:ea:6a:92:c7:02:f3:05:c9:0a:82:b2:fb:
b0:76:90:ee:c5:93:f8:a5:f4:93:3d:a6:3a:96:54:b0:09:7d:
69:a7:f9:9a:c3:34:b1:bd:7d:7a:37:cd:14:09:9c:7d:a4:00:
e3:eb:33:f3:54:f0:25:ab:9b:0b:82:26:fa:70:fc:77:92:96:
8b:03:de:b2
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjI8q0YMoHHmcKfRoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTMzYmVhMGUtY2Q1Mi00OWE4LTljY2EtYTA1Y2MzM2Nl
MDczMB4XDTI1MDIwNTE5MzczMVoXDTI1MDUwNjE4MzczMVowLzEtMCsGA1UEAxMk
ZGU2ZjRjMjYtM2UwZi00ZGQxLTgzMGQtNTMzZjczYzY0MzRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmzUdF2EEk2Q/WDkOSa2qpfNsHJ0p+0C/xsI
vEppT1NncHol2mKNXihQ68I8R7EHNd4uzWAPBlIW1zka1raW/1EJZHefGvGJPois
ssy0jr9V2tt/7BwYVAnxmWgu4nV4x6Jv84ZPb6wgJ3ho5XB0F/LtMbRdvqPEzO6O
WYOKdJqa+eBTg2gL/A6oIB2dzTVfsNW1bI2Rpa48JpIdkZYWdX3/9aGpSPq3PBHh
gkzGf0hly8H995bdTYW2X2x0WcGW12oiMcbH4CJp2D8zsXtxzX9U2yb21Wow93jY
HnuKSptFYx9CrQnFBLiUvxGVAoK/dql6onj/hKCFwBkLg4oFRwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFMeRdLM8+AXW5C1zsQPZU1dQy0gmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81MzNi
ZWEwZS1jZDUyLTQ5YTgtOWNjYS1hMDVjYzMzY2UwNzMvYWZmYmNkYzUtM2UyYy0z
MGQyLTk1N2YtNzkyODE5MWJiZmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNTMzYmVhMGUtY2Q1Mi00OWE4LTlj
Y2EtYTA1Y2MzM2NlMDczLzUzM2JlYTBlLWNkNTItNDlhOC05Y2NhLWEwNWNjMzNj
ZTA3My5jcmwwHwYDVR0jBBgwFoAUMxi/JZqnskOqqLLCHXyjj+mzZWswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi81MzNiZWEwZS1jZDUyLTQ5YTgtOWNjYS1hMDVj
YzMzY2UwNzMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgeQADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAYjfmGv1VYoBpU7YxhgNpf86cDsxfNQSu43czdSQQgM/KjckdPW1qU
BRb2ONL/dOaiwT0rq2SqhDAy/JWKYIovbKySk2A4gk+RVE55AHdfJI+g4HM/lcZk
2W/GIvOmjCxv2s0lyzKphK8GC/eNvLyGgY7rdOWKvmgiuZCxrVI5LS/Xtf4SVoUb
MUCa++f1J8dA2ISLVgRX4ClkGwSiGK85aMa3/ZFc5zFIkMgK2NJ40Tos7y76Dqa3
Q8vqapLHAvMFyQqCsvuwdpDuxZP4pfSTPaY6llSwCX1pp/mawzSxvX16N80UCZx9
pADj6zPzVPAlq5sLgib6cPx3kpaLA96y
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:04:48 2025 by rpki-client