Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0319abf0-fa67-3864-854f-2beacd2f1e2a.roa
File: 0319abf0-fa67-3864-854f-2beacd2f1e2a.roa (raw, json)
Hash identifier: OKSh5FKt0tnKs/7chI4od6dOKqtgrnlmNlgH4DKhb3s=
Subject key identifier: 09:7C:B5:8B:49:8C:5D:B2:93:39:CF:BD:6A:FA:DE:84:4B:88:0E:CF
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848AC60D88AB6AECBFCB1EA9600
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0319abf0-fa67-3864-854f-2beacd2f1e2a.roa
Signing time: Sun 26 Jan 2025 14:00:52 +0000
ROA not before: Sun 26 Jan 2025 14:00:52 +0000
ROA not after: Sat 26 Apr 2025 13:00:52 +0000
asID: 35994
IP address blocks: 2600:1408:f000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ac:60:d8:8a:b6:ae:cb:fc:b1:ea:96:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 26 14:00:52 2025 GMT
Not After : Apr 26 13:00:52 2025 GMT
Subject: CN=23bbb039-3eea-4caa-959e-5a0a5babcb37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e3:da:36:51:f8:b5:f4:e5:1f:08:d3:ae:b7:
c3:43:62:80:ff:9c:e9:38:1f:97:18:c5:ee:5a:e0:
09:a2:36:3b:6a:93:83:4d:f1:e8:32:2e:b7:85:1a:
60:2f:83:e3:f9:49:39:3f:a8:5a:3e:a1:84:df:4d:
c5:c2:ac:2f:87:65:11:16:d9:48:e6:1e:09:53:42:
28:f0:13:ea:1a:59:83:06:bc:14:d4:7d:c2:78:22:
4a:db:64:6c:79:e4:c7:94:bc:ba:21:fd:c1:99:fb:
ec:4e:c0:37:81:63:74:e2:0c:9a:5d:27:d0:c3:eb:
32:ef:bc:87:ec:92:5b:7a:79:e5:46:ea:db:d7:b4:
71:2e:31:75:e4:4c:74:76:ee:de:f2:e7:93:cc:f8:
a0:b4:5f:af:28:19:b2:b7:84:d9:d0:a9:5c:c4:a9:
f2:a2:35:32:aa:6c:49:e9:90:9f:fe:e8:18:cd:ad:
7c:6e:62:38:5d:51:8b:35:c7:7e:c0:6a:4a:34:07:
25:4f:bc:26:75:f5:b5:41:39:1a:7b:85:03:04:55:
c9:6a:4e:b4:34:ea:07:f0:f3:f6:36:f7:6f:24:c3:
31:df:fd:bd:db:30:fc:e2:7a:f5:a8:19:ef:69:77:
c0:1f:b9:3e:77:25:78:e9:d0:76:21:55:47:19:ad:
27:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:7C:B5:8B:49:8C:5D:B2:93:39:CF:BD:6A:FA:DE:84:4B:88:0E:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0319abf0-fa67-3864-854f-2beacd2f1e2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1408:f000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:fe:3d:3a:7c:6a:f2:e7:de:2a:b7:2d:95:0d:2c:3c:68:20:
52:e4:a2:2c:76:2d:78:c7:20:f2:08:1f:46:b6:05:52:ed:bc:
95:69:93:2c:f3:6f:d6:66:75:80:00:97:ec:3d:0f:4a:35:70:
a6:16:a3:a2:6a:05:b7:f1:ce:b1:21:22:e5:bb:67:36:d6:cc:
e0:28:75:50:09:8c:f8:f5:d7:ca:a6:45:49:39:f7:fb:aa:69:
da:69:c5:d7:f2:45:af:29:bf:d4:8c:4e:da:99:f8:68:dd:87:
94:01:b4:f3:3d:90:4a:36:5f:f4:56:8d:3c:ee:0f:25:87:6e:
e7:b7:49:e2:26:45:e9:20:be:7f:7d:cc:9d:5c:74:66:26:2a:
a3:a6:6f:89:b2:bb:8a:c6:92:a4:d4:d6:f0:a4:b6:2c:a4:f0:
88:1f:c8:63:8f:05:eb:17:d9:d9:10:aa:34:a9:a6:4b:89:4a:
b8:e9:b8:8f:22:b5:05:a0:4a:58:63:06:d7:48:26:33:18:51:
3d:70:21:e9:96:91:6c:a0:1c:b9:0f:66:ba:ec:28:11:57:e2:
62:6d:d4:bf:45:74:c8:d3:d9:b9:c2:7c:94:2c:6f:16:fb:bc:
97:f7:99:2c:fd:78:ac:a0:27:53:08:9f:48:3c:b9:5c:b0:7b:
17:99:55:9b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEisYNiKtq7L/LHqlgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDEyNjE0MDA1MloXDTI1MDQyNjEzMDA1MlowLzEtMCsGA1UEAxMk
MjNiYmIwMzktM2VlYS00Y2FhLTk1OWUtNWEwYTViYWJjYjM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOPaNlH4tfTlHwjTrrfDQ2KA/5zpOB+XGMXu
WuAJojY7apODTfHoMi63hRpgL4Pj+Uk5P6haPqGE303Fwqwvh2URFtlI5h4JU0Io
8BPqGlmDBrwU1H3CeCJK22RseeTHlLy6If3BmfvsTsA3gWN04gyaXSfQw+sy77yH
7JJbennlRurb17RxLjF15Ex0du7e8ueTzPigtF+vKBmyt4TZ0KlcxKnyojUyqmxJ
6ZCf/ugYza18bmI4XVGLNcd+wGpKNAclT7wmdfW1QTkae4UDBFXJak60NOoH8PP2
NvdvJMMx3/292zD84nr1qBnvaXfAH7k+dyV46dB2IVVHGa0nJQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAl8tYtJjF2ykznPvWr63oRLiA7PMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDMxOWFiZjAtZmE2Ny0z
ODY0LTg1NGYtMmJlYWNkMmYxZTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUCPAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEf+PTp8avLn3iq3LZUNLDxoIFLkoix2LXjHIPIIH0a2BVLtvJVp
kyzzb9ZmdYAAl+w9D0o1cKYWo6JqBbfxzrEhIuW7ZzbWzOAodVAJjPj118qmRUk5
9/uqadppxdfyRa8pv9SMTtqZ+Gjdh5QBtPM9kEo2X/RWjTzuDyWHbue3SeImRekg
vn99zJ1cdGYmKqOmb4myu4rGkqTU1vCktiyk8IgfyGOPBesX2dkQqjSppkuJSrjp
uI8itQWgSlhjBtdIJjMYUT1wIemWkWygHLkPZrrsKBFX4mJt1L9FdMjT2bnCfJQs
bxb7vJf3mSz9eKygJ1MIn0g8uVywexeZVZs=
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:14:16 2025 by rpki-client