Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3dde7bc6-80ae-3ff3-99f7-8ebbdd4a4921.roa
File: 3dde7bc6-80ae-3ff3-99f7-8ebbdd4a4921.roa (raw, json)
Hash identifier: kQae4KZprd0arb9+8pAuxfhp7yIUHv0P0Wh0qz7Dx14=
Subject key identifier: 98:71:E0:9F:6F:39:4C:70:BE:04:C0:95:E5:A2:98:BA:36:DA:26:0F
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A9966511276E8D4220A08A80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3dde7bc6-80ae-3ff3-99f7-8ebbdd4a4921.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 20940
IP address blocks: 2600:1488:8005::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:65:11:27:6e:8d:42:20:a0:8a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=3ceaf761-c65a-49ad-bbe1-8303936dff14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4f:f6:8c:f4:36:98:38:12:6c:41:10:48:10:
8f:ee:2f:be:fa:93:4e:8a:f0:a2:43:4e:d5:c3:a3:
01:22:ed:34:4f:d2:82:25:23:09:6c:51:04:fb:06:
d4:0f:e7:4d:cd:2e:87:b7:cd:c8:ef:f2:a2:3b:6b:
e9:7c:9b:f3:d7:6d:fa:87:d8:3e:09:ad:c3:b7:73:
ae:a3:ee:b8:81:40:5a:76:82:a5:d5:f1:e6:0d:30:
ee:49:1f:f5:9e:21:fc:0f:58:93:0f:41:a4:1f:ef:
9a:77:e6:dc:7d:05:14:22:0c:81:e4:00:87:06:79:
dc:e6:90:a4:63:1b:72:d6:e8:c9:7d:7f:5e:fb:60:
f2:e6:4c:9c:cb:94:b2:ca:b5:1b:a5:08:7e:bb:54:
f8:58:54:56:00:cd:fb:36:fb:6d:5a:53:9d:e3:06:
94:ff:5d:c5:b1:a1:16:bd:47:96:c6:67:7d:b6:00:
3e:cc:64:ef:79:b5:1b:49:a0:7c:2c:25:20:49:cb:
97:2f:e6:e3:b3:e4:59:5a:13:33:a4:f0:01:90:0c:
10:69:49:cd:00:7c:66:73:b4:1b:09:59:66:14:b2:
ce:2e:cd:7e:03:74:35:64:bd:42:86:fc:d3:d5:98:
41:5a:57:b8:dc:29:b1:8e:07:06:15:d8:88:4c:cb:
fd:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:71:E0:9F:6F:39:4C:70:BE:04:C0:95:E5:A2:98:BA:36:DA:26:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3dde7bc6-80ae-3ff3-99f7-8ebbdd4a4921.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1488:8005::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:d4:ad:1e:87:3d:13:d6:61:db:e6:1e:15:eb:35:eb:a2:7b:
4f:a0:0e:66:53:27:34:c5:91:c7:08:4c:e0:30:5e:8a:70:b3:
49:d2:b0:e2:a9:e9:0a:ed:9e:8b:27:d0:6a:26:2c:c8:08:7f:
c1:19:89:ff:a4:96:e5:4b:e0:f3:8b:2f:2c:dd:e2:ee:a9:d0:
57:fe:28:0a:70:58:35:23:e5:54:fe:8b:fe:6c:38:d3:3d:a9:
68:79:a5:c9:74:78:e8:69:b0:85:30:89:67:b6:31:0c:79:c8:
c8:29:61:18:13:40:f7:65:5f:70:ff:96:4f:08:b8:31:62:b7:
fa:55:9a:79:24:b6:89:d4:6b:0d:dd:03:33:a2:db:88:e2:7d:
67:00:75:39:3c:6d:56:04:1d:aa:a6:2e:37:a9:34:d2:3f:75:
e1:a8:73:7e:ab:7d:09:cb:5d:ca:68:cf:2a:85:ce:9b:61:86:
5b:c2:d8:39:12:9f:7c:97:df:52:da:ca:2f:6b:bd:7d:32:47:
f5:0d:6a:25:64:cd:b6:00:84:ba:ff:a8:78:24:14:b9:42:59:
20:71:9b:57:1e:5d:eb:5b:22:4a:9c:43:b3:d4:d8:7f:cd:56:
75:70:a0:84:b0:cf:8a:78:c3:52:dc:4f:97:19:be:ac:f6:be:
1d:df:9c:1e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiplmURJ26NQiCgioAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk
M2NlYWY3NjEtYzY1YS00OWFkLWJiZTEtODMwMzkzNmRmZjE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnk/2jPQ2mDgSbEEQSBCP7i+++pNOivCiQ07V
w6MBIu00T9KCJSMJbFEE+wbUD+dNzS6Ht83I7/KiO2vpfJvz1236h9g+Ca3Dt3Ou
o+64gUBadoKl1fHmDTDuSR/1niH8D1iTD0GkH++ad+bcfQUUIgyB5ACHBnnc5pCk
Yxty1ujJfX9e+2Dy5kycy5SyyrUbpQh+u1T4WFRWAM37NvttWlOd4waU/13FsaEW
vUeWxmd9tgA+zGTvebUbSaB8LCUgScuXL+bjs+RZWhMzpPABkAwQaUnNAHxmc7Qb
CVlmFLLOLs1+A3Q1ZL1ChvzT1ZhBWle43CmxjgcGFdiITMv9ywIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJhx4J9vOUxwvgTAleWimLo22iYPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2RkZTdiYzYtODBhZS0z
ZmYzLTk5ZjctOGViYmRkNGE0OTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUiIAF
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGLUrR6HPRPWYdvmHhXrNeuie0+gDmZTJzTFkccITOAwXopws0nS
sOKp6Qrtnosn0GomLMgIf8EZif+kluVL4POLLyzd4u6p0Ff+KApwWDUj5VT+i/5s
ONM9qWh5pcl0eOhpsIUwiWe2MQx5yMgpYRgTQPdlX3D/lk8IuDFit/pVmnkktonU
aw3dAzOi24jifWcAdTk8bVYEHaqmLjepNNI/deGoc36rfQnLXcpozyqFzpthhlvC
2DkSn3yX31Layi9rvX0yR/UNaiVkzbYAhLr/qHgkFLlCWSBxm1ceXetbIkqcQ7PU
2H/NVnVwoISwz4p4w1LcT5cZvqz2vh3fnB4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:26:30 2025 by rpki-client