Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/40bc0977-133a-34fa-b247-d90f8e76dc83.roa
File: 40bc0977-133a-34fa-b247-d90f8e76dc83.roa (raw, json)
Hash identifier: whDmgt69iH5vWcR/SAxBsx94Q/x8MBr1HuSkmiWfYAo=
Subject key identifier: 4B:7F:F4:4D:DC:C2:CA:51:04:FC:8E:C1:F5:66:56:66:BA:D0:C6:B4
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858488DAB64A2B6B85E32F1D33D80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/40bc0977-133a-34fa-b247-d90f8e76dc83.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 20940
IP address blocks: 2600:1408:24::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:64:a2:b6:b8:5e:32:f1:d3:3d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=cc3d586f-7245-4585-97ed-99d7de317026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ac:30:16:3d:de:30:29:c5:4b:e8:09:ae:36:
66:ef:f8:bc:9f:d7:bd:40:19:d2:10:f9:02:8b:8a:
71:35:d4:37:fe:77:22:62:04:db:38:2a:bf:7b:81:
d7:92:13:05:db:df:ea:33:6d:21:a6:45:81:7a:28:
b3:a1:2a:e3:06:b0:fd:b2:1f:74:88:28:85:c3:8b:
7a:aa:16:d8:52:15:91:63:a8:34:c2:a3:9c:67:fc:
88:c5:f3:cd:36:43:f2:3d:75:03:63:24:ce:b8:02:
7d:91:cc:91:f5:a4:49:ba:19:24:e2:44:6b:cd:0a:
af:0a:d5:4c:36:93:90:5b:c5:54:ff:a3:55:05:43:
ff:4e:ba:b8:67:8a:51:8e:b4:cf:24:c4:3f:83:9b:
0a:38:f1:36:4c:ca:18:74:83:68:53:71:89:fe:07:
bf:cb:38:98:b6:f1:48:fc:c5:de:96:35:7f:42:53:
53:ec:58:e6:f2:59:60:a8:3e:c1:5c:e0:2e:21:f0:
b0:23:5d:ae:64:b1:23:fa:16:37:dc:38:13:fc:de:
e0:29:58:5f:0b:a0:41:38:fb:10:5f:9a:06:50:a6:
a3:40:05:a8:0b:79:d9:07:e6:bd:06:2e:3a:69:25:
ef:a1:0e:9a:bc:e4:04:99:51:75:50:5b:db:76:0b:
84:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:7F:F4:4D:DC:C2:CA:51:04:FC:8E:C1:F5:66:56:66:BA:D0:C6:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/40bc0977-133a-34fa-b247-d90f8e76dc83.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1408:24::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:fb:25:09:0a:d5:6e:2f:9f:9a:37:e8:2f:eb:af:8e:df:17:
28:d7:ab:8b:63:a7:2b:7b:b0:62:74:22:ea:43:09:7f:c5:f7:
0a:4b:98:ea:a5:90:77:13:ce:c8:62:9d:c7:89:f5:69:b5:5d:
a5:b7:3a:d8:f6:27:e4:c9:75:4d:18:ba:60:99:05:c4:b9:73:
18:24:a7:2a:67:bc:ae:bc:22:1d:5d:42:56:87:35:6c:14:3a:
ca:39:92:5c:2f:e7:80:c5:43:2a:6f:39:13:a6:0f:f5:6a:9c:
fb:ae:b6:87:54:f4:cb:51:57:f8:12:b4:4a:41:89:b1:39:f5:
18:53:5e:3c:83:1e:6d:84:86:15:23:55:ad:78:b4:21:79:14:
d1:36:42:a8:97:c9:50:7c:68:e9:9f:5a:6f:2f:5e:85:6e:5d:
ab:ac:6e:90:95:3c:5f:09:d6:ea:9e:5d:f3:ab:a4:85:92:1a:
40:cf:46:19:91:53:33:93:f3:b6:97:7c:ec:4f:c2:7d:b0:57:
9d:03:e3:e8:9e:78:10:f0:fb:32:c5:a5:b5:9e:b9:9f:ed:ea:
37:15:8c:d6:30:66:b8:37:3c:ec:43:0a:6f:cd:6f:4e:59:82:
5c:eb:da:5a:d8:8d:86:97:87:93:a8:c2:e7:98:fd:82:e9:6e:
d1:64:2a:6a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiNq2SitrheMvHTPYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDExNTE0MDA1MVoXDTI1MDQxNTEzMDA1MVowLzEtMCsGA1UEAxMk
Y2MzZDU4NmYtNzI0NS00NTg1LTk3ZWQtOTlkN2RlMzE3MDI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6wwFj3eMCnFS+gJrjZm7/i8n9e9QBnSEPkC
i4pxNdQ3/nciYgTbOCq/e4HXkhMF29/qM20hpkWBeiizoSrjBrD9sh90iCiFw4t6
qhbYUhWRY6g0wqOcZ/yIxfPNNkPyPXUDYyTOuAJ9kcyR9aRJuhkk4kRrzQqvCtVM
NpOQW8VU/6NVBUP/Trq4Z4pRjrTPJMQ/g5sKOPE2TMoYdINoU3GJ/ge/yziYtvFI
/MXeljV/QlNT7Fjm8llgqD7BXOAuIfCwI12uZLEj+hY33DgT/N7gKVhfC6BBOPsQ
X5oGUKajQAWoC3nZB+a9Bi46aSXvoQ6avOQEmVF1UFvbdguEkwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEt/9E3cwspRBPyOwfVmVma60Ma0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDBiYzA5NzctMTMzYS0z
NGZhLWIyNDctZDkwZjhlNzZkYzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUCAAk
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFP7JQkK1W4vn5o36C/rr47fFyjXq4tjpyt7sGJ0IupDCX/F9wpL
mOqlkHcTzshinceJ9Wm1XaW3Otj2J+TJdU0YumCZBcS5cxgkpypnvK68Ih1dQlaH
NWwUOso5klwv54DFQypvOROmD/VqnPuutodU9MtRV/gStEpBibE59RhTXjyDHm2E
hhUjVa14tCF5FNE2QqiXyVB8aOmfWm8vXoVuXausbpCVPF8J1uqeXfOrpIWSGkDP
RhmRUzOT87aXfOxPwn2wV50D4+ieeBDw+zLFpbWeuZ/t6jcVjNYwZrg3POxDCm/N
b05Zglzr2lrYjYaXh5OowueY/YLpbtFkKmo=
-----END CERTIFICATE-----
Generated at Wed Apr 9 10:23:35 2025 by rpki-client