Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5f2a89fa-630b-3b53-85b8-4cd3445d4b0c.roa
File: 5f2a89fa-630b-3b53-85b8-4cd3445d4b0c.roa (raw, json)
Hash identifier: ag9PW2hAxvrvX4BK6hs1erNbCrS8rWbvczCYxZKaBwg=
Subject key identifier: 80:14:52:F4:99:4F:23:96:30:BA:72:0F:42:14:48:C2:BC:1E:40:89
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A99665345D9D0E24F8AD5CA0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5f2a89fa-630b-3b53-85b8-4cd3445d4b0c.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 20940
IP address blocks: 2600:1488:a001::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:65:34:5d:9d:0e:24:f8:ad:5c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=2b0e5059-59e6-4bb4-a800-9db5fc7ada40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c9:dd:a3:c0:f1:fb:3b:cb:d8:aa:24:5f:03:
60:ce:57:f4:af:b0:84:3b:7a:6e:6c:e3:79:2f:1d:
65:2a:8c:f0:c8:74:f2:a2:1f:ad:d3:83:b5:09:79:
eb:e0:a6:43:aa:4d:64:07:ff:af:8e:f5:10:13:7b:
65:d3:e5:75:3f:fc:2a:fb:0c:73:a7:7b:38:71:cb:
35:f0:1c:82:bc:e7:34:f4:db:cf:26:03:bb:a3:09:
8f:dd:2d:a0:16:a0:96:8d:7a:93:0f:63:e2:3f:39:
db:7d:68:38:b8:d8:1a:66:05:bd:e1:ef:f9:26:37:
b9:ca:b3:63:d0:8f:fd:42:49:da:e1:f5:7e:14:8c:
28:12:41:99:ea:c9:87:0d:66:58:08:26:d1:1c:77:
e9:93:cd:a7:4f:1c:4a:4a:56:89:4a:4a:59:1e:d6:
07:92:d6:12:9b:e6:25:5e:ee:b8:64:09:ca:1f:3b:
f0:ea:89:73:98:67:5b:14:7b:af:39:48:e6:5b:ba:
a7:99:17:2e:03:48:c9:35:79:6c:52:80:23:5f:d3:
27:d4:80:1d:84:cd:88:d6:c7:e5:55:56:fb:97:9e:
88:7e:5c:88:72:43:33:89:52:36:71:f2:09:c9:e7:
d8:4c:30:55:43:56:39:c5:8d:4a:b5:2b:c2:11:40:
5a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:14:52:F4:99:4F:23:96:30:BA:72:0F:42:14:48:C2:BC:1E:40:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5f2a89fa-630b-3b53-85b8-4cd3445d4b0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1488:a001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:38:4d:a3:b4:4b:38:dd:88:7c:a8:29:93:29:f5:48:6c:df:
0c:34:01:57:4f:33:fe:d3:58:30:fc:cc:af:2f:b8:e4:5c:c9:
85:f6:9c:a9:f7:bd:0b:23:13:57:c1:2c:88:01:ec:da:a1:cf:
02:b2:22:e1:58:e1:4a:e1:01:bf:31:35:25:76:8f:2e:9e:63:
a5:83:79:89:57:ac:f4:81:f5:bb:ee:d8:e9:bb:cd:57:bf:1e:
c6:e1:d3:f2:2c:48:f8:e7:e9:c1:0c:e3:01:64:a4:39:e8:cb:
6c:8d:06:5e:6a:d7:d4:fe:bd:fc:15:c4:a0:c8:93:02:a6:2f:
5c:42:8c:c9:3a:31:0f:58:98:aa:9b:ff:90:8f:d7:3f:73:fc:
5f:9b:3f:a1:e9:d1:01:33:c5:5a:04:ef:36:fd:13:17:a2:eb:
51:18:d9:70:03:8e:6b:e7:86:c7:e7:ae:3c:e8:a8:7b:6d:0d:
a6:03:57:80:e9:6e:63:1c:97:e1:e0:99:85:68:cc:48:eb:f1:
66:7e:fd:12:dc:1d:df:a8:38:c9:5d:a9:df:df:80:f5:cf:97:
20:eb:fe:11:ec:34:91:85:45:12:f0:3e:d5:f4:5a:35:47:1e:
49:6f:69:86:06:65:53:d8:2e:c7:6b:44:c5:9c:cd:67:95:94:
dd:6c:bb:fb
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiplmU0XZ0OJPitXKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk
MmIwZTUwNTktNTllNi00YmI0LWE4MDAtOWRiNWZjN2FkYTQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsndo8Dx+zvL2KokXwNgzlf0r7CEO3pubON5
Lx1lKozwyHTyoh+t04O1CXnr4KZDqk1kB/+vjvUQE3tl0+V1P/wq+wxzp3s4ccs1
8ByCvOc09NvPJgO7owmP3S2gFqCWjXqTD2PiPznbfWg4uNgaZgW94e/5Jje5yrNj
0I/9Qkna4fV+FIwoEkGZ6smHDWZYCCbRHHfpk82nTxxKSlaJSkpZHtYHktYSm+Yl
Xu64ZAnKHzvw6olzmGdbFHuvOUjmW7qnmRcuA0jJNXlsUoAjX9Mn1IAdhM2I1sfl
VVb7l56IflyIckMziVI2cfIJyefYTDBVQ1Y5xY1KtSvCEUBaVwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIAUUvSZTyOWMLpyD0IUSMK8HkCJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWYyYTg5ZmEtNjMwYi0z
YjUzLTg1YjgtNGNkMzQ0NWQ0YjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUiKAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHQ4TaO0SzjdiHyoKZMp9Uhs3ww0AVdPM/7TWDD8zK8vuORcyYX2
nKn3vQsjE1fBLIgB7NqhzwKyIuFY4UrhAb8xNSV2jy6eY6WDeYlXrPSB9bvu2Om7
zVe/Hsbh0/IsSPjn6cEM4wFkpDnoy2yNBl5q19T+vfwVxKDIkwKmL1xCjMk6MQ9Y
mKqb/5CP1z9z/F+bP6Hp0QEzxVoE7zb9Exei61EY2XADjmvnhsfnrjzoqHttDaYD
V4DpbmMcl+HgmYVozEjr8WZ+/RLcHd+oOMldqd/fgPXPlyDr/hHsNJGFRRLwPtX0
WjVHHklvaYYGZVPYLsdrRMWczWeVlN1su/s=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:13:08 2025 by rpki-client