Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da6c7fab-8734-3c4c-8102-e17430f6166b.roa
File: da6c7fab-8734-3c4c-8102-e17430f6166b.roa (raw, json)
Hash identifier: Hi33htrp5iVuhy/rB4LPPn/vXBL7BWa8BBTS7N5qx/s=
Subject key identifier: 20:B8:2D:A5:31:AD:0C:35:BC:81:99:95:19:46:E3:7D:F9:58:64:B2
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285849002153BBD5B4874C506ED9A0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da6c7fab-8734-3c4c-8102-e17430f6166b.roa
Signing time: Tue 25 Feb 2025 14:00:52 +0000
ROA not before: Tue 25 Feb 2025 14:00:52 +0000
ROA not after: Mon 26 May 2025 13:00:52 +0000
asID: 12222
IP address blocks: 2001:4878:a008::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:00:21:53:bb:d5:b4:87:4c:50:6e:d9:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 25 14:00:52 2025 GMT
Not After : May 26 13:00:52 2025 GMT
Subject: CN=b8b574b2-c34e-427a-ab1c-41bc724e7bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:79:57:0f:8f:3c:2f:47:c0:97:d7:27:ab:b5:
86:f6:b3:89:bb:ae:6e:80:1d:36:df:7d:8c:42:d5:
a3:f6:ef:d6:9f:07:da:6e:55:58:f2:27:e0:bc:c8:
05:47:f1:5e:61:af:8a:05:35:a4:a9:d7:33:ff:95:
14:b3:67:6d:fa:e9:ff:ea:19:63:0e:63:01:c3:42:
48:f2:02:cc:ae:29:ab:55:78:73:ee:ec:e6:eb:c4:
1b:45:3f:b9:f9:48:c9:48:71:16:b6:78:f3:50:45:
b8:91:0d:eb:f2:45:80:32:8c:ed:ae:3f:19:f8:05:
80:a0:b9:11:a1:e8:b9:fa:58:70:67:81:5a:60:c7:
e7:55:c9:07:12:9e:8c:42:87:1d:e3:6d:05:95:82:
b1:1e:0a:48:f7:86:19:00:b3:95:07:7c:a8:70:39:
f8:9a:32:b3:98:35:9f:b5:b9:50:31:7b:18:9c:78:
ff:fc:b7:8e:10:b2:70:ff:45:a9:0f:71:a3:a8:ba:
14:db:d8:90:a3:7b:9a:d4:39:46:8c:29:0a:d6:ff:
e1:da:43:d5:c1:ca:6d:42:51:c1:86:32:b7:0e:27:
b6:89:82:58:1b:82:51:9c:da:25:03:42:f2:de:4e:
5e:d4:b2:98:ea:da:65:02:9e:53:21:eb:27:1e:27:
2b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B8:2D:A5:31:AD:0C:35:BC:81:99:95:19:46:E3:7D:F9:58:64:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da6c7fab-8734-3c4c-8102-e17430f6166b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4878:a008::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:01:bc:2b:15:4e:5c:ee:ff:b7:9e:f6:99:28:87:04:a8:a2:
1f:89:d2:cb:0a:bf:b2:1e:8c:11:dc:f5:b8:a0:fe:f0:4c:ec:
94:70:d2:88:d7:f8:b9:00:0d:8d:b7:af:a4:df:a5:d5:80:12:
a2:d5:5f:23:3d:07:65:3e:33:e1:b4:70:05:38:1c:1b:1c:05:
84:70:5d:05:02:32:8e:04:8c:c2:a2:24:43:7e:a3:0d:5d:cc:
ad:e7:bf:0d:6b:85:08:42:71:21:a2:cb:1b:dc:0b:9a:dc:67:
a1:88:51:f7:44:9c:08:8a:7a:5d:8c:ab:59:03:d2:79:6e:9f:
aa:9a:e6:f1:e9:80:30:b7:64:91:1f:1e:84:21:b2:9d:a1:69:
75:3d:9e:60:4c:40:01:04:bf:c1:5c:69:a9:92:37:31:f5:47:
df:d5:a3:08:42:c9:32:31:f2:05:18:59:65:f1:83:e6:fa:85:
fb:8c:98:04:e0:d3:b0:f9:54:9a:0c:e1:ad:00:b9:f2:d3:55:
b3:ed:0d:b4:6e:b6:fd:86:43:bd:eb:9d:61:c3:e0:c4:49:d4:
dd:e0:bb:2b:bd:58:54:dc:96:2b:da:94:0d:c7:83:85:5a:81:
23:87:a2:c9:a0:7c:23:a8:e3:60:81:89:04:ca:fa:04:9e:35:
f7:e1:04:17
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkAIVO71bSHTFBu2aAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk
YjhiNTc0YjItYzM0ZS00MjdhLWFiMWMtNDFiYzcyNGU3YmMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinlXD488L0fAl9cnq7WG9rOJu65ugB02332M
QtWj9u/WnwfablVY8ifgvMgFR/FeYa+KBTWkqdcz/5UUs2dt+un/6hljDmMBw0JI
8gLMrimrVXhz7uzm68QbRT+5+UjJSHEWtnjzUEW4kQ3r8kWAMoztrj8Z+AWAoLkR
oei5+lhwZ4FaYMfnVckHEp6MQocd420FlYKxHgpI94YZALOVB3yocDn4mjKzmDWf
tblQMXsYnHj//LeOELJw/0WpD3GjqLoU29iQo3ua1DlGjCkK1v/h2kPVwcptQlHB
hjK3Die2iYJYG4JRnNolA0Ly3k5e1LKY6tplAp5TIesnHicrGwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCC4LaUxrQw1vIGZlRlG4335WGSyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGE2YzdmYWItODczNC0z
YzRjLTgxMDItZTE3NDMwZjYxNjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeKAI
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAA8BvCsVTlzu/7ee9pkohwSooh+J0ssKv7IejBHc9big/vBM7JRw
0ojX+LkADY23r6TfpdWAEqLVXyM9B2U+M+G0cAU4HBscBYRwXQUCMo4EjMKiJEN+
ow1dzK3nvw1rhQhCcSGiyxvcC5rcZ6GIUfdEnAiKel2Mq1kD0nlun6qa5vHpgDC3
ZJEfHoQhsp2haXU9nmBMQAEEv8FcaamSNzH1R9/VowhCyTIx8gUYWWXxg+b6hfuM
mATg07D5VJoM4a0AufLTVbPtDbRutv2GQ73rnWHD4MRJ1N3guyu9WFTclivalA3H
g4VagSOHosmgfCOo42CBiQTK+gSeNffhBBc=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:10:42 2025 by rpki-client