Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/78840f5a-619f-4ff3-95b9-5b73beb3d2d9/1f9a9dfb-99cd-351c-8813-a0a9cba2d2ab.roa
File: 1f9a9dfb-99cd-351c-8813-a0a9cba2d2ab.roa (raw, json)
Hash identifier: TMr7f68dzXF95NV3rEFJ4F7DXqB50fWLtd6AYZR3HgA=
Subject key identifier: 55:BA:51:58:D9:34:81:B0:F5:43:1A:57:B6:85:82:0B:5D:7E:56:80
Certificate issuer: /CN=78840f5a-619f-4ff3-95b9-5b73beb3d2d9
Certificate serial: 010D0C9F43285848090FAD84FBAFBB4C89CAF180
Authority key identifier: 7C:7D:CC:1D:64:7F:31:F4:73:BC:44:F5:73:56:2B:02:4E:30:4B:E0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/78840f5a-619f-4ff3-95b9-5b73beb3d2d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/78840f5a-619f-4ff3-95b9-5b73beb3d2d9/1f9a9dfb-99cd-351c-8813-a0a9cba2d2ab.roa
Signing time: Fri 29 Nov 2024 02:00:39 +0000
ROA not before: Fri 29 Nov 2024 02:00:39 +0000
ROA not after: Thu 27 Feb 2025 02:00:39 +0000
asID: 13238
IP address blocks: 2620:10f:d000::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:09:0f:ad:84:fb:af:bb:4c:89:ca:f1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78840f5a-619f-4ff3-95b9-5b73beb3d2d9
Validity
Not Before: Nov 29 02:00:39 2024 GMT
Not After : Feb 27 02:00:39 2025 GMT
Subject: CN=24b5230b-c7a2-4ff1-b857-413c43355bac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0b:7b:e0:99:b4:31:93:b8:4f:7d:b4:96:cc:
68:40:dc:e8:d1:ac:66:97:cf:cd:71:aa:fa:52:79:
6c:46:02:8b:b0:4b:6e:8e:fd:e1:ba:a3:ab:3d:58:
42:4f:46:94:36:a9:ec:eb:de:9a:dc:d4:7e:39:99:
e2:64:d1:9c:1a:f0:40:81:c7:7c:76:82:c5:1f:5c:
ef:bf:23:44:af:e3:c2:72:9a:dd:7f:eb:12:ad:e0:
c4:26:3f:e3:0c:4f:b9:ee:c7:89:1f:a8:08:8b:ee:
97:8a:3b:89:6e:af:53:e8:d2:0e:79:ae:fd:3f:7f:
51:36:59:49:c6:c8:ee:aa:91:7c:a4:e3:e3:12:f5:
15:2a:80:cb:47:94:3d:dd:a9:01:fa:7b:e8:e7:99:
e7:e1:42:9d:97:44:3c:b9:c2:2f:5f:73:55:8e:0c:
b2:ec:ca:8e:06:3d:f8:40:5c:b5:05:35:c5:4e:8f:
d5:ae:61:38:20:bc:b0:05:22:ad:59:ed:e0:0b:d9:
84:ef:0b:42:df:d2:f3:11:48:39:6f:8c:cc:5b:10:
2f:65:51:3d:d5:b7:b7:45:94:82:18:e3:95:5b:7b:
d3:ab:56:bb:37:89:a1:1c:19:1e:a8:a7:ac:b5:3f:
83:e1:11:1c:a0:9b:0a:2f:97:96:68:dd:ab:5a:1d:
cc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:BA:51:58:D9:34:81:B0:F5:43:1A:57:B6:85:82:0B:5D:7E:56:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/78840f5a-619f-4ff3-95b9-5b73beb3d2d9/1f9a9dfb-99cd-351c-8813-a0a9cba2d2ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/78840f5a-619f-4ff3-95b9-5b73beb3d2d9/78840f5a-619f-4ff3-95b9-5b73beb3d2d9.crl
X509v3 Authority Key Identifier:
keyid:7C:7D:CC:1D:64:7F:31:F4:73:BC:44:F5:73:56:2B:02:4E:30:4B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/78840f5a-619f-4ff3-95b9-5b73beb3d2d9.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:10f:d000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:86:34:fe:58:cb:da:af:19:71:f7:d9:f6:98:fd:a2:00:df:
6d:6f:16:db:91:b0:a2:27:1c:04:bd:52:d5:8d:f4:ca:83:c6:
c0:a3:ac:ac:d9:1e:a7:7c:d2:d3:80:67:74:e9:0f:25:d3:d6:
fe:42:d7:b5:3e:fe:5d:6e:07:f7:ca:0c:02:2b:e3:5c:c7:2e:
c0:1f:fe:6e:c5:54:35:be:dc:e2:12:96:7c:4b:e2:91:ef:0b:
57:41:74:de:77:57:fe:dc:4b:24:2b:52:91:5e:42:ed:28:39:
8d:0f:20:88:41:9c:3b:a4:ad:8c:aa:28:8a:df:1b:d1:e7:6f:
7b:59:f2:c3:d8:09:38:cf:df:6a:19:9b:94:80:11:78:30:fc:
6f:26:5f:10:4a:82:74:1a:7f:cf:00:34:1f:b7:30:40:ee:b4:
b8:c3:99:82:bf:a1:d9:d6:34:66:04:53:62:de:cd:cd:33:e2:
da:e6:f7:ef:16:e3:87:fd:da:dd:78:de:5b:5f:bb:1a:e7:9b:
b1:af:ce:e8:08:1d:f5:2b:cf:51:22:b0:fa:46:e8:8c:53:1d:
50:59:9b:eb:86:2e:39:ad:94:cd:15:c0:e7:10:0d:89:cc:32:
12:de:56:46:0f:a4:48:76:da:32:a5:b2:49:a2:f4:4b:cf:7a:
6b:31:bf:98
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgJD62E+6+7TInK8YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzg4NDBmNWEtNjE5Zi00ZmYzLTk1YjktNWI3M2JlYjNk
MmQ5MB4XDTI0MTEyOTAyMDAzOVoXDTI1MDIyNzAyMDAzOVowLzEtMCsGA1UEAxMk
MjRiNTIzMGItYzdhMi00ZmYxLWI4NTctNDEzYzQzMzU1YmFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQt74Jm0MZO4T320lsxoQNzo0axml8/Ncar6
UnlsRgKLsEtujv3huqOrPVhCT0aUNqns696a3NR+OZniZNGcGvBAgcd8doLFH1zv
vyNEr+PCcprdf+sSreDEJj/jDE+57seJH6gIi+6XijuJbq9T6NIOea79P39RNllJ
xsjuqpF8pOPjEvUVKoDLR5Q93akB+nvo55nn4UKdl0Q8ucIvX3NVjgyy7MqOBj34
QFy1BTXFTo/VrmE4ILywBSKtWe3gC9mE7wtC39LzEUg5b4zMWxAvZVE91be3RZSC
GOOVW3vTq1a7N4mhHBkeqKestT+D4REcoJsKL5eWaN2rWh3MRQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFW6UVjZNIGw9UMaV7aFggtdflaAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODg0
MGY1YS02MTlmLTRmZjMtOTViOS01YjczYmViM2QyZDkvMWY5YTlkZmItOTljZC0z
NTFjLTg4MTMtYTBhOWNiYTJkMmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4NDBmNWEtNjE5Zi00ZmYzLTk1
YjktNWI3M2JlYjNkMmQ5Lzc4ODQwZjVhLTYxOWYtNGZmMy05NWI5LTViNzNiZWIz
ZDJkOS5jcmwwHwYDVR0jBBgwFoAUfH3MHWR/MfRzvET1c1YrAk4wS+AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83ODg0MGY1YS02MTlmLTRmZjMtOTViOS01Yjcz
YmViM2QyZDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABD9AA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIyGNP5Yy9qvGXH32faY/aIA321vFtuRsKInHAS9UtWN9MqDxsCj
rKzZHqd80tOAZ3TpDyXT1v5C17U+/l1uB/fKDAIr41zHLsAf/m7FVDW+3OISlnxL
4pHvC1dBdN53V/7cSyQrUpFeQu0oOY0PIIhBnDukrYyqKIrfG9Hnb3tZ8sPYCTjP
32oZm5SAEXgw/G8mXxBKgnQaf88ANB+3MEDutLjDmYK/odnWNGYEU2Lezc0z4trm
9+8W44f92t143ltfuxrnm7GvzugIHfUrz1EisPpG6IxTHVBZm+uGLjmtlM0VwOcQ
DYnMMhLeVkYPpEh22jKlskmi9EvPemsxv5g=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:45:24 2025 by rpki-client