Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8dfd5f6d-30c2-3ab5-9e90-8fdec3ef44ea.roa
File: 8dfd5f6d-30c2-3ab5-9e90-8fdec3ef44ea.roa (raw, json)
Hash identifier: CPh1Vdqa2VFde+6397S5ZbEeKsVBYAsNDH5tLefsk0g=
Subject key identifier: C7:2E:02:33:7E:CD:D9:32:39:56:AD:C9:14:60:A9:8E:AB:21:1F:09
Certificate issuer: /CN=8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5
Certificate serial: 010D0C9F43285848F926970F6384F2ADE6AC2FC0
Authority key identifier: 92:04:3A:A3:CA:F8:0F:3C:8D:45:A1:49:B5:5F:4B:AD:F5:C3:D9:0E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8dfd5f6d-30c2-3ab5-9e90-8fdec3ef44ea.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 10965
IP address blocks: 2001:410:2000::/40 maxlen: 48
2001:410:2000::/48 maxlen: 48
2001:410:2001::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:97:0f:63:84:f2:ad:e6:ac:2f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=4f947801-f1db-4d0e-967c-9a4a2374cffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ff:20:43:ff:89:ff:33:da:0d:74:2c:cf:fa:
ae:2a:3f:26:f5:69:44:28:97:21:61:25:19:9e:2c:
79:02:83:db:96:67:8f:3d:fc:82:01:45:f5:5e:01:
fd:64:23:05:f5:f6:eb:64:93:e1:25:09:07:41:8e:
e8:cd:86:e8:e6:19:89:1f:8a:41:13:94:59:80:0a:
3a:6e:64:ba:ce:88:c4:b9:bd:de:d0:c3:8d:28:26:
c2:5c:0d:75:f2:c8:de:3a:79:e8:8a:e6:df:1a:a4:
9b:72:25:65:98:df:01:37:2a:0a:54:8d:a7:0c:69:
af:d3:7f:97:a1:fa:e2:43:7e:37:8c:f2:ed:7d:53:
7e:82:33:91:e8:ef:66:28:8c:b1:bc:7c:1b:a8:3c:
9f:e0:79:cb:01:bc:70:a6:e4:e7:f9:03:29:ba:2a:
a5:90:af:bc:a8:3a:e8:6e:a0:2e:a5:dc:ed:6d:9d:
c0:2e:43:b5:36:95:de:e9:ee:e6:26:a8:92:2f:53:
70:89:bf:7f:76:10:76:3b:3b:7b:9d:08:a3:92:b9:
f0:fa:db:d9:4a:5f:e6:cd:f0:c0:a3:c6:e7:ba:d8:
3d:69:9f:aa:2e:5c:7f:a8:bc:6e:89:99:d2:a2:cc:
19:98:6f:ef:04:01:09:10:4a:34:59:44:1a:41:44:
0e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:2E:02:33:7E:CD:D9:32:39:56:AD:C9:14:60:A9:8E:AB:21:1F:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8dfd5f6d-30c2-3ab5-9e90-8fdec3ef44ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.crl
X509v3 Authority Key Identifier:
keyid:92:04:3A:A3:CA:F8:0F:3C:8D:45:A1:49:B5:5F:4B:AD:F5:C3:D9:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:410:2000::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:a8:07:5a:83:1e:1a:8d:2f:1a:ba:da:3f:a6:57:eb:78:61:
d5:66:8e:ea:43:63:f2:1c:55:29:57:3e:de:aa:2f:7c:1d:8c:
ca:c4:e1:eb:46:72:c2:66:0e:e2:f3:27:f7:10:b1:54:a8:6c:
3c:f9:cf:ec:16:7f:f9:77:e2:bd:cf:73:58:c3:96:2e:64:98:
6f:12:5a:40:5a:36:97:21:9f:1b:f7:c3:e9:99:47:4b:84:e5:
74:93:4c:94:e7:66:14:2a:df:86:ab:66:57:3c:c9:11:1a:91:
24:61:c1:5c:e7:f6:3a:a9:73:fd:f3:72:1a:e3:f5:c6:b7:b0:
14:35:27:21:60:d4:3b:fd:df:25:ce:f3:e2:28:35:ef:29:9e:
06:a6:8c:05:7b:35:55:1c:a8:d8:73:9e:09:67:54:96:93:5b:
d2:f8:19:d2:f1:b5:61:5f:e1:cc:3a:7b:6e:48:b3:57:d5:71:
28:ea:4a:35:83:bc:fe:0a:bb:a5:41:b1:0f:28:b0:40:19:23:
f6:52:23:59:7f:33:71:76:5f:77:80:46:75:d7:dd:ea:28:6d:
5c:40:2e:9b:00:55:12:46:54:19:49:9b:13:c0:b6:4c:be:62:
81:7d:9f:39:28:2c:3e:18:b7:ae:64:00:e2:fe:01:7f:eb:ee:
e8:b0:b3:bd
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEj5JpcPY4TyreasL8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGM5ZjUzYzctZTY0ZC00ZjE0LWE1ZTEtYzE0ZThiMWUz
OGI1MB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk
NGY5NDc4MDEtZjFkYi00ZDBlLTk2N2MtOWE0YTIzNzRjZmZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnP8gQ/+J/zPaDXQsz/quKj8m9WlEKJchYSUZ
nix5AoPblmePPfyCAUX1XgH9ZCMF9fbrZJPhJQkHQY7ozYbo5hmJH4pBE5RZgAo6
bmS6zojEub3e0MONKCbCXA118sjeOnnoiubfGqSbciVlmN8BNyoKVI2nDGmv03+X
ofriQ343jPLtfVN+gjOR6O9mKIyxvHwbqDyf4HnLAbxwpuTn+QMpuiqlkK+8qDro
bqAupdztbZ3ALkO1NpXe6e7mJqiSL1Nwib9/dhB2Ozt7nQijkrnw+tvZSl/mzfDA
o8bnutg9aZ+qLlx/qLxuiZnSoswZmG/vBAEJEEo0WUQaQUQOowIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFMcuAjN+zdkyOVatyRRgqY6rIR8JMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84Yzlm
NTNjNy1lNjRkLTRmMTQtYTVlMS1jMTRlOGIxZTM4YjUvOGRmZDVmNmQtMzBjMi0z
YWI1LTllOTAtOGZkZWMzZWY0NGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGM5ZjUzYzctZTY0ZC00ZjE0LWE1
ZTEtYzE0ZThiMWUzOGI1LzhjOWY1M2M3LWU2NGQtNGYxNC1hNWUxLWMxNGU4YjFl
MzhiNS5jcmwwHwYDVR0jBBgwFoAUkgQ6o8r4DzyNRaFJtV9LrfXD2Q4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84YzlmNTNjNy1lNjRkLTRmMTQtYTVlMS1jMTRl
OGIxZTM4YjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAIAEEECAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAeagHWoMeGo0vGrraP6ZX63hh1WaO6kNj8hxVKVc+3qovfB2MysTh
60ZywmYO4vMn9xCxVKhsPPnP7BZ/+Xfivc9zWMOWLmSYbxJaQFo2lyGfG/fD6ZlH
S4TldJNMlOdmFCrfhqtmVzzJERqRJGHBXOf2Oqlz/fNyGuP1xrewFDUnIWDUO/3f
Jc7z4ig17ymeBqaMBXs1VRyo2HOeCWdUlpNb0vgZ0vG1YV/hzDp7bkizV9VxKOpK
NYO8/gq7pUGxDyiwQBkj9lIjWX8zcXZfd4BGddfd6ihtXEAumwBVEkZUGUmbE8C2
TL5igX2fOSgsPhi3rmQA4v4Bf+vu6LCzvQ==
-----END CERTIFICATE-----
Generated at Wed Apr 16 03:25:57 2025 by rpki-client on console.sobornost.net