Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2876deb7-59b0-347b-9ccc-2a6004616a2e.roa
File: 2876deb7-59b0-347b-9ccc-2a6004616a2e.roa (raw, json)
Hash identifier: wOHVOboJ1HMO3RaZkh+vWRCV9DIzZCPWKHDJg5zrVgU=
Subject key identifier: E1:97:BC:82:82:DF:3B:AC:5D:92:19:E0:10:C7:D5:11:E9:31:93:BA
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848385EEAC63D6DE092CA1234D0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2876deb7-59b0-347b-9ccc-2a6004616a2e.roa
Signing time: Mon 16 Dec 2024 00:43:24 +0000
ROA not before: Mon 16 Dec 2024 00:43:24 +0000
ROA not after: Sat 15 Mar 2025 23:43:24 +0000
asID: 13335
IP address blocks: 2606:4700:3055::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:38:5e:ea:c6:3d:6d:e0:92:ca:12:34:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 16 00:43:24 2024 GMT
Not After : Mar 15 23:43:24 2025 GMT
Subject: CN=4234db66-5a64-4884-afb2-9430aa978a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b7:ba:a7:e2:0f:d3:07:70:0b:09:7b:86:13:
38:57:9b:e9:48:8a:fd:13:75:f3:4c:5c:a3:eb:6b:
92:46:d8:80:22:af:26:bd:6e:fb:4b:5e:b1:2a:dc:
e9:35:1b:13:c8:ec:7d:84:30:ab:0d:9f:f5:25:89:
61:73:73:cf:33:db:e1:8c:30:9b:72:9c:13:4a:f2:
b8:0b:03:d8:d7:e5:95:88:bc:14:df:67:34:44:81:
e9:a3:24:03:4a:a3:4c:1c:5c:84:f5:78:b1:22:24:
37:c1:78:d6:c9:c3:a5:f4:e3:60:11:45:19:ee:34:
41:9c:51:73:79:b0:38:7c:21:0e:d6:85:2e:ab:a8:
c0:ca:e2:d1:e0:8d:6b:e1:90:bb:83:b7:3d:32:24:
31:1f:87:14:02:50:9e:71:f3:38:43:92:52:87:50:
e1:60:e2:4d:93:06:a9:c7:19:95:65:06:02:05:27:
fa:0f:a5:2f:c2:fb:85:e7:d8:44:49:b8:83:52:b6:
54:2d:bc:a5:c7:9e:fc:78:28:a9:cd:a7:60:e7:94:
e2:f1:91:68:64:b8:2b:a5:f5:b2:ab:08:17:6a:4f:
43:5c:1d:c2:b7:b9:11:a1:ca:21:39:cf:60:6d:dd:
b2:24:f8:0a:63:cf:1b:12:67:fe:5c:1f:11:ff:e6:
d6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:97:BC:82:82:DF:3B:AC:5D:92:19:E0:10:C7:D5:11:E9:31:93:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2876deb7-59b0-347b-9ccc-2a6004616a2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:4700:3055::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b9:fc:1f:6a:ad:f2:44:0e:50:7a:c9:74:b8:99:25:26:52:9a:
bb:5a:03:57:69:c4:97:92:a8:98:96:eb:f3:9b:fd:66:49:e3:
f3:1f:61:d9:a9:17:00:be:ef:91:13:05:a4:7e:b5:7a:11:d1:
78:2b:a1:d4:74:12:69:b5:91:fa:05:c1:55:4c:7e:04:27:45:
3d:5d:ae:d8:cc:a0:60:d7:80:93:60:c5:13:fd:f4:41:fd:37:
ee:bf:2b:55:e8:d6:97:13:f6:e1:7d:7c:26:0c:3d:d1:1a:b9:
a4:5b:14:51:5f:ca:15:3e:f8:1d:34:5e:74:49:c2:14:8b:cf:
ae:19:06:bb:c6:e5:ce:cd:5f:c9:1a:c4:a6:46:07:12:f6:a7:
e3:05:02:ba:92:90:2b:37:07:d1:93:ae:a0:8a:a9:25:ab:cc:
4a:10:91:0e:ec:63:af:85:19:10:d8:a5:df:22:97:7e:34:cc:
fb:6a:14:4a:62:fd:62:ff:e2:fa:a5:88:08:29:65:58:78:4e:
7a:99:ba:36:c1:de:36:7b:53:79:a7:75:9f:d9:24:93:4d:4d:
0d:16:b3:76:22:1a:71:49:a3:ef:24:41:72:53:65:80:df:1c:
14:9e:6f:21:3a:be:a2:1e:02:6b:00:66:66:4b:a8:f1:e1:55:
71:31:b5:6f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEg4XurGPW3gksoSNNAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIxNjAwNDMyNFoXDTI1MDMxNTIzNDMyNFowLzEtMCsGA1UEAxMk
NDIzNGRiNjYtNWE2NC00ODg0LWFmYjItOTQzMGFhOTc4YTg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApre6p+IP0wdwCwl7hhM4V5vpSIr9E3XzTFyj
62uSRtiAIq8mvW77S16xKtzpNRsTyOx9hDCrDZ/1JYlhc3PPM9vhjDCbcpwTSvK4
CwPY1+WViLwU32c0RIHpoyQDSqNMHFyE9XixIiQ3wXjWycOl9ONgEUUZ7jRBnFFz
ebA4fCEO1oUuq6jAyuLR4I1r4ZC7g7c9MiQxH4cUAlCecfM4Q5JSh1DhYOJNkwap
xxmVZQYCBSf6D6UvwvuF59hESbiDUrZULbylx578eCipzadg55Ti8ZFoZLgrpfWy
qwgXak9DXB3Ct7kRocohOc9gbd2yJPgKY88bEmf+XB8R/+bWLwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOGXvIKC3zusXZIZ4BDH1RHpMZO6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjg3NmRlYjctNTliMC0z
NDdiLTljY2MtMmE2MDA0NjE2YTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHADBV
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALn8H2qt8kQOUHrJdLiZJSZSmrtaA1dpxJeSqJiW6/Ob/WZJ4/Mf
YdmpFwC+75ETBaR+tXoR0XgrodR0Emm1kfoFwVVMfgQnRT1drtjMoGDXgJNgxRP9
9EH9N+6/K1Xo1pcT9uF9fCYMPdEauaRbFFFfyhU++B00XnRJwhSLz64ZBrvG5c7N
X8kaxKZGBxL2p+MFArqSkCs3B9GTrqCKqSWrzEoQkQ7sY6+FGRDYpd8il340zPtq
FEpi/WL/4vqliAgpZVh4TnqZujbB3jZ7U3mndZ/ZJJNNTQ0Ws3YiGnFJo+8kQXJT
ZYDfHBSebyE6vqIeAmsAZmZLqPHhVXExtW8=
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:26:31 2025 by rpki-client