Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5c1609d0-24e4-3b86-b70a-ceda9f20f791.roa
File: 5c1609d0-24e4-3b86-b70a-ceda9f20f791.roa (raw, json)
Hash identifier: e0IE9fleP8cXc9yNlx7a+ZPQ0GalVO1P/H9ZnIaHYVQ=
Subject key identifier: 64:E2:A3:2C:39:FA:D0:57:49:16:AE:C2:30:57:10:3B:56:8E:53:3C
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848281B9BACFF30BBE9919EC000
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5c1609d0-24e4-3b86-b70a-ceda9f20f791.roa
Signing time: Tue 10 Dec 2024 04:54:51 +0000
ROA not before: Tue 10 Dec 2024 04:54:51 +0000
ROA not after: Mon 10 Mar 2025 03:54:51 +0000
asID: 13335
IP address blocks: 2606:4700:130::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:28:1b:9b:ac:ff:30:bb:e9:91:9e:c0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 04:54:51 2024 GMT
Not After : Mar 10 03:54:51 2025 GMT
Subject: CN=0ad911ae-937b-434b-a237-dca2af2ded95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f4:d4:a3:1b:52:eb:3c:c2:9b:49:0c:72:53:
30:0b:90:8f:1d:ec:c3:d1:92:74:b8:a5:cc:3d:84:
a0:d3:15:f6:63:e5:3f:2c:e8:4b:af:51:09:09:70:
46:2a:04:9d:31:b8:f2:fc:db:7a:99:e2:9f:15:53:
bd:ff:f7:4c:dd:7c:9f:60:78:a6:5a:c3:0e:e5:b0:
24:f2:58:80:73:93:13:95:ab:50:8c:f4:53:37:cf:
5c:6b:fe:50:47:b4:b7:91:a8:b9:0f:cf:86:15:10:
bb:83:35:cd:70:fc:70:6e:89:38:3a:6a:4c:eb:8d:
7d:64:51:94:50:31:36:f2:5b:99:2e:67:35:24:3d:
b0:ec:e4:6e:70:df:bc:dc:7b:59:28:0f:cc:7c:52:
ec:30:e5:6a:46:62:34:79:83:8e:77:43:ab:33:60:
0f:b2:c1:2e:47:e6:27:c4:25:32:d1:19:1b:99:7c:
56:66:86:40:ea:2d:09:d2:4e:8e:d3:94:11:cd:f4:
4c:7e:5c:05:11:5a:55:81:c9:c6:26:9f:89:54:a8:
8b:26:6e:13:ce:7b:3d:59:a1:66:2f:45:26:9e:cf:
63:ca:f9:14:d0:18:19:12:6b:cc:9a:a3:49:b7:8d:
66:4f:63:f2:ff:29:70:58:ba:13:cd:59:64:35:a1:
fd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E2:A3:2C:39:FA:D0:57:49:16:AE:C2:30:57:10:3B:56:8E:53:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5c1609d0-24e4-3b86-b70a-ceda9f20f791.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:4700:130::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ba:3f:3d:60:c6:ce:84:13:b8:19:7a:78:64:93:fe:46:5d:04:
bf:a1:0b:61:80:69:ab:b8:37:55:bc:b8:2b:ec:bc:bb:65:0b:
39:5f:91:c5:d8:d9:7e:c2:2a:82:b2:69:0c:66:ed:06:73:17:
5b:fc:1b:fa:66:e2:1e:ed:96:93:5c:67:33:f0:d2:88:91:0b:
40:f3:7d:1a:d2:a4:9b:b6:43:ae:19:0f:a7:19:f5:dc:65:5c:
c1:3c:e0:17:8e:35:ae:77:78:50:21:d7:1a:8e:ac:d8:4f:60:
df:c2:5e:54:8a:7f:07:f9:4f:54:4f:05:22:12:70:f6:43:75:
0c:6c:ff:cf:97:05:6d:5a:4b:85:06:a2:2a:f4:a6:87:7c:37:
79:73:31:51:fe:a2:ec:54:41:78:98:d4:bf:34:f0:3c:74:45:
60:47:dd:29:ff:51:31:a9:e0:21:35:bd:9b:47:02:11:c2:e9:
33:57:2a:21:c0:99:35:26:9f:7e:29:de:53:46:61:bb:2c:6a:
b3:b8:e6:27:a2:34:08:76:d1:cc:8e:2c:dc:4c:65:ac:c5:9e:
fc:e9:f3:86:41:62:3d:5a:97:87:ce:89:0a:97:b7:83:7a:be:
b0:55:d9:48:c2:a3:db:38:7d:53:f6:c9:b5:d7:ad:bd:9e:62:
12:7f:82:96
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgoG5us/zC76ZGewAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIxMDA0NTQ1MVoXDTI1MDMxMDAzNTQ1MVowLzEtMCsGA1UEAxMk
MGFkOTExYWUtOTM3Yi00MzRiLWEyMzctZGNhMmFmMmRlZDk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfTUoxtS6zzCm0kMclMwC5CPHezD0ZJ0uKXM
PYSg0xX2Y+U/LOhLr1EJCXBGKgSdMbjy/Nt6meKfFVO9//dM3XyfYHimWsMO5bAk
8liAc5MTlatQjPRTN89ca/5QR7S3kai5D8+GFRC7gzXNcPxwbok4OmpM6419ZFGU
UDE28luZLmc1JD2w7ORucN+83HtZKA/MfFLsMOVqRmI0eYOOd0OrM2APssEuR+Yn
xCUy0RkbmXxWZoZA6i0J0k6O05QRzfRMflwFEVpVgcnGJp+JVKiLJm4Tzns9WaFm
L0Umns9jyvkU0BgZEmvMmqNJt41mT2Py/ylwWLoTzVlkNaH9eQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGTioyw5+tBXSRauwjBXEDtWjlM8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWMxNjA5ZDAtMjRlNC0z
Yjg2LWI3MGEtY2VkYTlmMjBmNzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgZHAAEw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALo/PWDGzoQTuBl6eGST/kZdBL+hC2GAaau4N1W8uCvsvLtlCzlf
kcXY2X7CKoKyaQxm7QZzF1v8G/pm4h7tlpNcZzPw0oiRC0DzfRrSpJu2Q64ZD6cZ
9dxlXME84BeONa53eFAh1xqOrNhPYN/CXlSKfwf5T1RPBSIScPZDdQxs/8+XBW1a
S4UGoir0pod8N3lzMVH+ouxUQXiY1L808Dx0RWBH3Sn/UTGp4CE1vZtHAhHC6TNX
KiHAmTUmn34p3lNGYbssarO45ieiNAh20cyOLNxMZazFnvzp84ZBYj1al4fOiQqX
t4N6vrBV2UjCo9s4fVP2ybXXrb2eYhJ/gpY=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:46:13 2025 by rpki-client