Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fb699693-f923-3484-a501-c62fdad2d818.roa
File: fb699693-f923-3484-a501-c62fdad2d818.roa (raw, json)
Hash identifier: vvpGYuoVDCV3ZAEVseDT6dOA5Hk2dVewYnHtq9ylmhg=
Subject key identifier: 3A:D4:E1:EB:D1:2C:7D:AE:4D:F4:D7:23:8B:E3:91:BA:82:0D:28:68
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848305ECC9E1AF14037826027E0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fb699693-f923-3484-a501-c62fdad2d818.roa
Signing time: Fri 13 Dec 2024 03:56:42 +0000
ROA not before: Fri 13 Dec 2024 03:56:42 +0000
ROA not after: Thu 13 Mar 2025 02:56:42 +0000
asID: 13335
IP address blocks: 2606:4700:a0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:5e:cc:9e:1a:f1:40:37:82:60:27:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 03:56:42 2024 GMT
Not After : Mar 13 02:56:42 2025 GMT
Subject: CN=c3592e5d-00b3-4a59-881c-eae0e49d2cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:52:97:a2:2d:97:ae:66:9e:b4:04:0e:c6:1f:
cb:a9:a3:21:ba:8c:97:6d:68:ac:c8:f5:18:d0:f8:
84:86:e1:b8:4f:df:40:79:69:86:15:77:9b:d2:ad:
68:ca:f8:0e:79:a5:f6:18:65:91:67:8a:93:9a:11:
f4:1a:d3:2c:94:60:b6:3f:97:d3:fb:38:97:ae:2e:
c5:c6:ef:53:c4:94:2c:37:b5:3e:97:62:14:b9:92:
bb:4a:3b:a5:4d:c2:57:b4:31:5f:07:78:35:8d:78:
b1:38:85:19:e5:3b:eb:77:55:1b:d7:4f:3d:83:b7:
96:aa:ad:0f:2f:c4:da:6c:ce:4e:c6:f2:49:08:83:
e2:ee:86:78:cf:f6:11:c4:74:bc:0a:1a:3f:ba:93:
40:f6:c1:c1:5b:e8:44:72:4b:8e:97:95:ab:65:d0:
ee:b1:31:1e:c4:37:3c:4c:93:40:10:54:e3:67:ed:
5f:3f:88:af:61:8d:fa:ac:b3:e8:5b:eb:ff:53:8c:
60:b1:71:97:f8:28:e6:e0:62:b5:53:03:56:ff:a2:
87:8b:4a:9b:82:cd:9c:4a:e3:32:c8:12:1e:fa:6e:
4d:37:f5:06:41:f9:e4:63:7f:8e:cd:58:93:2d:ca:
7f:4f:2e:5d:72:05:2d:84:55:73:47:cc:c5:f2:69:
ed:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D4:E1:EB:D1:2C:7D:AE:4D:F4:D7:23:8B:E3:91:BA:82:0D:28:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fb699693-f923-3484-a501-c62fdad2d818.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:4700:a0::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:2c:0d:15:11:c2:f7:79:6c:76:79:e1:ff:96:c5:31:6b:35:
a4:cd:51:de:cd:a0:68:bb:4e:24:5b:e0:03:51:95:7d:d1:c8:
7b:d8:d9:16:bd:44:e8:66:f4:c3:c8:77:00:2b:58:a7:15:13:
45:9d:56:a9:42:03:5a:08:12:b1:95:25:a3:0a:97:0c:04:8b:
2f:26:60:65:20:fd:f0:39:2e:cf:8c:25:77:82:56:bc:ce:77:
0a:d6:90:05:12:50:ff:ad:c8:8a:e5:cb:a4:2d:38:d1:8a:b7:
3c:47:87:d1:b9:21:82:b5:6d:e5:d6:72:3d:3b:22:04:db:cb:
bd:06:d2:23:f6:d7:ef:4b:1e:de:a6:31:69:99:a0:ca:cc:47:
58:13:46:89:4c:76:ec:1c:6b:ce:52:bd:11:ed:96:42:7a:63:
41:aa:70:b3:60:20:fd:56:52:56:e9:09:69:cf:c4:12:8b:90:
06:cf:dc:d2:03:e1:b4:b9:ad:9b:36:68:98:bf:00:4b:40:1f:
04:cc:80:c3:ce:a7:c6:ad:5d:9a:90:f4:1f:49:95:20:ff:f6:
86:4f:3b:a7:9a:38:77:10:c9:f2:5c:ec:a0:07:e6:2e:df:d4:
98:a4:57:a4:1a:7b:ed:cd:4a:fc:e0:69:a5:30:96:87:ab:3c:
04:06:0d:54
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgwXsyeGvFAN4JgJ+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIxMzAzNTY0MloXDTI1MDMxMzAyNTY0MlowLzEtMCsGA1UEAxMk
YzM1OTJlNWQtMDBiMy00YTU5LTg4MWMtZWFlMGU0OWQyY2QxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1KXoi2XrmaetAQOxh/LqaMhuoyXbWisyPUY
0PiEhuG4T99AeWmGFXeb0q1oyvgOeaX2GGWRZ4qTmhH0GtMslGC2P5fT+ziXri7F
xu9TxJQsN7U+l2IUuZK7SjulTcJXtDFfB3g1jXixOIUZ5Tvrd1Ub1089g7eWqq0P
L8TabM5OxvJJCIPi7oZ4z/YRxHS8Cho/upNA9sHBW+hEckuOl5WrZdDusTEexDc8
TJNAEFTjZ+1fP4ivYY36rLPoW+v/U4xgsXGX+Cjm4GK1UwNW/6KHi0qbgs2cSuMy
yBIe+m5NN/UGQfnkY3+OzViTLcp/Ty5dcgUthFVzR8zF8mnt+QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDrU4evRLH2uTfTXI4vjkbqCDShoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZmI2OTk2OTMtZjkyMy0z
NDg0LWE1MDEtYzYyZmRhZDJkODE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHAACg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACYsDRURwvd5bHZ54f+WxTFrNaTNUd7NoGi7TiRb4ANRlX3RyHvY
2Ra9ROhm9MPIdwArWKcVE0WdVqlCA1oIErGVJaMKlwwEiy8mYGUg/fA5Ls+MJXeC
VrzOdwrWkAUSUP+tyIrly6QtONGKtzxHh9G5IYK1beXWcj07IgTby70G0iP21+9L
Ht6mMWmZoMrMR1gTRolMduwca85SvRHtlkJ6Y0GqcLNgIP1WUlbpCWnPxBKLkAbP
3NID4bS5rZs2aJi/AEtAHwTMgMPOp8atXZqQ9B9JlSD/9oZPO6eaOHcQyfJc7KAH
5i7f1JikV6Qae+3NSvzgaaUwloerPAQGDVQ=
-----END CERTIFICATE-----
Generated at Fri Apr 25 16:41:41 2025 by rpki-client