Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/e152d5ef-5abc-3de2-8e1e-e2ec20e821b4.roa
File: e152d5ef-5abc-3de2-8e1e-e2ec20e821b4.roa (raw, json)
Hash identifier: TcRExteRqzqVYl4//7QYAOVaeeytknDxfny4To2iPfs=
Subject key identifier: 67:23:2F:70:D9:6E:9D:9A:20:3E:9B:7E:9F:65:A1:3C:1B:EF:21:60
Certificate issuer: /CN=be7a0cf5-d98b-4cd3-adcb-1936d1ae1059
Certificate serial: 010D0C9F43285848345561FBBB7CEA4AF8F5AD00
Authority key identifier: 54:69:11:A8:6B:29:6F:61:FB:5E:DE:24:20:B9:2A:11:E7:6F:7B:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/e152d5ef-5abc-3de2-8e1e-e2ec20e821b4.roa
Signing time: Sat 14 Dec 2024 14:00:52 +0000
ROA not before: Sat 14 Dec 2024 14:00:52 +0000
ROA not after: Fri 14 Mar 2025 13:00:52 +0000
asID: 30165
IP address blocks: 2604:e540::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:34:55:61:fb:bb:7c:ea:4a:f8:f5:ad:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be7a0cf5-d98b-4cd3-adcb-1936d1ae1059
Validity
Not Before: Dec 14 14:00:52 2024 GMT
Not After : Mar 14 13:00:52 2025 GMT
Subject: CN=88f587da-e561-4af4-8ab2-1856dba60db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:aa:f6:a8:a4:7e:90:ae:24:a0:ee:d9:f6:81:
24:a7:96:53:bb:80:7c:93:a6:10:f0:49:92:7c:67:
e8:38:de:a4:95:1c:d2:c5:98:02:21:d5:e1:a5:fe:
22:ee:50:cc:ba:6c:c0:d9:0a:70:6f:99:db:7b:bd:
fe:4d:91:fa:b0:ca:0d:38:36:70:ec:5c:ae:19:62:
e6:5b:95:91:e7:6c:ad:8b:9a:b0:d4:d5:b7:4a:8b:
da:a3:da:0f:b0:63:71:e9:c4:8f:f6:ee:b8:e3:59:
51:c7:29:16:83:03:0a:fe:03:55:7c:2e:13:a0:56:
d4:a3:17:19:40:ae:63:61:f1:80:12:07:0b:3a:c2:
33:9e:15:1e:63:18:79:47:05:b8:f2:c2:c7:fc:e2:
e5:9c:a9:57:df:70:ea:f7:bf:47:a9:d3:5f:c9:b0:
35:fe:c7:d3:6c:62:ce:d7:1e:f5:f8:32:ea:b3:9d:
89:bb:01:f3:77:0e:be:aa:0a:dc:ef:02:9e:ec:ae:
84:21:ab:46:9c:2a:a7:24:48:9e:dd:09:4f:b3:08:
ed:f0:fe:e0:eb:62:cb:eb:2c:f3:13:d7:3b:a0:61:
00:22:61:ee:a1:d3:70:3a:1e:a0:36:1b:c0:b8:a5:
59:7f:23:2a:2c:d5:f0:19:72:47:8c:e6:e8:a5:ab:
07:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:23:2F:70:D9:6E:9D:9A:20:3E:9B:7E:9F:65:A1:3C:1B:EF:21:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/e152d5ef-5abc-3de2-8e1e-e2ec20e821b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059.crl
X509v3 Authority Key Identifier:
keyid:54:69:11:A8:6B:29:6F:61:FB:5E:DE:24:20:B9:2A:11:E7:6F:7B:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:e540::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:c5:39:63:f1:be:fc:39:c4:25:2b:37:27:0f:b5:21:a7:a5:
63:8e:a0:38:02:aa:09:3f:13:cb:08:fd:0a:68:9e:17:57:80:
8b:c7:24:a7:1a:6f:68:30:08:46:b9:80:b5:9d:d3:6f:c4:5d:
ca:54:61:10:65:71:cd:22:28:4a:35:ab:7f:02:70:3d:93:b2:
50:1e:21:2d:c6:8d:86:55:c6:a7:00:c4:6a:74:ec:86:88:e5:
65:95:ff:b2:dc:1e:fa:d9:c3:a8:7e:29:0b:b5:fb:40:6a:fe:
b7:89:54:88:dc:44:af:c2:f0:04:e2:0d:8f:3c:da:14:72:92:
4b:16:43:e5:17:c4:ff:12:1e:11:0b:04:b9:e4:7e:c4:f6:f1:
87:8b:f0:3a:94:ac:6e:4c:72:82:66:de:3c:49:e6:1b:4a:94:
0e:1a:db:af:a2:1a:7a:f8:f9:3a:99:42:ba:de:4f:db:da:cd:
98:5d:5a:f8:4d:33:52:98:be:c5:9a:eb:2d:18:97:06:aa:0e:
b4:f4:a5:e1:e7:1c:e7:cc:84:bd:9a:c1:78:6a:c7:49:30:2b:
74:f6:ab:85:86:f5:cf:8f:53:b1:cd:08:6c:15:f5:06:e9:ee:
09:4b:10:55:af:0c:86:6e:68:4a:07:7c:bb:b6:ca:2d:27:24:
15:db:87:bf
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEg0VWH7u3zqSvj1rQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmU3YTBjZjUtZDk4Yi00Y2QzLWFkY2ItMTkzNmQxYWUx
MDU5MB4XDTI0MTIxNDE0MDA1MloXDTI1MDMxNDEzMDA1MlowLzEtMCsGA1UEAxMk
ODhmNTg3ZGEtZTU2MS00YWY0LThhYjItMTg1NmRiYTYwZGIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6r2qKR+kK4koO7Z9oEkp5ZTu4B8k6YQ8EmS
fGfoON6klRzSxZgCIdXhpf4i7lDMumzA2Qpwb5nbe73+TZH6sMoNODZw7FyuGWLm
W5WR52yti5qw1NW3Sovao9oPsGNx6cSP9u6441lRxykWgwMK/gNVfC4ToFbUoxcZ
QK5jYfGAEgcLOsIznhUeYxh5RwW48sLH/OLlnKlX33Dq979HqdNfybA1/sfTbGLO
1x71+DLqs52JuwHzdw6+qgrc7wKe7K6EIatGnCqnJEie3QlPswjt8P7g62LL6yzz
E9c7oGEAImHuodNwOh6gNhvAuKVZfyMqLNXwGXJHjObopasHFwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFGcjL3DZbp2aID6bfp9loTwb7yFgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZTdh
MGNmNS1kOThiLTRjZDMtYWRjYi0xOTM2ZDFhZTEwNTkvZTE1MmQ1ZWYtNWFiYy0z
ZGUyLThlMWUtZTJlYzIwZTgyMWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmU3YTBjZjUtZDk4Yi00Y2QzLWFk
Y2ItMTkzNmQxYWUxMDU5L2JlN2EwY2Y1LWQ5OGItNGNkMy1hZGNiLTE5MzZkMWFl
MTA1OS5jcmwwHwYDVR0jBBgwFoAUVGkRqGspb2H7Xt4kILkqEedve0IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9iZTdhMGNmNS1kOThiLTRjZDMtYWRjYi0xOTM2
ZDFhZTEwNTkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTlQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCpxTlj8b78OcQlKzcnD7Uhp6VjjqA4AqoJPxPLCP0KaJ4XV4CLxySn
Gm9oMAhGuYC1ndNvxF3KVGEQZXHNIihKNat/AnA9k7JQHiEtxo2GVcanAMRqdOyG
iOVllf+y3B762cOofikLtftAav63iVSI3ESvwvAE4g2PPNoUcpJLFkPlF8T/Eh4R
CwS55H7E9vGHi/A6lKxuTHKCZt48SeYbSpQOGtuvohp6+Pk6mUK63k/b2s2YXVr4
TTNSmL7FmustGJcGqg609KXh5xznzIS9msF4asdJMCt09quFhvXPj1OxzQhsFfUG
6e4JSxBVrwyGbmhKB3y7tsotJyQV24e/
-----END CERTIFICATE-----
Generated at Fri May 9 16:43:49 2025 by rpki-client