Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/e30c1665-e4b2-3b17-b89d-2f71574ba8af.roa
File: e30c1665-e4b2-3b17-b89d-2f71574ba8af.roa (raw, json)
Hash identifier: KXTIulKOqeY2KvK2vkdvuq/bZza+HP3AJU7tjJQhFGI=
Subject key identifier: 0A:B5:E3:65:FC:20:7E:67:21:6C:35:0E:07:F0:DA:BA:9F:78:8B:D9
Certificate issuer: /CN=bc831f6b-71a6-46bb-9f64-2da80ccc244c
Certificate serial: 010D0C9F4328584850403758DFBB14ACB4C61420
Authority key identifier: A9:50:46:A5:5A:7E:BB:0F:CE:06:22:BA:A4:AF:11:59:F2:3E:CD:24
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/e30c1665-e4b2-3b17-b89d-2f71574ba8af.roa
Signing time: Tue 24 Dec 2024 14:00:53 +0000
ROA not before: Tue 24 Dec 2024 14:00:53 +0000
ROA not after: Mon 24 Mar 2025 13:00:53 +0000
asID: 18254
IP address blocks: 2600:b400::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:50:40:37:58:df:bb:14:ac:b4:c6:14:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc831f6b-71a6-46bb-9f64-2da80ccc244c
Validity
Not Before: Dec 24 14:00:53 2024 GMT
Not After : Mar 24 13:00:53 2025 GMT
Subject: CN=3b7a1af8-b122-4d86-aa84-96b7434b4e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c2:3a:d5:d4:39:24:ab:50:b9:a5:17:fa:b5:
da:a2:a2:25:55:02:56:b1:7c:27:e0:9f:bd:be:10:
ec:a3:60:49:16:87:54:4a:62:51:11:bc:54:2d:4f:
e2:2d:19:44:58:34:cd:fa:62:12:64:19:9a:78:0d:
70:5a:ec:6f:47:64:2d:25:d6:fa:15:77:b1:c9:df:
5a:e4:77:2f:a5:cd:94:a1:b5:3a:79:87:a4:46:d3:
aa:45:a0:d3:73:f4:57:c4:a4:d5:e5:b9:49:66:8f:
48:00:df:ce:6e:52:12:cf:0e:3e:20:2b:fa:be:b4:
f5:a3:c6:fa:ad:7b:cb:12:7b:de:5a:be:1a:dd:a6:
33:3f:46:3c:b3:84:63:78:11:32:e8:ba:2c:6a:80:
cb:e3:42:bd:fc:24:f0:10:17:f7:f0:0f:84:ff:5a:
19:62:e2:5d:89:7b:df:19:23:a2:07:45:ba:e6:82:
e9:dc:c8:8d:cf:1a:db:63:4b:10:ed:d0:ab:7e:30:
92:5a:28:4a:15:38:5b:ae:e8:df:51:ec:a2:3d:35:
5c:54:c6:06:cd:ad:39:60:47:2b:bd:8f:be:b4:b2:
17:c4:b0:2a:7d:75:c8:e2:ba:17:e6:1d:e6:3f:74:
3a:21:25:70:2e:e1:4c:07:5c:c9:80:8e:79:f4:45:
c4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B5:E3:65:FC:20:7E:67:21:6C:35:0E:07:F0:DA:BA:9F:78:8B:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/e30c1665-e4b2-3b17-b89d-2f71574ba8af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/bc831f6b-71a6-46bb-9f64-2da80ccc244c.crl
X509v3 Authority Key Identifier:
keyid:A9:50:46:A5:5A:7E:BB:0F:CE:06:22:BA:A4:AF:11:59:F2:3E:CD:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:b400::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:2b:c2:64:3a:de:fa:6d:aa:61:5d:6d:7c:fa:a8:fe:82:d4:
38:05:4c:36:9b:cf:11:66:f8:40:38:0f:3c:d4:f8:b0:b1:16:
05:ef:f2:66:7c:34:df:34:d6:2e:36:c6:04:9f:ac:c8:ed:d1:
58:18:b8:73:ab:01:29:3b:76:01:2e:71:21:2c:33:f3:02:9c:
69:3e:11:3e:16:b1:aa:a9:a2:0f:47:dd:44:74:03:8f:b4:bf:
52:48:02:dc:90:32:20:2d:49:29:45:f6:3f:56:6b:6a:93:42:
bd:96:ae:82:08:36:c0:e9:b5:9f:a2:8f:20:06:6f:6d:78:fe:
8e:b1:82:2a:39:d6:60:b9:65:c0:c7:fe:53:30:7a:ec:ea:80:
9a:0a:93:30:73:30:e8:ef:87:9f:cf:07:44:c4:4b:9b:28:f5:
ed:7d:99:ea:8c:70:4c:06:87:32:93:7b:cf:47:bc:6e:83:6b:
41:cc:e0:41:cb:e2:07:0c:ab:d5:e0:d7:d4:e0:80:01:ae:c7:
d9:b3:a7:2b:2c:26:57:06:ad:33:5e:b9:5b:89:f2:79:09:52:
de:d6:b2:39:24:a9:07:82:37:20:67:78:4c:f3:0b:af:06:48:
c4:58:70:6b:b4:3e:8a:6f:4e:fa:d1:d7:8f:b6:61:5b:98:a6:
d7:f2:d4:ef
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEhQQDdY37sUrLTGFCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmM4MzFmNmItNzFhNi00NmJiLTlmNjQtMmRhODBjY2My
NDRjMB4XDTI0MTIyNDE0MDA1M1oXDTI1MDMyNDEzMDA1M1owLzEtMCsGA1UEAxMk
M2I3YTFhZjgtYjEyMi00ZDg2LWFhODQtOTZiNzQzNGI0ZTM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8I61dQ5JKtQuaUX+rXaoqIlVQJWsXwn4J+9
vhDso2BJFodUSmJREbxULU/iLRlEWDTN+mISZBmaeA1wWuxvR2QtJdb6FXexyd9a
5Hcvpc2UobU6eYekRtOqRaDTc/RXxKTV5blJZo9IAN/OblISzw4+ICv6vrT1o8b6
rXvLEnveWr4a3aYzP0Y8s4RjeBEy6LosaoDL40K9/CTwEBf38A+E/1oZYuJdiXvf
GSOiB0W65oLp3MiNzxrbY0sQ7dCrfjCSWihKFThbrujfUeyiPTVcVMYGza05YEcr
vY++tLIXxLAqfXXI4roX5h3mP3Q6ISVwLuFMB1zJgI559EXEQQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFAq142X8IH5nIWw1Dgfw2rqfeIvZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iYzgz
MWY2Yi03MWE2LTQ2YmItOWY2NC0yZGE4MGNjYzI0NGMvZTMwYzE2NjUtZTRiMi0z
YjE3LWI4OWQtMmY3MTU3NGJhOGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmM4MzFmNmItNzFhNi00NmJiLTlm
NjQtMmRhODBjY2MyNDRjL2JjODMxZjZiLTcxYTYtNDZiYi05ZjY0LTJkYTgwY2Nj
MjQ0Yy5jcmwwHwYDVR0jBBgwFoAUqVBGpVp+uw/OBiK6pK8RWfI+zSQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iYzgzMWY2Yi03MWE2LTQ2YmItOWY2NC0yZGE4
MGNjYzI0NGMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgC0ADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBCK8JkOt76baphXW18+qj+gtQ4BUw2m88RZvhAOA881PiwsRYF7/Jm
fDTfNNYuNsYEn6zI7dFYGLhzqwEpO3YBLnEhLDPzApxpPhE+FrGqqaIPR91EdAOP
tL9SSALckDIgLUkpRfY/Vmtqk0K9lq6CCDbA6bWfoo8gBm9teP6OsYIqOdZguWXA
x/5TMHrs6oCaCpMwczDo74efzwdExEubKPXtfZnqjHBMBocyk3vPR7xug2tBzOBB
y+IHDKvV4NfU4IABrsfZs6crLCZXBq0zXrlbifJ5CVLe1rI5JKkHgjcgZ3hM8wuv
BkjEWHBrtD6Kb0760dePtmFbmKbX8tTv
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:28:57 2025 by rpki-client