Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/36e266de-8412-30d9-874c-bd20116a8db2.roa
File: 36e266de-8412-30d9-874c-bd20116a8db2.roa (raw, json)
Hash identifier: OPi7X/GvkojCTN1SNHpUBqCAchKovrYkfgKi7tkgpuI=
Subject key identifier: 43:0B:96:2D:89:89:8B:05:71:97:BD:7C:05:AF:71:BE:5C:F2:58:2A
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584917DC1FCDB57CEB53AD124800
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/36e266de-8412-30d9-874c-bd20116a8db2.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 13335
IP address blocks: 2606:4700:4034::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:1f:cd:b5:7c:eb:53:ad:12:48:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=3352ea99-add5-4231-adcc-a9580c4c3759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:78:96:dc:50:ac:dc:27:15:b7:18:d6:b8:c4:
3e:d7:d1:40:39:77:e6:af:b5:a5:88:00:13:a0:2f:
7a:04:d0:d1:8b:ff:ef:eb:be:c8:e1:ee:49:01:32:
d1:4f:d7:c7:fc:2c:91:bd:2b:6d:1b:02:52:b3:75:
c0:f3:29:f4:b0:84:2a:c2:27:c6:65:7b:60:82:ac:
10:e3:cc:00:89:ff:c7:eb:8e:87:ae:ec:22:da:a3:
b4:14:00:cb:50:78:2d:4c:c5:44:21:83:9c:37:53:
6d:bf:5e:26:a1:5c:f4:db:43:03:6f:2b:0d:f6:b6:
16:9a:46:47:b4:51:a2:e0:88:72:62:46:26:31:a6:
bd:8e:d3:cc:20:d2:67:de:a7:12:ac:d8:8b:f3:be:
ca:25:9f:1e:ca:f2:71:a1:59:cf:a5:2f:55:d9:85:
3a:06:15:a1:e2:aa:26:b2:88:35:e5:97:90:ca:71:
84:f9:22:09:ef:62:14:d3:5f:6a:d1:2f:7b:0f:69:
ec:6e:a9:63:30:4e:ef:2a:03:6e:33:80:a1:15:4b:
87:ad:21:f9:cf:26:b8:bb:dd:49:6c:66:4a:db:3b:
bb:57:53:16:6f:58:d2:b2:c3:50:d2:ab:d1:46:aa:
99:38:56:1d:a3:fc:9f:73:38:1f:ff:9e:b2:04:ba:
55:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:0B:96:2D:89:89:8B:05:71:97:BD:7C:05:AF:71:BE:5C:F2:58:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/36e266de-8412-30d9-874c-bd20116a8db2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:4700:4034::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:fe:f5:f7:66:1a:47:09:7f:45:9f:a7:e8:75:89:ba:32:61:
50:e7:c4:ac:83:2f:3a:57:c4:91:0f:2b:d9:45:7c:0f:b2:4e:
ed:e0:99:df:15:bf:6a:a4:24:88:1f:b0:65:c8:65:d7:74:cd:
fc:26:ba:03:76:2b:c2:99:d5:66:4f:cf:09:4d:1b:b1:4f:4b:
a5:34:cc:df:0a:71:4d:81:45:85:1d:5d:2d:84:80:f0:f5:ab:
84:dc:de:f2:70:38:d8:99:13:bf:e5:1c:01:4e:32:6c:90:a5:
67:55:2f:23:62:38:01:a9:02:28:35:68:04:d0:c6:76:0b:ba:
e4:28:84:18:40:33:a2:75:8c:11:52:93:ff:9b:30:ae:f2:57:
48:67:3f:a2:49:80:19:0a:a5:87:62:a2:92:97:f9:b3:76:ce:
b4:16:21:b9:a0:e1:d7:d8:0f:55:c7:53:1c:b8:cf:34:ee:cb:
0b:c2:fc:56:2b:f0:69:8c:b1:67:ee:a7:f1:79:75:db:b7:ed:
ce:fe:43:76:b9:19:51:5e:66:17:0c:31:39:83:ba:11:8a:60:
b3:9c:01:f4:d0:4e:a6:10:1b:41:d4:0b:93:66:63:5b:39:20:
8b:35:c1:1b:c1:cb:2a:b7:79:0f:f3:31:70:e6:fb:31:61:53:
6d:7b:82:79
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkX3B/NtXzrU60SSAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk
MzM1MmVhOTktYWRkNS00MjMxLWFkY2MtYTk1ODBjNGMzNzU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3iW3FCs3CcVtxjWuMQ+19FAOXfmr7WliAAT
oC96BNDRi//v677I4e5JATLRT9fH/CyRvSttGwJSs3XA8yn0sIQqwifGZXtggqwQ
48wAif/H646Hruwi2qO0FADLUHgtTMVEIYOcN1Ntv14moVz020MDbysN9rYWmkZH
tFGi4IhyYkYmMaa9jtPMINJn3qcSrNiL877KJZ8eyvJxoVnPpS9V2YU6BhWh4qom
sog15ZeQynGE+SIJ72IU019q0S97D2nsbqljME7vKgNuM4ChFUuHrSH5zya4u91J
bGZK2zu7V1MWb1jSssNQ0qvRRqqZOFYdo/yfczgf/56yBLpVXwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEMLli2JiYsFcZe9fAWvcb5c8lgqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzZlMjY2ZGUtODQxMi0z
MGQ5LTg3NGMtYmQyMDExNmE4ZGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHAEA0
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGX+9fdmGkcJf0Wfp+h1iboyYVDnxKyDLzpXxJEPK9lFfA+yTu3g
md8Vv2qkJIgfsGXIZdd0zfwmugN2K8KZ1WZPzwlNG7FPS6U0zN8KcU2BRYUdXS2E
gPD1q4Tc3vJwONiZE7/lHAFOMmyQpWdVLyNiOAGpAig1aATQxnYLuuQohBhAM6J1
jBFSk/+bMK7yV0hnP6JJgBkKpYdiopKX+bN2zrQWIbmg4dfYD1XHUxy4zzTuywvC
/FYr8GmMsWfup/F5ddu37c7+Q3a5GVFeZhcMMTmDuhGKYLOcAfTQTqYQG0HUC5Nm
Y1s5IIs1wRvByyq3eQ/zMXDm+zFhU217gnk=
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:44:08 2025 by rpki-client