Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9b044dce-dc34-33b7-beaa-1f08a8e9834a.roa
File: 9b044dce-dc34-33b7-beaa-1f08a8e9834a.roa (raw, json)
Hash identifier: T409zzWgRYJLGFS3e8dzrw5oCRXmygsT3hFElSrJOYY=
Subject key identifier: 97:55:3D:E0:57:92:A3:3A:4C:3F:FE:E1:99:34:D4:13:93:17:1A:CB
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584905B6BE0D59709D011C14D600
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9b044dce-dc34-33b7-beaa-1f08a8e9834a.roa
Signing time: Thu 27 Feb 2025 14:00:51 +0000
ROA not before: Thu 27 Feb 2025 14:00:51 +0000
ROA not after: Wed 28 May 2025 13:00:51 +0000
asID: 13335
IP address blocks: 2606:4700:4409::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:05:b6:be:0d:59:70:9d:01:1c:14:d6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 27 14:00:51 2025 GMT
Not After : May 28 13:00:51 2025 GMT
Subject: CN=9a3990b3-efd5-4916-94b2-ce64e7cac47a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:48:58:3e:1b:a6:9e:08:8e:60:19:65:1f:84:
4c:eb:ac:d3:17:c2:dd:4f:eb:c6:5e:4d:b6:52:45:
dc:59:6e:a3:59:21:89:39:a5:b0:79:24:aa:e1:b1:
98:9b:d4:e3:74:85:e2:7b:fd:72:df:0b:ab:07:8e:
10:1a:43:6a:26:be:28:13:23:ba:2d:09:8e:85:3f:
5f:12:68:8e:33:dd:ac:cf:cd:ff:1e:95:62:c4:5f:
80:d6:18:13:9f:74:62:47:7f:9c:ae:86:93:66:b6:
ad:be:1b:a8:7c:e9:15:71:9a:82:c0:53:d0:56:ab:
50:2d:a4:e0:d4:57:9e:9e:06:ce:e0:41:04:99:3b:
af:e5:f4:d2:90:cd:0b:c6:5b:22:db:a3:e3:fd:2f:
5f:83:de:87:f1:df:61:92:69:74:5e:78:18:c1:42:
96:96:f2:b9:1d:6a:10:99:7c:d5:f3:f4:67:d7:4e:
2b:60:91:11:a3:bf:97:65:e3:3f:37:b3:be:4a:86:
e7:4a:a2:6e:a3:cb:14:43:ed:d8:0b:cb:d1:d6:ee:
fc:4c:13:ba:ef:7c:e1:b0:6e:e0:f1:44:7d:7b:f9:
d4:05:df:ae:eb:fd:86:b5:b9:2d:04:14:11:f2:76:
c6:c4:0d:f4:77:c0:dc:73:07:95:4d:0d:57:6b:6f:
8a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:55:3D:E0:57:92:A3:3A:4C:3F:FE:E1:99:34:D4:13:93:17:1A:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9b044dce-dc34-33b7-beaa-1f08a8e9834a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:4700:4409::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:5b:54:d7:c1:68:21:b9:fd:16:56:e2:5f:55:b3:fc:18:59:
7c:80:a1:b8:52:87:e6:77:b8:88:cf:58:08:c6:a6:72:d6:e3:
63:71:a5:aa:8e:f4:13:c9:57:81:e2:f1:38:b8:00:00:c0:2f:
86:19:28:55:9d:27:54:92:82:a5:37:62:90:68:5a:97:47:f9:
92:01:af:ce:c9:23:30:fa:d2:33:67:b2:02:42:64:4d:2f:31:
0d:95:0d:99:db:58:b0:7d:81:af:24:54:98:86:8f:b5:4c:35:
0d:33:6e:24:0d:b6:eb:1e:71:2d:9e:5b:d8:da:47:ed:b1:d5:
80:0d:f4:10:07:fa:03:b4:79:ac:dd:1e:dc:b0:37:4b:ed:4d:
3a:f2:29:3c:af:f1:ad:ba:86:ec:b1:c2:91:ac:22:fc:01:0c:
16:10:51:af:3b:b2:41:50:54:6e:5c:01:f2:0a:e0:ae:29:6d:
1d:c3:eb:13:38:75:a2:97:77:d0:02:04:8e:51:b7:cf:b0:65:
82:f6:c2:fa:2e:f4:e8:e5:31:48:83:64:48:f1:79:7a:af:9c:
10:21:c9:7b:41:db:cb:17:c2:39:5a:40:f0:2a:4e:fa:40:1a:
dd:2c:7f:8c:95:92:f8:9c:75:38:d8:49:a6:51:71:ba:cc:df:
36:09:9f:b2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkFtr4NWXCdARwU1gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk
OWEzOTkwYjMtZWZkNS00OTE2LTk0YjItY2U2NGU3Y2FjNDdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUhYPhumngiOYBllH4RM66zTF8LdT+vGXk22
UkXcWW6jWSGJOaWweSSq4bGYm9TjdIXie/1y3wurB44QGkNqJr4oEyO6LQmOhT9f
EmiOM92sz83/HpVixF+A1hgTn3RiR3+croaTZratvhuofOkVcZqCwFPQVqtQLaTg
1FeengbO4EEEmTuv5fTSkM0Lxlsi26Pj/S9fg96H8d9hkml0XngYwUKWlvK5HWoQ
mXzV8/Rn104rYJERo7+XZeM/N7O+SobnSqJuo8sUQ+3YC8vR1u78TBO673zhsG7g
8UR9e/nUBd+u6/2GtbktBBQR8nbGxA30d8DccweVTQ1Xa2+KDwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJdVPeBXkqM6TD/+4Zk01BOTFxrLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOWIwNDRkY2UtZGMzNC0z
M2I3LWJlYWEtMWYwOGE4ZTk4MzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHAEQJ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABpbVNfBaCG5/RZW4l9Vs/wYWXyAobhSh+Z3uIjPWAjGpnLW42Nx
paqO9BPJV4Hi8Ti4AADAL4YZKFWdJ1SSgqU3YpBoWpdH+ZIBr87JIzD60jNnsgJC
ZE0vMQ2VDZnbWLB9ga8kVJiGj7VMNQ0zbiQNtusecS2eW9jaR+2x1YAN9BAH+gO0
eazdHtywN0vtTTryKTyv8a26huyxwpGsIvwBDBYQUa87skFQVG5cAfIK4K4pbR3D
6xM4daKXd9ACBI5Rt8+wZYL2wvou9OjlMUiDZEjxeXqvnBAhyXtB28sXwjlaQPAq
TvpAGt0sf4yVkvicdTjYSaZRcbrM3zYJn7I=
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:38:58 2025 by rpki-client