Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d6ea8a2a-963c-4cb3-be4b-30ef91b52807/bf7217dd-4d3e-3190-8cd7-28d3a00b6493.roa
File: bf7217dd-4d3e-3190-8cd7-28d3a00b6493.roa (raw, json)
Hash identifier: O1F//iT+sEu+wnwmsTG+lnbAzqWNMa+7WMO24yIjiHE=
Subject key identifier: 08:AD:FC:9A:E8:6F:82:05:1A:32:1A:F3:2A:0B:68:90:3D:04:3F:3B
Certificate issuer: /CN=d6ea8a2a-963c-4cb3-be4b-30ef91b52807
Certificate serial: 010D0C9F43285848EF6147C53A6FD25B4B140780
Authority key identifier: 6A:78:91:DB:FF:D4:D8:E2:17:FD:7E:82:29:22:78:75:F3:2E:78:67
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d6ea8a2a-963c-4cb3-be4b-30ef91b52807.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d6ea8a2a-963c-4cb3-be4b-30ef91b52807/bf7217dd-4d3e-3190-8cd7-28d3a00b6493.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 13765
IP address blocks: 96.46.104.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:47:c5:3a:6f:d2:5b:4b:14:07:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6ea8a2a-963c-4cb3-be4b-30ef91b52807
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=ba44894f-067a-4462-987a-450771f08c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9c:bb:e0:cd:41:64:46:36:14:6c:f1:e8:44:
bc:6c:cd:6e:93:46:23:21:60:1e:a5:37:8c:b8:62:
3a:97:98:68:fa:16:aa:df:f7:91:96:11:8b:7c:3a:
d7:1a:a9:57:75:da:55:1f:6b:62:fc:09:3d:73:42:
09:b7:55:10:f9:36:07:c4:51:e2:91:b7:b5:30:c8:
29:8a:3d:0a:e3:fd:2f:82:1e:9b:d3:3f:63:fa:2e:
c1:2b:ea:f0:de:7c:a8:8b:be:18:4f:82:e5:b0:41:
37:c1:d5:5e:55:0c:eb:04:a0:87:a1:88:c8:6f:50:
6d:c0:2d:e9:56:67:57:56:f1:66:1a:1e:6e:be:54:
55:2d:ea:33:0d:57:d8:92:96:30:de:c1:0d:9a:66:
ed:c7:92:7d:81:7f:7e:b9:b9:7a:08:ea:76:c4:ca:
5a:53:c6:5f:a7:bd:31:0e:94:c3:47:67:5f:4d:e7:
d6:67:a6:6d:45:60:7b:8d:16:46:d8:00:03:e2:b3:
82:d3:f8:94:a3:8d:a1:b6:3f:b0:93:83:b2:51:cb:
35:45:f2:d3:14:fb:73:c3:86:9a:15:0b:dc:da:4d:
cf:83:e1:ad:16:3c:1b:c8:76:ff:8e:88:97:da:b6:
b4:47:47:47:0e:30:cb:d9:9d:1a:28:bf:59:20:20:
39:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:AD:FC:9A:E8:6F:82:05:1A:32:1A:F3:2A:0B:68:90:3D:04:3F:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d6ea8a2a-963c-4cb3-be4b-30ef91b52807/bf7217dd-4d3e-3190-8cd7-28d3a00b6493.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d6ea8a2a-963c-4cb3-be4b-30ef91b52807/d6ea8a2a-963c-4cb3-be4b-30ef91b52807.crl
X509v3 Authority Key Identifier:
keyid:6A:78:91:DB:FF:D4:D8:E2:17:FD:7E:82:29:22:78:75:F3:2E:78:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d6ea8a2a-963c-4cb3-be4b-30ef91b52807.cer
sbgp-ipAddrBlock: critical
IPv4:
96.46.104.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:8e:5f:3a:08:b2:69:35:08:96:16:4c:6f:31:e7:e4:a4:ca:
da:38:22:be:f0:1c:af:a1:b4:d7:40:11:75:6a:41:d9:c8:02:
da:5b:40:18:6f:2b:37:8a:21:a6:1e:bc:33:53:02:10:96:02:
5c:9f:da:2b:8d:25:56:86:46:1e:dc:68:df:26:5f:c1:e8:08:
fc:8e:2d:7a:98:92:15:0b:55:fc:af:8f:31:c5:90:d8:04:b6:
f3:8e:fe:18:c6:3a:ad:c3:73:bf:79:ba:d1:7d:e8:4d:88:ce:
1b:87:a1:c6:3f:fa:c7:c5:da:69:70:64:a3:5b:fe:39:d0:0b:
79:c4:44:1d:96:42:3a:15:99:f4:5e:bc:2a:9a:cf:33:59:d9:
24:c9:38:d3:ad:ef:ae:05:a1:b5:59:bb:42:ab:bf:f7:38:c7:
15:e7:e0:3e:7d:57:85:f2:f3:08:cd:66:eb:10:c2:6c:8c:67:
13:a8:aa:dd:2c:4b:48:06:a2:f2:20:c8:e0:78:13:df:7d:e3:
9e:fe:03:b5:6b:c9:ef:f1:1a:e2:d7:77:73:1e:cc:ba:09:ab:
f8:27:d9:2f:e5:7e:04:ad:f5:7b:b7:14:c3:43:bc:5d:9b:c4:
ed:c1:d1:3d:ad:8b:0a:d3:f2:53:1e:18:7e:c0:10:4d:21:49:
67:ce:ba:9a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYUfFOm/SW0sUB4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDZlYThhMmEtOTYzYy00Y2IzLWJlNGItMzBlZjkxYjUy
ODA3MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk
YmE0NDg5NGYtMDY3YS00NDYyLTk4N2EtNDUwNzcxZjA4YzZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpy74M1BZEY2FGzx6ES8bM1uk0YjIWAepTeM
uGI6l5ho+haq3/eRlhGLfDrXGqlXddpVH2ti/Ak9c0IJt1UQ+TYHxFHikbe1MMgp
ij0K4/0vgh6b0z9j+i7BK+rw3nyoi74YT4LlsEE3wdVeVQzrBKCHoYjIb1BtwC3p
VmdXVvFmGh5uvlRVLeozDVfYkpYw3sENmmbtx5J9gX9+ubl6COp2xMpaU8Zfp70x
DpTDR2dfTefWZ6ZtRWB7jRZG2AAD4rOC0/iUo42htj+wk4OyUcs1RfLTFPtzw4aa
FQvc2k3Pg+GtFjwbyHb/joiX2ra0R0dHDjDL2Z0aKL9ZICA5BQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAit/Jrob4IFGjIa8yoLaJA9BD87MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kNmVh
OGEyYS05NjNjLTRjYjMtYmU0Yi0zMGVmOTFiNTI4MDcvYmY3MjE3ZGQtNGQzZS0z
MTkwLThjZDctMjhkM2EwMGI2NDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZDZlYThhMmEtOTYzYy00Y2IzLWJl
NGItMzBlZjkxYjUyODA3L2Q2ZWE4YTJhLTk2M2MtNGNiMy1iZTRiLTMwZWY5MWI1
MjgwNy5jcmwwHwYDVR0jBBgwFoAUaniR2//U2OIX/X6CKSJ4dfMueGcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9kNmVhOGEyYS05NjNjLTRjYjMtYmU0Yi0zMGVm
OTFiNTI4MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYC5oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADCOXzoIsmk1CJYWTG8x5+Skyto4Ir7wHK+htNdAEXVqQdnIAtpbQBhv
KzeKIaYevDNTAhCWAlyf2iuNJVaGRh7caN8mX8HoCPyOLXqYkhULVfyvjzHFkNgE
tvOO/hjGOq3Dc795utF96E2IzhuHocY/+sfF2mlwZKNb/jnQC3nERB2WQjoVmfRe
vCqazzNZ2STJONOt764FobVZu0Krv/c4xxXn4D59V4Xy8wjNZusQwmyMZxOoqt0s
S0gGovIgyOB4E999457+A7Vrye/xGuLXd3MezLoJq/gn2S/lfgSt9Xu3FMNDvF2b
xO3B0T2tiwrT8lMeGH7AEE0hSWfOupo=
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:00:42 2025 by rpki-client