Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/b99b36f7-6e3d-3b3f-9bcd-67afa3ceff07.roa
File: b99b36f7-6e3d-3b3f-9bcd-67afa3ceff07.roa (raw, json)
Hash identifier: 9+t6H8YpX3wJ2dNUWvqf6AU4WR0y0KHOif9sqCMGEYc=
Subject key identifier: B2:E1:93:52:8D:19:EB:D5:CF:F1:C4:72:DF:B9:FD:4B:22:54:75:2A
Certificate issuer: /CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
Certificate serial: 010D0C9F43285848D7A647A57E2A22BD89785580
Authority key identifier: 0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/b99b36f7-6e3d-3b3f-9bcd-67afa3ceff07.roa
Signing time: Tue 11 Feb 2025 02:00:39 +0000
ROA not before: Tue 11 Feb 2025 02:00:39 +0000
ROA not after: Mon 12 May 2025 01:00:39 +0000
asID: 399045
IP address blocks: 2606:d640::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d7:a6:47:a5:7e:2a:22:bd:89:78:55:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
Validity
Not Before: Feb 11 02:00:39 2025 GMT
Not After : May 12 01:00:39 2025 GMT
Subject: CN=9f90d81f-e27e-426c-b816-3d4ef17b5f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:48:60:e3:78:7d:0d:58:29:85:fd:c1:d8:64:
b1:5d:16:58:2f:32:b2:6c:73:03:63:57:9d:be:3d:
07:d1:27:9f:02:5d:ba:75:c6:1a:d9:8f:59:01:07:
ec:b1:31:93:e7:60:24:0a:aa:97:55:ac:45:53:a8:
6c:c9:26:c1:7a:53:af:81:4b:78:de:3e:2b:fd:45:
87:3f:38:31:3a:90:65:fb:88:6b:d5:da:56:73:8c:
7f:b1:5c:40:75:94:de:37:c0:87:7b:d1:7a:e9:a6:
70:08:0b:30:32:2c:3b:e7:8b:fc:4a:00:c4:0d:c9:
c9:bd:47:77:82:1b:40:ed:ef:a5:03:08:6f:aa:ea:
07:dd:b1:27:40:ff:40:59:19:b8:0a:65:73:6f:59:
4f:78:1d:bd:5a:7c:0e:42:59:17:0d:31:f5:2e:3a:
82:56:51:a5:0d:9d:23:4c:2e:bc:b8:3a:d1:57:29:
fa:dd:71:72:1b:f9:20:ea:60:99:b5:cc:d4:89:0b:
10:1c:85:30:31:22:4a:45:fc:59:d1:e8:ea:d4:3e:
6c:64:64:fa:a3:88:60:ee:1c:ec:42:ee:5f:4e:59:
ef:d1:83:ba:58:4d:a3:b9:86:6f:89:d3:fc:da:ce:
fb:d0:53:10:cb:77:09:1a:c3:08:1e:c9:4f:f2:bf:
02:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E1:93:52:8D:19:EB:D5:CF:F1:C4:72:DF:B9:FD:4B:22:54:75:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/b99b36f7-6e3d-3b3f-9bcd-67afa3ceff07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl
X509v3 Authority Key Identifier:
keyid:0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:d640::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:47:b7:d6:29:65:b9:f8:92:4c:78:4b:5e:29:a3:68:68:24:
ed:1c:98:92:df:ba:61:41:34:af:57:f8:ee:d5:83:19:9f:35:
d2:83:21:4f:66:b6:9d:6b:d5:60:fd:36:d6:0e:b8:35:df:77:
29:4f:b2:4e:37:06:32:74:f2:3b:9a:6e:cd:aa:4c:87:d1:64:
58:41:2b:bf:57:54:77:17:36:73:c6:6f:12:e7:25:e3:bb:75:
49:ea:9f:56:19:70:5d:6b:52:9e:dc:b0:ed:d8:fc:90:c8:24:
4d:dc:76:12:da:1e:1f:f0:b6:e8:d7:cf:fd:20:aa:b1:15:67:
1a:66:42:eb:dd:45:db:d5:a3:7f:ec:6d:41:5b:65:e2:1b:b6:
66:58:6a:4b:0d:b9:45:36:52:10:1b:ad:f6:86:a2:56:a9:c4:
34:e5:9d:d5:ce:5f:b2:13:94:b9:c2:2a:87:40:aa:2e:15:cd:
cc:65:be:aa:a9:16:bf:2e:17:9f:e2:b6:48:f0:99:d1:9a:bf:
1e:d1:72:87:18:73:a0:20:ce:50:d2:9c:e3:9f:01:ce:30:da:
bf:df:09:ad:c5:53:79:2c:bb:39:a2:1d:cb:e0:a9:0a:93:7e:
a3:87:43:74:7f:e2:1f:df:f2:1f:71:ac:42:30:5c:d6:e2:e7:
dd:90:16:7b
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjXpkelfioivYl4VYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGU0OWI0YzYtNGQ1OC00MmUwLWFiZTItOTM3NTRmZGNk
YTM1MB4XDTI1MDIxMTAyMDAzOVoXDTI1MDUxMjAxMDAzOVowLzEtMCsGA1UEAxMk
OWY5MGQ4MWYtZTI3ZS00MjZjLWI4MTYtM2Q0ZWYxN2I1ZjdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0khg43h9DVgphf3B2GSxXRZYLzKybHMDY1ed
vj0H0SefAl26dcYa2Y9ZAQfssTGT52AkCqqXVaxFU6hsySbBelOvgUt43j4r/UWH
PzgxOpBl+4hr1dpWc4x/sVxAdZTeN8CHe9F66aZwCAswMiw754v8SgDEDcnJvUd3
ghtA7e+lAwhvquoH3bEnQP9AWRm4CmVzb1lPeB29WnwOQlkXDTH1LjqCVlGlDZ0j
TC68uDrRVyn63XFyG/kg6mCZtczUiQsQHIUwMSJKRfxZ0ejq1D5sZGT6o4hg7hzs
Qu5fTlnv0YO6WE2juYZvidP82s770FMQy3cJGsMIHslP8r8CuwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFLLhk1KNGevVz/HEct+5/UsiVHUqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTQ5
YjRjNi00ZDU4LTQyZTAtYWJlMi05Mzc1NGZkY2RhMzUvYjk5YjM2ZjctNmUzZC0z
YjNmLTliY2QtNjdhZmEzY2VmZjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGU0OWI0YzYtNGQ1OC00MmUwLWFi
ZTItOTM3NTRmZGNkYTM1LzhlNDliNGM2LTRkNTgtNDJlMC1hYmUyLTkzNzU0ZmRj
ZGEzNS5jcmwwHwYDVR0jBBgwFoAUCkkYlphvz9SNs+aiIifBJlnS62swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTQ5YjRjNi00ZDU4LTQyZTAtYWJlMi05Mzc1
NGZkY2RhMzUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgbWQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBtR7fWKWW5+JJMeEteKaNoaCTtHJiS37phQTSvV/ju1YMZnzXSgyFP
Zrada9Vg/TbWDrg133cpT7JONwYydPI7mm7NqkyH0WRYQSu/V1R3FzZzxm8S5yXj
u3VJ6p9WGXBda1Ke3LDt2PyQyCRN3HYS2h4f8Lbo18/9IKqxFWcaZkLr3UXb1aN/
7G1BW2XiG7ZmWGpLDblFNlIQG632hqJWqcQ05Z3Vzl+yE5S5wiqHQKouFc3MZb6q
qRa/Lhef4rZI8JnRmr8e0XKHGHOgIM5Q0pzjnwHOMNq/3wmtxVN5LLs5oh3L4KkK
k36jh0N0f+If3/IfcaxCMFzW4ufdkBZ7
-----END CERTIFICATE-----
Generated at Sat Apr 5 20:28:59 2025 by rpki-client