Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bc4f21b4-1e13-3f82-b11a-ca0738cd49e2.roa
File: bc4f21b4-1e13-3f82-b11a-ca0738cd49e2.roa (raw, json)
Hash identifier: nBZ2kj0YdoyQbbc7tTPiObpLdhI2syMzA461xDMdMGg=
Subject key identifier: BB:FD:A9:2F:5A:01:A0:A0:36:F7:B7:0D:11:C9:28:82:97:14:B0:8F
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848467AB7088C6DD0B846FBCF80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bc4f21b4-1e13-3f82-b11a-ca0738cd49e2.roa
Signing time: Sat 21 Dec 2024 02:00:39 +0000
ROA not before: Sat 21 Dec 2024 02:00:39 +0000
ROA not after: Fri 21 Mar 2025 01:00:39 +0000
asID: 397230
IP address blocks: 2610:a1:3300::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:46:7a:b7:08:8c:6d:d0:b8:46:fb:cf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 21 02:00:39 2024 GMT
Not After : Mar 21 01:00:39 2025 GMT
Subject: CN=17000dd2-b31e-435d-b98f-bba1fc955f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d6:3e:5c:4b:0a:ab:02:06:10:18:54:04:e3:
76:dd:d5:93:00:2d:2a:ba:fe:a7:ab:29:f4:3f:df:
e0:a4:70:3e:36:c8:09:14:fb:1d:fa:cd:58:37:ab:
8f:a5:04:54:5c:50:6a:28:98:cd:6a:45:f3:35:7f:
87:fa:66:81:aa:1d:81:ff:27:13:e0:bc:54:ca:34:
a2:fd:67:b6:1a:9f:92:a2:42:03:00:2d:58:a8:a8:
bc:fa:95:1a:38:1c:53:ff:bc:5a:5c:2a:64:78:7e:
6c:d3:fd:70:c0:a2:87:24:be:01:21:17:a2:61:30:
41:f5:a8:75:21:5c:59:6b:d0:98:a0:e4:26:4c:a7:
c4:cd:04:7b:d8:0a:00:0d:75:0a:64:55:49:3c:2f:
1b:b3:2f:dd:a3:72:61:5e:70:7b:9d:7c:a8:3f:54:
2e:80:26:b1:bf:b2:e7:ec:01:a1:a5:ff:80:46:93:
79:a3:b3:b7:08:f6:b0:c4:0e:a3:30:7a:c4:d0:74:
88:55:1b:f4:9d:f9:0b:79:4c:b9:1b:1c:bc:e9:cf:
2b:fd:50:9a:1c:6f:2e:ea:df:0f:01:12:8c:fa:53:
9f:2e:7f:c8:7c:4e:07:ac:f8:95:b3:70:7b:e4:e1:
0e:9f:ad:96:d1:fd:17:c8:08:a5:b3:be:21:81:c5:
7d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:FD:A9:2F:5A:01:A0:A0:36:F7:B7:0D:11:C9:28:82:97:14:B0:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bc4f21b4-1e13-3f82-b11a-ca0738cd49e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv6:
2610:a1:3300::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:d5:af:c7:21:ab:33:16:32:48:ca:fd:47:9e:2f:01:ef:8f:
76:50:3a:e4:c7:45:4a:c6:cc:1a:c1:ff:c3:38:1c:c4:c8:fa:
fc:2f:8b:98:73:eb:ac:c2:c3:4e:c4:a6:02:5d:58:5b:06:5b:
a1:29:fa:d4:ec:20:7d:76:16:25:64:e8:9b:e0:15:08:40:85:
de:8b:c2:4b:ae:39:ea:cb:4f:77:24:d8:26:82:8f:5d:3d:73:
f2:b5:fa:e0:b8:25:d1:19:7c:35:47:aa:70:ed:fe:84:99:7e:
54:e6:af:a1:65:50:c9:20:28:d7:2b:f9:52:fa:40:73:cc:bf:
99:9e:28:01:70:67:58:91:88:75:a6:4b:ba:f4:9a:6b:6d:c7:
86:45:0e:83:45:4d:5f:40:7d:5a:d8:5d:ef:dd:16:e4:80:18:
4c:f9:f6:9a:2c:5e:2a:51:a1:1e:d0:22:ab:3d:62:a7:1e:a7:
26:df:4c:0e:16:7a:ac:ac:89:08:02:14:79:43:70:8f:d9:a9:
94:fb:70:03:b9:d0:e3:61:e0:74:0f:56:ee:e6:07:0b:40:c1:
10:8b:e4:40:bb:d8:91:30:56:d4:6d:03:14:bc:7d:c7:b4:dc:
e2:51:9e:e9:94:85:25:83:2b:68:22:43:37:b1:65:f1:16:88:
91:c7:e1:87
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEhGercIjG3QuEb7z4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI0MTIyMTAyMDAzOVoXDTI1MDMyMTAxMDAzOVowLzEtMCsGA1UEAxMk
MTcwMDBkZDItYjMxZS00MzVkLWI5OGYtYmJhMWZjOTU1ZjY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtY+XEsKqwIGEBhUBON23dWTAC0quv6nqyn0
P9/gpHA+NsgJFPsd+s1YN6uPpQRUXFBqKJjNakXzNX+H+maBqh2B/ycT4LxUyjSi
/We2Gp+SokIDAC1YqKi8+pUaOBxT/7xaXCpkeH5s0/1wwKKHJL4BIReiYTBB9ah1
IVxZa9CYoOQmTKfEzQR72AoADXUKZFVJPC8bsy/do3JhXnB7nXyoP1QugCaxv7Ln
7AGhpf+ARpN5o7O3CPawxA6jMHrE0HSIVRv0nfkLeUy5Gxy86c8r/VCaHG8u6t8P
ARKM+lOfLn/IfE4HrPiVs3B75OEOn62W0f0XyAils74hgcV9eQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFLv9qS9aAaCgNve3DRHJKIKXFLCPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYmM0ZjIxYjQtMWUxMy0z
ZjgyLWIxMWEtY2EwNzM4Y2Q0OWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJhAAoTMw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEANdWvxyGrMxYySMr9R54vAe+PdlA65MdFSsbMGsH/wzgcxMj6/C+L
mHPrrMLDTsSmAl1YWwZboSn61OwgfXYWJWTom+AVCECF3ovCS6456stPdyTYJoKP
XT1z8rX64Lgl0Rl8NUeqcO3+hJl+VOavoWVQySAo1yv5UvpAc8y/mZ4oAXBnWJGI
daZLuvSaa23HhkUOg0VNX0B9Wthd790W5IAYTPn2mixeKlGhHtAiqz1ipx6nJt9M
DhZ6rKyJCAIUeUNwj9mplPtwA7nQ42HgdA9W7uYHC0DBEIvkQLvYkTBW1G0DFLx9
x7Tc4lGe6ZSFJYMraCJDN7Fl8RaIkcfhhw==
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:27:59 2025 by rpki-client