Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1d2421f9-87ef-3929-99dd-f65e9e96725f.roa
File: 1d2421f9-87ef-3929-99dd-f65e9e96725f.roa (raw, json)
Hash identifier: 96EKS6BvniYhHCLjB+TKMY2Spe7mzdJaa0B3LNgDRmE=
Subject key identifier: D5:D9:80:90:65:10:1F:FA:42:02:91:9E:E5:AE:E3:1F:D5:18:31:76
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819D01D2FE818EB4BBE1E3D00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1d2421f9-87ef-3929-99dd-f65e9e96725f.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 135423
IP address blocks: 2001:470:291::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:1d:2f:e8:18:eb:4b:be:1e:3d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=07c7dc86-073c-443f-94e0-67b0d01228a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:33:b6:e3:da:ab:49:9e:31:08:f6:ed:24:ee:
15:51:e9:e1:ec:57:a2:4f:45:02:b2:cc:e7:7b:df:
2b:a9:23:42:a7:cc:dd:48:f2:8f:80:45:0e:ff:26:
8e:48:f1:12:39:58:32:01:6a:b8:86:14:71:b8:5c:
cf:60:b7:5a:c9:b2:25:8a:5c:f8:7f:79:44:e2:eb:
f1:47:9b:d4:77:92:f2:a0:55:ed:b8:f4:9d:c1:cc:
3b:cf:ed:85:6f:a8:80:b4:e2:c1:33:75:e6:55:35:
6c:3d:89:38:a7:e7:1a:92:30:96:a7:ac:2b:3e:1b:
dd:c6:16:4d:55:98:52:14:19:6b:a1:96:bd:4c:41:
9e:77:da:0a:1b:da:67:8e:a2:fc:f5:db:ce:e5:77:
94:54:af:f5:9d:39:7f:fe:a7:84:5a:87:86:c8:01:
85:f8:83:79:ff:89:86:c7:82:58:ef:d1:22:8b:92:
d5:38:26:ce:f8:f0:70:68:84:68:20:46:0c:11:49:
b6:75:fc:45:2c:a7:22:1d:c0:61:cd:4d:35:f6:cd:
1a:75:7d:93:ae:88:9a:cf:fc:21:92:bb:25:19:5d:
b4:8d:1b:eb:48:f0:79:0d:9c:eb:94:9d:46:b9:39:
bf:0d:68:7a:48:f0:d8:59:8a:8c:9b:ec:bc:02:b0:
df:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D9:80:90:65:10:1F:FA:42:02:91:9E:E5:AE:E3:1F:D5:18:31:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1d2421f9-87ef-3929-99dd-f65e9e96725f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:291::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:ad:0a:ba:c8:84:6a:51:35:cf:fd:f8:8e:f1:f1:67:f1:f9:
3c:2b:31:44:6d:09:a1:1d:5e:76:d2:47:93:06:05:dc:fd:a3:
af:14:86:19:59:29:53:6d:52:f2:bf:5b:9c:43:19:96:93:5b:
60:db:04:62:81:5b:a7:05:77:87:d8:0c:9d:cb:03:fd:86:17:
0a:04:4b:c3:7d:05:df:bf:d5:dc:30:2c:45:45:33:ec:0c:6c:
fc:e5:6e:77:63:77:cf:d5:6d:14:18:d6:aa:fe:e4:24:e8:0f:
7a:d7:c6:4b:20:93:16:d0:d3:79:a4:4f:61:2c:58:f5:73:87:
57:5b:33:74:2b:3a:f0:8d:e8:80:70:05:9f:01:7b:ed:f9:8f:
ed:d4:66:d2:79:04:78:fb:bc:4b:fb:38:4f:fc:ce:f1:ec:b7:
99:16:ee:c9:f6:f4:bc:c7:d1:4c:64:7b:1b:9d:e1:53:17:40:
92:ed:ca:e3:b2:d6:d1:d0:2a:66:ec:a8:47:ce:27:4b:4b:00:
92:fb:e2:55:b2:68:73:64:84:e3:c1:cf:35:b4:47:47:58:a6:
14:f9:19:3a:0c:5e:ee:c3:4b:6d:d0:31:ea:02:66:88:c5:13:
12:ab:b4:67:14:83:22:5d:ac:13:7a:0c:c0:7d:ff:92:da:cb:
f1:d6:41:f5
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgZ0B0v6BjrS74ePQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MTIwNTAyMDAzOVoXDTI1MDMwNTAyMDAzOVowLzEtMCsGA1UEAxMk
MDdjN2RjODYtMDczYy00NDNmLTk0ZTAtNjdiMGQwMTIyOGE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTO249qrSZ4xCPbtJO4VUenh7FeiT0UCsszn
e98rqSNCp8zdSPKPgEUO/yaOSPESOVgyAWq4hhRxuFzPYLdaybIlilz4f3lE4uvx
R5vUd5LyoFXtuPSdwcw7z+2Fb6iAtOLBM3XmVTVsPYk4p+cakjCWp6wrPhvdxhZN
VZhSFBlroZa9TEGed9oKG9pnjqL89dvO5XeUVK/1nTl//qeEWoeGyAGF+IN5/4mG
x4JY79Eii5LVOCbO+PBwaIRoIEYMEUm2dfxFLKciHcBhzU019s0adX2Troiaz/wh
krslGV20jRvrSPB5DZzrlJ1GuTm/DWh6SPDYWYqMm+y8ArDfsQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNXZgJBlEB/6QgKRnuWu4x/VGDF2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMWQyNDIxZjktODdlZi0z
OTI5LTk5ZGQtZjY1ZTllOTY3MjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKR
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACOtCrrIhGpRNc/9+I7x8Wfx+TwrMURtCaEdXnbSR5MGBdz9o68U
hhlZKVNtUvK/W5xDGZaTW2DbBGKBW6cFd4fYDJ3LA/2GFwoES8N9Bd+/1dwwLEVF
M+wMbPzlbndjd8/VbRQY1qr+5CToD3rXxksgkxbQ03mkT2EsWPVzh1dbM3QrOvCN
6IBwBZ8Be+35j+3UZtJ5BHj7vEv7OE/8zvHst5kW7sn29LzH0Uxkexud4VMXQJLt
yuOy1tHQKmbsqEfOJ0tLAJL74lWyaHNkhOPBzzW0R0dYphT5GToMXu7DS23QMeoC
ZojFExKrtGcUgyJdrBN6DMB9/5Lay/HWQfU=
-----END CERTIFICATE-----
Generated at Fri Apr 25 17:16:21 2025 by rpki-client