
Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/252e51df-b074-3d81-91f6-d7a86aee0e02.roa
File: 252e51df-b074-3d81-91f6-d7a86aee0e02.roa (raw, json)
Hash identifier: P+b0C5FfzGylR/9UcI2JJMNHfJoi+g7lc/+jlpe6Koo=
Subject key identifier: 09:E3:B1:D8:E3:5E:B6:3A:00:EC:09:96:09:BC:65:10:BC:22:6C:21
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858483455597F83D6931923772480
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/252e51df-b074-3d81-91f6-d7a86aee0e02.roa
Signing time: Sat 14 Dec 2024 14:00:52 +0000
ROA not before: Sat 14 Dec 2024 14:00:52 +0000
ROA not after: Fri 14 Mar 2025 13:00:52 +0000
asID: 12247
IP address blocks: 2001:470:391::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:34:55:59:7f:83:d6:93:19:23:77:24:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 14 14:00:52 2024 GMT
Not After : Mar 14 13:00:52 2025 GMT
Subject: CN=3341aaa4-f74d-4f32-ae2f-04ee73ad1a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cf:c5:d8:5a:df:f6:c4:7a:58:7f:38:db:62:
4c:a7:6d:a6:32:91:34:d6:da:47:24:60:95:f7:1b:
92:bd:ab:94:10:40:f9:20:ec:64:2c:da:f3:44:bd:
f3:a2:a6:c5:5d:74:1a:2c:7d:b4:0b:0d:ce:53:3f:
23:78:43:68:35:a2:a3:e7:ca:7f:2f:9f:02:19:fc:
e0:fa:ab:24:ff:cf:c1:7e:fa:0b:49:87:4d:d9:b0:
26:b5:94:a5:fe:2e:9e:d6:9e:48:ac:eb:60:a1:87:
8d:a6:8a:c3:dd:48:25:f0:01:23:c5:41:98:0e:de:
4f:fd:2f:bc:4e:7b:42:e9:40:0b:60:9f:9d:e5:a3:
6c:1f:66:19:a8:ca:fa:2e:01:05:e0:f6:68:b8:cf:
eb:47:09:08:ac:7b:6c:91:26:09:ae:e1:47:2b:c1:
59:23:94:11:73:0d:92:ba:05:de:68:18:cb:d3:8d:
77:4c:78:16:a0:0c:b7:bb:a1:09:e3:fa:50:35:f2:
a9:81:c0:6a:87:94:ce:74:d6:9d:f0:88:4e:52:00:
1d:8a:7f:75:cd:7e:cd:64:a4:07:91:9e:53:9a:a5:
0f:37:2d:20:92:04:46:40:85:d5:ae:d4:5b:57:7e:
4b:fe:46:bf:b5:84:f9:a6:51:25:2b:ea:8f:9b:46:
df:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E3:B1:D8:E3:5E:B6:3A:00:EC:09:96:09:BC:65:10:BC:22:6C:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/252e51df-b074-3d81-91f6-d7a86aee0e02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:391::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:88:7c:81:b0:a3:fb:fb:34:c3:08:53:29:b7:84:85:01:65:
48:3b:ea:e7:b7:c4:b8:3f:2d:6d:99:83:c8:3e:13:6e:66:6f:
84:f6:ad:ca:91:24:05:8a:32:b4:76:a6:76:5e:ee:29:05:b8:
28:3a:b7:2d:6b:2e:f3:0d:41:5c:e7:65:ee:b9:49:15:d5:b0:
d1:23:3b:c9:63:10:6c:f8:e2:fc:d7:5d:90:e9:5c:74:c1:68:
7d:e0:7f:3c:56:7e:99:c4:fd:f4:2e:4c:12:6b:c9:e2:49:06:
32:8e:15:44:45:3b:98:aa:99:aa:76:c3:ff:54:e9:de:d6:42:
5c:8a:c9:33:11:3c:31:bd:8a:50:e1:3a:8c:6b:a4:18:49:0f:
71:1c:7c:5f:f5:12:02:5c:48:cf:e2:d3:eb:eb:87:04:68:d9:
14:df:1a:82:98:ab:c4:aa:6d:e2:56:3b:3e:f8:ac:c3:33:c4:
80:e2:d7:18:b8:8b:db:f9:36:41:48:cd:04:5e:ba:40:88:28:
76:b3:07:7c:f0:06:fd:37:af:6b:ab:df:02:e3:a2:89:05:cc:
6e:87:b2:61:c7:2d:97:3a:c2:56:84:d1:d1:71:71:5e:e0:32:
80:04:d4:ac:57:ed:ea:b3:0c:d2:3f:8e:e1:25:79:93:a9:60:
17:a4:f8:1b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEg0VVl/g9aTGSN3JIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MTIxNDE0MDA1MloXDTI1MDMxNDEzMDA1MlowLzEtMCsGA1UEAxMk
MzM0MWFhYTQtZjc0ZC00ZjMyLWFlMmYtMDRlZTczYWQxYTYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvc/F2Frf9sR6WH8422JMp22mMpE01tpHJGCV
9xuSvauUEED5IOxkLNrzRL3zoqbFXXQaLH20Cw3OUz8jeENoNaKj58p/L58CGfzg
+qsk/8/BfvoLSYdN2bAmtZSl/i6e1p5IrOtgoYeNporD3Ugl8AEjxUGYDt5P/S+8
TntC6UALYJ+d5aNsH2YZqMr6LgEF4PZouM/rRwkIrHtskSYJruFHK8FZI5QRcw2S
ugXeaBjL0413THgWoAy3u6EJ4/pQNfKpgcBqh5TOdNad8IhOUgAdin91zX7NZKQH
kZ5TmqUPNy0gkgRGQIXVrtRbV35L/ka/tYT5plElK+qPm0bfdQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAnjsdjjXrY6AOwJlgm8ZRC8ImwhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjUyZTUxZGYtYjA3NC0z
ZDgxLTkxZjYtZDdhODZhZWUwZTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOR
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAA2IfIGwo/v7NMMIUym3hIUBZUg76ue3xLg/LW2Zg8g+E25mb4T2
rcqRJAWKMrR2pnZe7ikFuCg6ty1rLvMNQVznZe65SRXVsNEjO8ljEGz44vzXXZDp
XHTBaH3gfzxWfpnE/fQuTBJryeJJBjKOFURFO5iqmap2w/9U6d7WQlyKyTMRPDG9
ilDhOoxrpBhJD3EcfF/1EgJcSM/i0+vrhwRo2RTfGoKYq8SqbeJWOz74rMMzxIDi
1xi4i9v5NkFIzQReukCIKHazB3zwBv03r2ur3wLjookFzG6HsmHHLZc6wlaE0dFx
cV7gMoAE1KxX7eqzDNI/juEleZOpYBek+Bs=
-----END CERTIFICATE-----
Generated at Sun May 4 20:17:28 2025 by rpki-client