Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/278b53e4-ecd6-324e-b541-6a82fbb9fdaf.roa
File: 278b53e4-ecd6-324e-b541-6a82fbb9fdaf.roa (raw, json)
Hash identifier: FdA2tHbwzk+TUdL2TDcNvh4nOCXFHWDRwTpLVau2Md8=
Subject key identifier: F6:7B:47:52:06:5F:D3:5A:F8:1D:95:FE:F7:65:7A:F0:8A:46:DD:66
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819D004764E6DC7BB6C30A7E0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/278b53e4-ecd6-324e-b541-6a82fbb9fdaf.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 400765
IP address blocks: 2001:470:2de::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:04:76:4e:6d:c7:bb:6c:30:a7:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=8a68297f-a129-45a4-b575-458474582983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:3d:fd:46:09:d0:9d:a2:97:c5:5b:84:ea:32:
2d:28:8a:ec:4b:c9:ed:9d:b5:5a:06:79:cd:9c:47:
8c:b7:5d:b5:a3:93:2b:7d:f8:9d:7f:d6:a9:a5:42:
fd:ee:ee:33:11:d2:09:b4:72:c2:27:c9:df:c4:7c:
d1:4e:8a:6f:3d:fb:47:58:7c:34:00:95:44:fb:35:
8f:78:7f:6b:b2:ca:3e:f4:ce:82:03:a6:27:47:9e:
fd:f9:b6:bc:8a:22:5e:45:36:ea:31:1c:ff:a3:a8:
3c:30:66:55:46:29:17:7b:66:20:39:8e:61:a2:8e:
5a:3c:01:5b:69:97:83:33:e5:94:c9:6b:8a:f2:b1:
4b:78:ec:af:35:e1:cf:20:b1:26:b9:31:9d:9b:0e:
a0:84:1d:fd:61:34:73:55:f3:76:99:3f:66:16:94:
bf:8b:6d:c0:27:6b:6b:54:41:bd:dd:f6:aa:16:95:
f0:a7:05:76:16:cc:ce:56:d9:fc:57:f1:c3:98:27:
71:5d:f1:a8:4f:5b:83:5a:91:4f:5c:65:37:f3:aa:
b7:8b:f5:9b:44:06:bb:3a:40:cd:c3:79:90:63:4b:
01:ae:70:89:0d:41:fe:87:63:fc:5b:f0:b6:11:99:
df:b2:e7:f5:a9:9f:8d:3c:23:87:1c:f8:53:d2:fb:
2c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:7B:47:52:06:5F:D3:5A:F8:1D:95:FE:F7:65:7A:F0:8A:46:DD:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/278b53e4-ecd6-324e-b541-6a82fbb9fdaf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2de::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:d8:0f:a9:5a:9f:1f:d0:7d:8b:40:bc:68:88:e8:09:9c:38:
ae:33:86:c5:17:2a:c7:cc:bb:f4:0a:a1:9b:62:5a:82:8f:21:
22:c5:c2:de:8d:b1:8b:77:7e:e0:ed:71:b8:ef:b3:a0:ed:64:
81:b0:22:7a:54:07:2c:3d:73:bd:db:20:10:ec:e9:10:b2:b2:
fc:77:d0:f3:5e:a5:2f:e2:5d:ad:ae:2b:df:f6:f5:82:3b:5a:
a8:f6:17:88:32:8a:49:ea:53:b9:4e:14:2e:a5:55:38:86:91:
46:54:16:03:33:1f:1f:de:90:36:02:c1:43:c0:fe:73:b8:06:
65:ed:07:7f:21:20:fa:3d:bb:f3:9e:4c:f3:55:d7:ce:71:4a:
d0:c9:95:0a:e9:22:ad:bd:5a:fe:e1:38:8c:f6:5b:0b:5a:2f:
cd:db:17:a3:2e:7e:13:82:19:2c:6f:d6:20:0d:57:d7:cd:33:
e6:16:46:61:39:3b:5e:8c:d9:77:76:d8:31:e0:5b:93:37:c8:
e4:3d:f1:ba:a0:6d:bb:e3:6d:38:2d:97:21:d9:45:14:e7:1d:
a2:b0:6b:79:9d:f0:b8:fe:24:04:44:e4:64:58:25:b3:18:f5:
f3:0c:1c:3e:07:20:df:3f:cc:0a:c3:9d:c9:89:cb:da:95:9d:
13:0a:79:c2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgZ0AR2Tm3Hu2wwp+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MTIwNTAyMDAzOVoXDTI1MDMwNTAyMDAzOVowLzEtMCsGA1UEAxMk
OGE2ODI5N2YtYTEyOS00NWE0LWI1NzUtNDU4NDc0NTgyOTgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiD39RgnQnaKXxVuE6jItKIrsS8ntnbVaBnnN
nEeMt121o5Mrffidf9appUL97u4zEdIJtHLCJ8nfxHzRTopvPftHWHw0AJVE+zWP
eH9rsso+9M6CA6YnR579+ba8iiJeRTbqMRz/o6g8MGZVRikXe2YgOY5hoo5aPAFb
aZeDM+WUyWuK8rFLeOyvNeHPILEmuTGdmw6ghB39YTRzVfN2mT9mFpS/i23AJ2tr
VEG93faqFpXwpwV2FszOVtn8V/HDmCdxXfGoT1uDWpFPXGU386q3i/WbRAa7OkDN
w3mQY0sBrnCJDUH+h2P8W/C2EZnfsuf1qZ+NPCOHHPhT0vssgQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPZ7R1IGX9Na+B2V/vdlevCKRt1mMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjc4YjUzZTQtZWNkNi0z
MjRlLWI1NDEtNmE4MmZiYjlmZGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcALe
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAF3YD6lanx/QfYtAvGiI6AmcOK4zhsUXKsfMu/QKoZtiWoKPISLF
wt6NsYt3fuDtcbjvs6DtZIGwInpUByw9c73bIBDs6RCysvx30PNepS/iXa2uK9/2
9YI7Wqj2F4gyiknqU7lOFC6lVTiGkUZUFgMzHx/ekDYCwUPA/nO4BmXtB38hIPo9
u/OeTPNV185xStDJlQrpIq29Wv7hOIz2WwtaL83bF6MufhOCGSxv1iANV9fNM+YW
RmE5O16M2Xd22DHgW5M3yOQ98bqgbbvjbTgtlyHZRRTnHaKwa3md8Lj+JARE5GRY
JbMY9fMMHD4HIN8/zArDncmJy9qVnRMKecI=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:32:11 2025 by rpki-client