Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2b2176fd-7080-397f-90a9-c8ceb7e2ad2d.roa
File: 2b2176fd-7080-397f-90a9-c8ceb7e2ad2d.roa (raw, json)
Hash identifier: rYMzjJkPEznVD5aArGaKVEQwSLOAE98AG4g4/aKIZI0=
Subject key identifier: 46:44:93:4A:47:37:72:CD:B3:4A:99:C8:8B:21:91:60:3D:29:EA:BA
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819CFF8E4D0220E1B2CA85280
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2b2176fd-7080-397f-90a9-c8ceb7e2ad2d.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 31769
IP address blocks: 2001:470:1af::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:f8:e4:d0:22:0e:1b:2c:a8:52:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=c5a178d5-526b-4377-8a34-8efc8c9b77d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a7:b8:66:12:77:61:04:f8:50:96:0e:7a:16:
b2:fe:64:a9:c5:3a:c0:75:85:43:f9:3b:a6:c8:05:
23:6c:19:92:51:08:67:3d:dd:7e:51:08:f3:03:54:
0a:e8:b5:56:7c:a5:c7:63:50:0c:67:e1:56:50:f4:
55:87:69:eb:2b:47:90:db:e1:3f:af:47:26:a1:29:
cd:0c:7a:9b:f9:99:a0:20:b4:73:8f:a6:7f:5d:a0:
98:18:e1:6d:37:84:2e:1e:e8:44:94:7a:7b:17:ad:
0f:8b:cf:e1:42:d6:28:f7:87:10:05:fb:68:04:5f:
98:ec:fe:41:91:13:88:c3:75:3e:b1:68:da:05:97:
bd:b6:de:f7:0c:1a:b6:8a:1b:cc:6f:65:b1:ee:20:
cd:7f:5d:f5:5a:f7:d4:45:ed:e7:1b:a6:0a:23:d9:
b0:c4:b9:55:c4:22:9b:0f:90:38:17:04:63:b0:5a:
f9:89:1b:99:b1:fc:61:28:ae:b9:67:2a:69:76:79:
64:81:94:57:04:94:d4:fa:92:c8:95:1c:81:c6:52:
fe:86:81:9e:01:bd:50:3a:07:58:21:8b:34:41:66:
36:37:f4:6e:ba:7c:bc:1a:b6:ba:54:be:2f:d6:e6:
75:00:5d:cf:0d:25:4c:15:3e:50:2a:cd:60:5c:71:
2c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:44:93:4A:47:37:72:CD:B3:4A:99:C8:8B:21:91:60:3D:29:EA:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2b2176fd-7080-397f-90a9-c8ceb7e2ad2d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:1af::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:a8:9b:42:0f:d0:f1:64:5f:b3:fc:9c:e9:bc:e8:ab:c9:bd:
72:48:25:17:9a:c4:f5:55:2f:7a:9c:b0:16:d8:2a:77:b4:3c:
c6:9c:e1:6d:c6:b6:a4:6f:bd:8a:3e:45:de:8d:83:66:e8:f9:
c3:cc:79:5a:09:32:dd:d6:81:87:39:c8:78:88:e3:93:65:d6:
6b:7d:93:08:21:b6:70:53:be:85:75:4d:78:83:46:37:98:1e:
e9:4d:79:66:4a:71:f3:cb:6d:af:2d:38:43:d9:0e:f9:96:0c:
47:b6:ac:ff:7b:64:ac:be:cf:ab:10:ca:17:67:da:03:fc:88:
ad:1c:05:b2:bf:c6:de:29:1e:77:3e:9c:9f:83:2e:c0:86:75:
1b:0a:e8:73:b2:8c:79:c6:d9:6a:94:76:7c:e0:b9:98:66:3e:
6a:3b:71:5c:cf:71:aa:4f:80:7f:9f:53:13:2b:29:a5:b9:cd:
69:7b:bc:5d:e0:67:6b:a5:f3:17:d6:1c:32:4d:dd:56:f3:5b:
74:9a:ba:ca:5e:95:b3:ca:f3:8f:d9:dd:25:b7:c6:55:2d:29:
d0:d4:af:75:29:6a:95:24:41:dc:a1:2c:68:99:a2:a3:18:a2:
7d:f1:db:bd:08:87:eb:e3:60:4a:21:ca:43:6a:fe:72:2a:a9:
c8:35:83:8f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgZz/jk0CIOGyyoUoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MTIwNTAyMDAzOVoXDTI1MDMwNTAyMDAzOVowLzEtMCsGA1UEAxMk
YzVhMTc4ZDUtNTI2Yi00Mzc3LThhMzQtOGVmYzhjOWI3N2QyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ke4ZhJ3YQT4UJYOehay/mSpxTrAdYVD+Tum
yAUjbBmSUQhnPd1+UQjzA1QK6LVWfKXHY1AMZ+FWUPRVh2nrK0eQ2+E/r0cmoSnN
DHqb+ZmgILRzj6Z/XaCYGOFtN4QuHuhElHp7F60Pi8/hQtYo94cQBftoBF+Y7P5B
kROIw3U+sWjaBZe9tt73DBq2ihvMb2Wx7iDNf131WvfURe3nG6YKI9mwxLlVxCKb
D5A4FwRjsFr5iRuZsfxhKK65ZyppdnlkgZRXBJTU+pLIlRyBxlL+hoGeAb1QOgdY
IYs0QWY2N/Ruuny8Gra6VL4v1uZ1AF3PDSVMFT5QKs1gXHEsmwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEZEk0pHN3LNs0qZyIshkWA9Keq6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMmIyMTc2ZmQtNzA4MC0z
OTdmLTkwYTktYzhjZWI3ZTJhZDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAGv
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGqom0IP0PFkX7P8nOm86KvJvXJIJReaxPVVL3qcsBbYKne0PMac
4W3GtqRvvYo+Rd6Ng2bo+cPMeVoJMt3WgYc5yHiI45Nl1mt9kwghtnBTvoV1TXiD
RjeYHulNeWZKcfPLba8tOEPZDvmWDEe2rP97ZKy+z6sQyhdn2gP8iK0cBbK/xt4p
Hnc+nJ+DLsCGdRsK6HOyjHnG2WqUdnzguZhmPmo7cVzPcapPgH+fUxMrKaW5zWl7
vF3gZ2ul8xfWHDJN3VbzW3SauspelbPK84/Z3SW3xlUtKdDUr3UpapUkQdyhLGiZ
oqMYon3x270Ih+vjYEohykNq/nIqqcg1g48=
-----END CERTIFICATE-----
Generated at Fri May 9 16:35:23 2025 by rpki-client