Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2bc3b2bc-d37f-360b-b6b6-413e278732d4.roa
File: 2bc3b2bc-d37f-360b-b6b6-413e278732d4.roa (raw, json)
Hash identifier: 7bFQNFkrjozEhvIB89XAO7Syx9VJ2jxDgOAZ4OGx7ZA=
Subject key identifier: FD:18:E4:9D:79:1B:1B:15:02:16:4E:3C:C1:BB:A5:F7:FC:A7:D8:09
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819D0140A8DA7DF9EC7CA72C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2bc3b2bc-d37f-360b-b6b6-413e278732d4.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 396295
IP address blocks: 2001:470:1dd::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:14:0a:8d:a7:df:9e:c7:ca:72:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=79dc42b5-b827-47cb-974b-98423f50ad10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:dd:3b:8e:6c:74:04:fe:5d:1e:bd:77:27:2a:
40:a2:1a:6f:cc:6b:9d:cc:0c:52:98:9a:e7:4a:5f:
02:a5:40:6f:00:41:95:75:dc:4c:29:e3:70:94:60:
0f:b1:e2:a9:08:96:45:90:0f:8c:26:44:ae:dd:1c:
1f:e3:5a:18:a2:88:ef:0b:b3:69:09:18:64:99:e4:
f8:7b:fd:25:a2:f8:b4:c0:d1:98:33:b9:bf:f3:ea:
07:45:a6:f7:c1:51:dd:c5:1c:48:2c:65:9e:05:d5:
94:45:38:e1:c1:2d:5d:cc:e9:6a:22:e1:07:53:c3:
37:46:e3:d3:2a:11:5e:78:e9:c3:b0:fc:1c:2f:f5:
c5:c1:37:b3:c2:27:f9:00:df:21:4e:0c:9f:18:b8:
f4:45:80:0f:a7:61:ab:5c:52:ed:fc:a6:47:65:10:
2d:88:d2:4c:a6:2d:85:29:82:7f:70:85:3e:a7:f0:
d7:0e:6c:25:db:ca:57:9f:0a:41:60:fb:e1:b1:b7:
f7:0c:fd:db:15:66:bd:9d:87:d8:b7:60:b1:72:e6:
83:21:db:c1:b9:4a:30:af:58:f3:f0:38:99:ce:62:
6c:60:0a:1d:af:d3:12:b2:1e:8a:f1:f7:e7:6b:ba:
e6:4e:ef:d3:7c:fd:60:7f:6e:7e:d6:5c:2d:fe:f8:
dd:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:18:E4:9D:79:1B:1B:15:02:16:4E:3C:C1:BB:A5:F7:FC:A7:D8:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2bc3b2bc-d37f-360b-b6b6-413e278732d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:1dd::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:4c:f6:92:12:f1:0c:2b:17:63:91:4c:66:c2:b6:1c:4a:96:
29:58:08:ac:f5:0a:ec:70:4d:14:cd:77:3f:97:c0:e0:92:76:
aa:4c:d9:3f:6e:d9:3e:05:84:d9:f9:67:f0:be:69:92:20:fc:
ca:67:0f:51:22:02:30:ab:e9:c8:83:51:f8:be:ae:75:2e:3b:
ec:f0:14:06:8c:6d:51:20:44:78:79:a1:91:d2:81:1b:3c:bb:
ee:05:cc:a4:6e:80:a8:14:74:68:87:18:2b:4b:80:7f:e5:cd:
58:e5:c7:eb:61:4d:ec:6f:0c:be:4b:66:4c:aa:b2:be:8a:9f:
97:d3:0b:33:9e:a8:2d:1c:74:c1:ee:3f:56:b0:cd:99:06:74:
a8:81:46:d5:9d:d8:5e:3c:58:1b:50:d9:15:a9:1c:fb:40:6a:
9e:c6:e3:c0:5c:82:89:fd:7d:c8:5a:b0:97:3e:d1:26:10:09:
c6:fb:04:86:28:bd:59:3a:1d:05:e0:36:88:18:d7:0f:09:d1:
cd:d4:36:ca:67:09:c0:c7:bf:b2:dc:81:6a:a2:40:19:89:b5:
85:61:49:9c:2f:b1:75:bd:e1:be:95:4a:31:4d:2b:fc:55:23:
88:a8:fd:f5:cd:7b:5f:f4:25:40:de:b9:e7:0f:ce:91:4c:24:
69:08:76:f2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgZ0BQKjaffnsfKcsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MTIwNTAyMDAzOVoXDTI1MDMwNTAyMDAzOVowLzEtMCsGA1UEAxMk
NzlkYzQyYjUtYjgyNy00N2NiLTk3NGItOTg0MjNmNTBhZDEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlt07jmx0BP5dHr13JypAohpvzGudzAxSmJrn
Sl8CpUBvAEGVddxMKeNwlGAPseKpCJZFkA+MJkSu3Rwf41oYoojvC7NpCRhkmeT4
e/0lovi0wNGYM7m/8+oHRab3wVHdxRxILGWeBdWURTjhwS1dzOlqIuEHU8M3RuPT
KhFeeOnDsPwcL/XFwTezwif5AN8hTgyfGLj0RYAPp2GrXFLt/KZHZRAtiNJMpi2F
KYJ/cIU+p/DXDmwl28pXnwpBYPvhsbf3DP3bFWa9nYfYt2CxcuaDIdvBuUowr1jz
8DiZzmJsYAodr9MSsh6K8ffna7rmTu/TfP1gf25+1lwt/vjdrwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFP0Y5J15GxsVAhZOPMG7pff8p9gJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMmJjM2IyYmMtZDM3Zi0z
NjBiLWI2YjYtNDEzZTI3ODczMmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAHd
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFNM9pIS8QwrF2ORTGbCthxKlilYCKz1CuxwTRTNdz+XwOCSdqpM
2T9u2T4FhNn5Z/C+aZIg/MpnD1EiAjCr6ciDUfi+rnUuO+zwFAaMbVEgRHh5oZHS
gRs8u+4FzKRugKgUdGiHGCtLgH/lzVjlx+thTexvDL5LZkyqsr6Kn5fTCzOeqC0c
dMHuP1awzZkGdKiBRtWd2F48WBtQ2RWpHPtAap7G48Bcgon9fchasJc+0SYQCcb7
BIYovVk6HQXgNogY1w8J0c3UNspnCcDHv7LcgWqiQBmJtYVhSZwvsXW94b6VSjFN
K/xVI4io/fXNe1/0JUDeuecPzpFMJGkIdvI=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:25:35 2025 by rpki-client