Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/40c0a776-c145-3a93-b32c-e24909188dcc.roa
File: 40c0a776-c145-3a93-b32c-e24909188dcc.roa (raw, json)
Hash identifier: JDq1OOUczj7YrvHQpigUYr6wWY73Ze2Nr8Qy7KaT9qA=
Subject key identifier: C7:7F:6B:55:93:48:92:98:E1:6D:D2:86:8A:22:81:55:F1:E7:A3:00
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819CFF5F1B037ADD771045900
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/40c0a776-c145-3a93-b32c-e24909188dcc.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 22296
IP address blocks: 2001:470:8f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:f5:f1:b0:37:ad:d7:71:04:59:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=f9f7fbc4-f56b-45d0-b8fe-540920407ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:24:c9:06:e7:85:c6:6b:1b:f7:11:61:3f:c9:
73:d4:d5:a0:e0:69:35:b7:46:e7:21:2d:61:13:f5:
da:f1:70:df:9d:ea:da:4d:fb:b3:ab:b0:28:46:c4:
90:d8:0b:ad:b8:46:40:1c:7b:11:10:50:e7:81:20:
d9:39:f8:1b:ee:13:4f:be:62:01:97:0c:0e:4a:7d:
29:3a:ff:8e:53:92:55:53:80:27:e6:f4:ad:b9:a4:
9d:1d:97:5c:92:6a:d1:01:1e:58:b2:f5:4c:c7:b4:
02:32:55:a5:bc:d0:d8:2e:99:7b:1b:43:3b:c9:fa:
ab:6e:3c:29:27:d3:b4:2b:05:99:38:a7:6b:82:26:
a2:53:e2:7b:88:06:03:d2:22:38:fb:95:a2:1c:e4:
cc:4f:e9:73:7f:97:ea:fd:42:8d:32:ca:99:b8:8b:
ff:69:8a:81:92:af:fa:a2:27:fd:61:94:7a:2c:49:
30:5e:1f:e0:f5:0e:4f:8a:75:28:33:96:df:7a:09:
77:00:b1:7d:b1:cf:da:02:18:de:02:62:5b:e7:9f:
64:f0:a9:f2:fa:e5:d5:74:15:92:ce:a6:2d:69:4a:
ff:5d:14:2d:98:a7:46:b8:95:b4:5c:c4:da:fb:34:
6d:f1:1c:a5:f3:95:35:fd:5b:1d:e0:bb:0a:52:88:
fb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:7F:6B:55:93:48:92:98:E1:6D:D2:86:8A:22:81:55:F1:E7:A3:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/40c0a776-c145-3a93-b32c-e24909188dcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:8f::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:e3:34:aa:22:47:af:d0:7f:54:28:3a:07:a5:c2:51:da:cc:
40:2b:59:ea:a9:69:e8:6b:41:28:e9:19:48:f8:f7:19:f6:12:
bd:8f:6d:4b:6e:45:32:9d:0b:ae:9e:f1:bd:6c:ec:40:be:76:
75:21:0e:4a:34:9d:fc:44:d9:e7:8f:d3:80:c3:e1:02:51:b2:
f8:f4:71:82:25:ac:c3:0c:a0:b3:57:88:2e:d6:8f:8b:6d:b4:
24:4f:85:e7:c7:c4:71:6e:88:51:58:04:4d:b8:e0:60:af:35:
1c:fa:47:00:1b:78:50:e9:f1:ad:08:83:63:44:79:2d:28:17:
d4:78:b4:04:41:87:58:01:6c:2b:23:0f:ec:ed:dd:61:26:5a:
6d:5e:86:61:06:3b:fa:d0:2c:ba:48:15:05:d5:a2:c5:63:0f:
ff:a4:17:06:10:42:82:72:15:2f:62:b9:a5:c6:cc:11:db:41:
0f:8b:7e:77:a4:b7:07:6c:dc:f3:8e:59:ba:a7:01:de:c8:e9:
ab:12:7a:39:49:2f:a6:f0:db:cc:4d:df:31:3d:a2:49:5b:b0:
f5:2c:7b:70:64:0e:1b:fc:6d:87:43:08:8a:e2:04:39:7b:64:
a0:ad:15:4c:ee:38:05:b9:b1:0e:9d:8f:ba:0a:c3:53:5e:55:
f3:8e:6e:c4
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgZz/XxsDet13EEWQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MTIwNTAyMDAzOVoXDTI1MDMwNTAyMDAzOVowLzEtMCsGA1UEAxMk
ZjlmN2ZiYzQtZjU2Yi00NWQwLWI4ZmUtNTQwOTIwNDA3ZWMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSTJBueFxmsb9xFhP8lz1NWg4Gk1t0bnIS1h
E/Xa8XDfneraTfuzq7AoRsSQ2AutuEZAHHsREFDngSDZOfgb7hNPvmIBlwwOSn0p
Ov+OU5JVU4An5vStuaSdHZdckmrRAR5YsvVMx7QCMlWlvNDYLpl7G0M7yfqrbjwp
J9O0KwWZOKdrgiaiU+J7iAYD0iI4+5WiHOTMT+lzf5fq/UKNMsqZuIv/aYqBkq/6
oif9YZR6LEkwXh/g9Q5PinUoM5bfegl3ALF9sc/aAhjeAmJb559k8Kny+uXVdBWS
zqYtaUr/XRQtmKdGuJW0XMTa+zRt8Ryl85U1/Vsd4LsKUoj7XQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMd/a1WTSJKY4W3ShooigVXx56MAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNDBjMGE3NzYtYzE0NS0z
YTkzLWIzMmMtZTI0OTA5MTg4ZGNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcACP
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAErjNKoiR6/Qf1QoOgelwlHazEArWeqpaehrQSjpGUj49xn2Er2P
bUtuRTKdC66e8b1s7EC+dnUhDko0nfxE2eeP04DD4QJRsvj0cYIlrMMMoLNXiC7W
j4tttCRPhefHxHFuiFFYBE244GCvNRz6RwAbeFDp8a0Ig2NEeS0oF9R4tARBh1gB
bCsjD+zt3WEmWm1ehmEGO/rQLLpIFQXVosVjD/+kFwYQQoJyFS9iuaXGzBHbQQ+L
fnektwds3POOWbqnAd7I6asSejlJL6bw28xN3zE9oklbsPUse3BkDhv8bYdDCIri
BDl7ZKCtFUzuOAW5sQ6dj7oKw1NeVfOObsQ=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:44:05 2025 by rpki-client