Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/41d62e53-5fe6-3cb2-a70a-a192906bd694.roa
File: 41d62e53-5fe6-3cb2-a70a-a192906bd694.roa (raw, json)
Hash identifier: kc1mP7NDF1x4IuHtl/bTjjpvj/nNJEtCin0+a1PTYkk=
Subject key identifier: 20:31:A9:41:AD:34:6C:1E:13:D4:73:67:F3:A9:DC:10:19:0F:AC:C8
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584839EAB49D39FA79109BCC8000
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/41d62e53-5fe6-3cb2-a70a-a192906bd694.roa
Signing time: Mon 16 Dec 2024 14:00:51 +0000
ROA not before: Mon 16 Dec 2024 14:00:51 +0000
ROA not after: Sun 16 Mar 2025 13:00:51 +0000
asID: 32397
IP address blocks: 2001:470:397::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:39:ea:b4:9d:39:fa:79:10:9b:cc:80:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 16 14:00:51 2024 GMT
Not After : Mar 16 13:00:51 2025 GMT
Subject: CN=ac462e1f-37df-468b-a41b-3758862b466a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:60:1b:9e:51:c6:9c:1e:08:92:49:1a:23:87:
96:dd:45:82:e8:80:70:9a:21:a1:e2:d3:37:d4:7b:
2e:9c:6a:e6:87:23:fb:81:8b:13:a9:58:58:f8:70:
78:d3:24:3a:49:04:c3:54:8e:64:4d:10:55:f2:32:
e9:74:80:9b:ff:26:bf:4c:65:fb:70:0c:cc:8d:45:
25:65:6d:d3:10:21:de:e9:3b:a1:ec:86:47:2e:a3:
dc:8b:f1:f9:1f:9b:ac:e5:ca:71:e0:e8:80:68:23:
d7:cb:08:29:ea:ab:66:1c:1b:6f:7a:6c:bc:2a:53:
04:24:42:e2:8f:0e:c1:3d:8e:0f:11:fb:5c:6c:9a:
90:db:b2:b3:02:08:e5:54:2b:cb:f6:60:8b:f3:53:
2a:3e:0a:8a:63:ff:16:2c:08:33:f6:89:5e:1d:57:
62:8c:79:ec:f6:54:3b:81:b3:0b:52:9d:0d:13:7b:
72:ab:03:89:5f:37:8c:b9:bd:a4:79:f5:a6:51:3d:
c3:e3:4d:49:5e:de:66:b1:11:c4:d7:f9:0c:eb:61:
9d:36:59:4a:8a:47:55:b4:fa:93:52:51:36:ba:1d:
66:20:99:85:44:e0:f0:bc:b4:4d:e4:93:1e:fa:6e:
60:c9:37:35:af:5a:ef:e8:24:96:b0:bb:5f:e6:44:
27:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:31:A9:41:AD:34:6C:1E:13:D4:73:67:F3:A9:DC:10:19:0F:AC:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/41d62e53-5fe6-3cb2-a70a-a192906bd694.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:397::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:58:f4:46:60:d9:8a:fc:6d:58:b1:94:33:04:68:f2:ff:57:
9d:14:41:9e:81:65:66:35:32:17:78:8f:5e:88:9e:96:e7:ad:
ff:d6:4d:e6:8f:8f:ce:4a:82:01:b0:6f:d0:e7:9d:83:83:42:
d0:46:63:0c:c6:0a:60:cc:7e:24:e9:8d:70:ae:68:54:ec:03:
5c:ea:ac:dd:0d:65:9c:34:fb:64:f2:b8:af:7f:80:6f:ba:b3:
87:1b:a5:53:4e:ba:ca:c9:06:c7:f5:86:a6:71:8f:4f:7c:ce:
fe:76:45:39:82:a4:29:5c:10:ab:5b:e4:94:7e:46:d8:2b:d2:
bb:80:95:a4:91:ec:2d:30:2d:0a:07:f0:63:6f:2c:16:87:54:
c8:58:8f:72:bc:28:d1:d6:ed:d9:d0:f2:6a:2e:0f:96:8e:fb:
0e:c6:a1:cb:a6:2f:0a:92:9a:0a:a8:09:5d:43:17:da:0a:10:
45:50:94:6c:13:48:fe:af:76:b7:05:36:80:7b:5f:a0:54:d1:
a5:b9:56:cf:d9:c7:14:f9:e1:c8:1b:9b:cd:88:a5:1e:38:72:
f5:a9:29:4b:47:26:db:80:39:4a:be:02:eb:b6:e0:a3:1e:5e:
24:36:5c:76:2c:f1:81:e8:97:29:55:2b:f7:c5:4f:f8:7d:ae:
59:6b:ba:ed
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEg56rSdOfp5EJvMgAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MTIxNjE0MDA1MVoXDTI1MDMxNjEzMDA1MVowLzEtMCsGA1UEAxMk
YWM0NjJlMWYtMzdkZi00NjhiLWE0MWItMzc1ODg2MmI0NjZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWAbnlHGnB4IkkkaI4eW3UWC6IBwmiGh4tM3
1HsunGrmhyP7gYsTqVhY+HB40yQ6SQTDVI5kTRBV8jLpdICb/ya/TGX7cAzMjUUl
ZW3TECHe6Tuh7IZHLqPci/H5H5us5cpx4OiAaCPXywgp6qtmHBtvemy8KlMEJELi
jw7BPY4PEftcbJqQ27KzAgjlVCvL9mCL81MqPgqKY/8WLAgz9oleHVdijHns9lQ7
gbMLUp0NE3tyqwOJXzeMub2kefWmUT3D401JXt5msRHE1/kM62GdNllKikdVtPqT
UlE2uh1mIJmFRODwvLRN5JMe+m5gyTc1r1rv6CSWsLtf5kQnxQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCAxqUGtNGweE9RzZ/Op3BAZD6zIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNDFkNjJlNTMtNWZlNi0z
Y2IyLWE3MGEtYTE5MjkwNmJkNjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOX
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADhY9EZg2Yr8bVixlDMEaPL/V50UQZ6BZWY1Mhd4j16Inpbnrf/W
TeaPj85KggGwb9DnnYODQtBGYwzGCmDMfiTpjXCuaFTsA1zqrN0NZZw0+2TyuK9/
gG+6s4cbpVNOusrJBsf1hqZxj098zv52RTmCpClcEKtb5JR+Rtgr0ruAlaSR7C0w
LQoH8GNvLBaHVMhYj3K8KNHW7dnQ8mouD5aO+w7GocumLwqSmgqoCV1DF9oKEEVQ
lGwTSP6vdrcFNoB7X6BU0aW5Vs/ZxxT54cgbm82IpR44cvWpKUtHJtuAOUq+Auu2
4KMeXiQ2XHYs8YHolylVK/fFT/h9rllruu0=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:31:46 2025 by rpki-client