Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/47d60934-e188-3a67-8b9d-bba6933dffa1.roa
File: 47d60934-e188-3a67-8b9d-bba6933dffa1.roa (raw, json)
Hash identifier: JgPu0RbzrIhSMkTj49JS5XQmnksQ2ghlif1nqFAVuHU=
Subject key identifier: FD:88:E7:6A:1E:92:2F:64:7E:5E:D0:AC:80:72:07:16:34:29:29:CB
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858480D3FC057CA91B0D6606C9940
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/47d60934-e188-3a67-8b9d-bba6933dffa1.roa
Signing time: Sat 30 Nov 2024 14:00:50 +0000
ROA not before: Sat 30 Nov 2024 14:00:50 +0000
ROA not after: Fri 28 Feb 2025 14:00:50 +0000
asID: 24459
IP address blocks: 2001:470:384::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0d:3f:c0:57:ca:91:b0:d6:60:6c:99:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Nov 30 14:00:50 2024 GMT
Not After : Feb 28 14:00:50 2025 GMT
Subject: CN=807094dc-108a-4827-992b-4d71a2e50f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:de:db:2a:6e:a8:5c:08:31:2a:63:eb:70:f6:
21:00:29:a4:fc:65:6b:b5:07:c0:30:21:10:25:67:
ec:3c:79:40:18:1b:4e:3b:b0:7a:df:3a:ca:5b:e0:
72:9e:26:92:d1:ff:de:9e:1a:e1:b9:0a:9a:e7:49:
1e:16:cc:e2:e9:f8:75:a1:99:e4:b2:8b:2f:66:9b:
b8:74:2e:d2:8d:e4:20:a6:38:73:16:a6:30:0f:52:
86:16:1e:53:7f:bd:59:17:e4:91:62:0c:46:92:3b:
d2:6a:2a:5d:b3:c9:af:30:db:de:50:d9:f3:a5:bc:
09:8f:ed:0d:81:1e:4b:9d:b8:a8:f7:d3:73:aa:77:
3f:20:32:69:74:44:00:ed:cb:bc:5e:0e:c9:b1:d9:
9d:fd:8d:f8:5b:bd:e7:aa:48:0e:8f:51:e9:e8:5b:
ef:d6:f0:51:3a:ee:a4:b7:80:dd:43:12:1a:3c:86:
12:3f:3f:f3:fe:f2:78:3f:d6:39:4d:41:67:43:d8:
68:28:fb:da:a7:e9:3d:e4:1c:65:78:b1:fe:6c:69:
4c:91:7d:3b:d6:84:bc:6f:44:82:f2:0c:5c:55:e4:
fa:96:e9:1c:c1:09:30:31:d7:c0:6c:fa:15:2b:fd:
94:d4:da:70:0f:26:8d:a9:82:8a:02:c8:47:db:45:
f1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:88:E7:6A:1E:92:2F:64:7E:5E:D0:AC:80:72:07:16:34:29:29:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/47d60934-e188-3a67-8b9d-bba6933dffa1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:384::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:0a:1a:07:4a:bb:de:95:77:c3:f3:6f:42:c7:5f:51:e1:bf:
aa:a1:4e:f9:00:eb:22:c7:25:58:2e:8a:58:2b:9e:d8:12:93:
c4:d4:73:cb:bf:ca:ef:41:e3:ca:5f:12:d8:5e:89:c1:b9:0b:
05:3a:a8:7a:32:7a:f1:9a:c8:5a:b0:ce:0d:7b:1f:81:35:c5:
d7:3d:9f:f9:9c:97:b3:d7:3a:6c:94:c6:c6:01:2e:5c:60:ef:
50:5c:43:50:42:85:20:68:2e:5e:96:c3:1e:12:2b:e3:ff:3b:
34:fb:31:c4:11:b0:17:b0:18:22:71:b4:29:31:08:91:71:c0:
d7:4f:28:4c:45:8c:45:c7:0a:d0:9a:cc:30:d7:9a:e3:e3:7b:
1e:3e:f0:7d:bf:cf:ce:c0:8f:99:dc:93:59:09:0b:1d:cc:ea:
02:8b:9d:c2:99:a9:27:bd:e9:c2:ca:99:8b:cb:9c:3d:3e:54:
38:ae:f2:84:06:fe:6f:60:4b:3e:ed:71:f5:0e:1b:af:42:26:
21:05:75:02:68:83:46:46:6b:ad:6e:d2:63:98:51:31:53:d1:
ba:4f:9a:56:a8:ee:66:aa:e1:31:33:0c:de:de:fb:09:94:9f:
38:20:67:d2:43:e8:9b:e1:fa:fe:e4:8e:4a:4b:33:d7:e2:94:
40:56:2b:72
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgNP8BXypGw1mBsmUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MTEzMDE0MDA1MFoXDTI1MDIyODE0MDA1MFowLzEtMCsGA1UEAxMk
ODA3MDk0ZGMtMTA4YS00ODI3LTk5MmItNGQ3MWEyZTUwZjJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj97bKm6oXAgxKmPrcPYhACmk/GVrtQfAMCEQ
JWfsPHlAGBtOO7B63zrKW+ByniaS0f/enhrhuQqa50keFszi6fh1oZnksosvZpu4
dC7SjeQgpjhzFqYwD1KGFh5Tf71ZF+SRYgxGkjvSaipds8mvMNveUNnzpbwJj+0N
gR5Lnbio99Nzqnc/IDJpdEQA7cu8Xg7Jsdmd/Y34W73nqkgOj1Hp6Fvv1vBROu6k
t4DdQxIaPIYSPz/z/vJ4P9Y5TUFnQ9hoKPvap+k95BxleLH+bGlMkX071oS8b0SC
8gxcVeT6lukcwQkwMdfAbPoVK/2U1NpwDyaNqYKKAshH20XxNQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFP2I52oeki9kfl7QrIByBxY0KSnLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNDdkNjA5MzQtZTE4OC0z
YTY3LThiOWQtYmJhNjkzM2RmZmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOE
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEsKGgdKu96Vd8Pzb0LHX1Hhv6qhTvkA6yLHJVguilgrntgSk8TU
c8u/yu9B48pfEtheicG5CwU6qHoyevGayFqwzg17H4E1xdc9n/mcl7PXOmyUxsYB
Llxg71BcQ1BChSBoLl6Wwx4SK+P/OzT7McQRsBewGCJxtCkxCJFxwNdPKExFjEXH
CtCazDDXmuPjex4+8H2/z87Aj5nck1kJCx3M6gKLncKZqSe96cLKmYvLnD0+VDiu
8oQG/m9gSz7tcfUOG69CJiEFdQJog0ZGa61u0mOYUTFT0bpPmlao7maq4TEzDN7e
+wmUnzggZ9JD6Jvh+v7kjkpLM9filEBWK3I=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:44:36 2025 by rpki-client