Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5232a25a-6432-3b3e-a4e0-7e0f95439c81.roa
File: 5232a25a-6432-3b3e-a4e0-7e0f95439c81.roa (raw, json)
Hash identifier: rDtBsshsJ8+FG3zAJaQ0Iu1FTYUnKa6SNIhHOKRerYQ=
Subject key identifier: D3:12:60:C5:C6:00:B7:3C:70:F4:02:76:99:9D:27:D8:6A:9B:AF:4A
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819D01C22FFA8A74BD5E2DE00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5232a25a-6432-3b3e-a4e0-7e0f95439c81.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 45960
IP address blocks: 2001:470:243::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:1c:22:ff:a8:a7:4b:d5:e2:de:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=fb79e7f1-960a-4ae1-85c0-af6128c1ca26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f7:98:49:80:56:40:17:4f:b1:c8:d8:93:98:
d9:09:4c:b5:3c:2e:29:2f:82:5f:59:6b:b8:dd:e3:
ce:ce:b0:4e:32:2b:3c:0f:c9:91:4f:b0:39:ab:14:
73:d9:df:38:66:c3:4a:c7:48:44:a1:ac:24:16:0e:
82:a3:df:9a:1a:00:75:f3:5f:e2:16:37:e3:b6:2c:
e3:88:8f:e8:6f:fc:fb:7b:98:5e:67:0c:64:87:25:
03:d7:f2:92:65:d9:ba:31:b8:19:16:f6:2e:f6:56:
73:bd:7b:3c:eb:b8:da:1f:cd:cb:88:ff:17:20:6c:
ef:c7:d2:15:e5:7c:18:2b:0e:f4:ed:00:91:f1:b7:
b3:9d:e7:a0:ad:b0:cd:9e:35:9f:64:45:2e:a1:42:
a3:9c:61:b9:7d:36:c8:9a:65:ea:98:2b:05:4e:26:
c4:74:4a:dc:74:eb:86:9f:7c:73:72:37:cb:8a:13:
74:50:3c:15:f0:15:63:3f:29:a6:b0:13:b8:84:fd:
5f:2e:61:96:2d:32:6a:83:c4:6e:7f:9d:fe:96:f2:
d0:53:2a:67:31:35:f9:f1:48:05:28:07:d0:71:f9:
a2:ca:76:43:a9:75:f9:7b:91:80:fe:89:90:f2:d7:
05:ee:c5:62:65:a9:d8:12:98:5a:c6:4a:36:35:2b:
e2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:12:60:C5:C6:00:B7:3C:70:F4:02:76:99:9D:27:D8:6A:9B:AF:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5232a25a-6432-3b3e-a4e0-7e0f95439c81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:243::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:64:04:da:ee:6d:30:91:20:84:43:ee:3d:ca:a1:e3:43:51:
ee:6d:a6:d7:68:0b:a9:2b:08:d5:2f:4a:b2:32:c0:98:79:42:
ad:3a:a0:6d:cf:56:4a:2d:ba:f0:29:7d:be:f9:39:b7:12:e4:
9f:b6:fe:c8:af:e0:d4:5b:7b:b1:ec:0e:75:c3:fe:ae:77:b6:
a3:35:71:26:d3:25:44:ad:09:fe:02:ec:75:15:43:ef:df:29:
2e:01:f2:c4:a0:c0:2f:db:fd:f8:79:83:73:e3:81:16:51:f8:
c8:84:1c:44:90:86:ec:07:fd:9f:fb:71:15:bb:52:10:45:e5:
d0:1d:72:1d:af:d0:86:db:38:7f:ed:ea:18:e3:2a:1b:51:9b:
89:99:7c:bf:13:04:03:6b:84:80:cd:16:c7:80:89:ed:d3:8f:
11:fd:01:00:af:f7:a2:a9:05:b9:cd:32:6f:6d:6b:8b:aa:32:
25:f6:5c:cc:f7:0d:fa:97:09:08:2a:24:d3:a0:65:a8:e9:f8:
d0:a1:97:ce:e7:f2:3e:44:42:83:df:d9:8c:1e:e1:0b:23:04:
68:f2:fd:36:a3:a2:3e:f1:f0:28:30:77:64:ca:78:a8:01:a9:
e8:0a:02:5b:4f:10:4a:01:ca:a0:30:70:74:e1:1b:96:ce:2e:
ac:77:1e:63
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgZ0Bwi/6inS9Xi3gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MTIwNTAyMDAzOVoXDTI1MDMwNTAyMDAzOVowLzEtMCsGA1UEAxMk
ZmI3OWU3ZjEtOTYwYS00YWUxLTg1YzAtYWY2MTI4YzFjYTI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhveYSYBWQBdPscjYk5jZCUy1PC4pL4JfWWu4
3ePOzrBOMis8D8mRT7A5qxRz2d84ZsNKx0hEoawkFg6Co9+aGgB181/iFjfjtizj
iI/ob/z7e5heZwxkhyUD1/KSZdm6MbgZFvYu9lZzvXs867jaH83LiP8XIGzvx9IV
5XwYKw707QCR8bezneegrbDNnjWfZEUuoUKjnGG5fTbImmXqmCsFTibEdErcdOuG
n3xzcjfLihN0UDwV8BVjPymmsBO4hP1fLmGWLTJqg8Ruf53+lvLQUypnMTX58UgF
KAfQcfmiynZDqXX5e5GA/omQ8tcF7sViZanYEphaxko2NSviAQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNMSYMXGALc8cPQCdpmdJ9hqm69KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNTIzMmEyNWEtNjQzMi0z
YjNlLWE0ZTAtN2UwZjk1NDM5YzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAJD
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACdkBNrubTCRIIRD7j3KoeNDUe5tptdoC6krCNUvSrIywJh5Qq06
oG3PVkotuvApfb75ObcS5J+2/siv4NRbe7HsDnXD/q53tqM1cSbTJUStCf4C7HUV
Q+/fKS4B8sSgwC/b/fh5g3PjgRZR+MiEHESQhuwH/Z/7cRW7UhBF5dAdch2v0Ibb
OH/t6hjjKhtRm4mZfL8TBANrhIDNFseAie3TjxH9AQCv96KpBbnNMm9ta4uqMiX2
XMz3DfqXCQgqJNOgZajp+NChl87n8j5EQoPf2Ywe4QsjBGjy/Tajoj7x8Cgwd2TK
eKgBqegKAltPEEoByqAwcHThG5bOLqx3HmM=
-----END CERTIFICATE-----
Generated at Fri May 9 04:54:09 2025 by rpki-client