Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/58662a61-c9fc-3dee-9b34-2f0cb7b079f7.roa
File: 58662a61-c9fc-3dee-9b34-2f0cb7b079f7.roa (raw, json)
Hash identifier: lxkgnaz/opISMMORYG/mVX8MVxiU4Tt4xe9mAx4RFwM=
Subject key identifier: 11:EA:8E:BB:A3:2B:81:AA:CC:81:6B:C3:62:83:9B:C8:24:F2:DE:66
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819CFFA6B27BF01E7B4166080
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/58662a61-c9fc-3dee-9b34-2f0cb7b079f7.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 394680
IP address blocks: 2001:470:1cb::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:fa:6b:27:bf:01:e7:b4:16:60:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=b7d949e9-c28b-450a-a911-bbe740c598ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:11:f3:c1:80:68:48:25:ad:f1:67:05:39:b1:
72:83:e8:b4:03:27:7e:b0:44:8d:b3:85:b5:a1:a9:
26:1f:6e:c0:8a:d5:63:9e:e1:94:0b:97:8b:71:3e:
94:2a:f4:ca:15:6c:03:91:7f:75:44:07:3b:cc:f3:
2d:05:fa:ac:5a:9b:01:ec:9c:e6:df:9a:90:b7:c4:
f7:09:27:e8:16:84:28:31:d2:9c:59:16:08:73:f2:
6c:f9:2c:0e:fc:91:12:14:45:ae:10:52:41:d7:bf:
6a:61:4b:32:6f:a0:80:be:48:62:c1:c4:ef:ef:e0:
99:90:67:11:59:58:f2:36:ed:ff:a0:87:89:61:f0:
26:5a:d6:81:e2:ad:66:4c:7e:fc:ab:fb:ed:4b:73:
ee:28:1d:6d:f8:8a:63:79:c2:c6:b7:d3:56:fb:c9:
5f:13:ed:1d:f8:16:da:a8:bd:9c:5b:10:71:91:71:
c0:42:a6:13:22:09:f5:7c:69:7b:12:15:58:86:98:
c8:4d:16:07:a4:de:46:f3:a8:64:27:f8:cf:72:30:
ea:ae:e4:ec:b5:24:8b:66:38:86:bb:0d:c7:2f:d6:
80:5e:9c:cc:60:29:ee:c0:b7:72:21:6c:6b:00:9c:
0f:32:82:96:6a:09:83:26:85:d6:9a:7b:cd:56:ee:
11:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:EA:8E:BB:A3:2B:81:AA:CC:81:6B:C3:62:83:9B:C8:24:F2:DE:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/58662a61-c9fc-3dee-9b34-2f0cb7b079f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:1cb::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:bc:d1:58:02:47:d7:d1:3e:08:5b:d3:a3:69:f5:cf:6d:b7:
5e:1e:d5:b9:fb:a5:ff:8f:ed:59:16:fa:1a:b1:0b:1c:16:11:
68:ac:ce:1e:8c:24:2f:40:74:54:77:86:42:c7:59:7e:38:5b:
40:72:48:86:32:43:92:d4:c4:27:f5:43:2b:39:96:f8:bb:69:
42:da:e7:6a:3e:d1:f2:2f:0f:0c:6c:dd:4a:cb:32:43:29:d2:
48:4e:f6:b2:f5:e5:7a:13:23:54:ce:d6:7c:cd:a5:45:74:1a:
dd:f1:da:00:6f:d3:c1:d1:de:38:5f:d2:6f:10:07:ee:a2:e0:
12:69:b2:b4:8f:f5:6c:b7:2c:92:12:0f:57:c2:77:15:ce:03:
e1:7a:69:6c:2d:8f:99:40:1e:7e:6b:63:55:1b:b3:e5:ff:d1:
63:1d:b4:cb:a1:38:ab:fd:a1:6b:25:0f:d7:15:c1:4e:0a:42:
e1:e6:62:17:58:72:72:aa:c9:6d:c6:c3:4f:6a:43:fb:e0:78:
22:e0:89:8a:ef:0f:aa:0c:a4:83:01:ef:f8:ca:1e:7c:cd:2d:
89:a3:d9:89:32:c6:6a:5b:d8:dc:d7:a6:dc:57:ad:3d:65:d5:
6e:a3:4f:9c:1c:38:01:ec:23:fd:15:62:e6:95:df:49:c8:b7:
54:0d:b8:b1
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgZz/prJ78B57QWYIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MTIwNTAyMDAzOVoXDTI1MDMwNTAyMDAzOVowLzEtMCsGA1UEAxMk
YjdkOTQ5ZTktYzI4Yi00NTBhLWE5MTEtYmJlNzQwYzU5OGVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhHzwYBoSCWt8WcFObFyg+i0Ayd+sESNs4W1
oakmH27AitVjnuGUC5eLcT6UKvTKFWwDkX91RAc7zPMtBfqsWpsB7Jzm35qQt8T3
CSfoFoQoMdKcWRYIc/Js+SwO/JESFEWuEFJB179qYUsyb6CAvkhiwcTv7+CZkGcR
WVjyNu3/oIeJYfAmWtaB4q1mTH78q/vtS3PuKB1t+IpjecLGt9NW+8lfE+0d+Bba
qL2cWxBxkXHAQqYTIgn1fGl7EhVYhpjITRYHpN5G86hkJ/jPcjDqruTstSSLZjiG
uw3HL9aAXpzMYCnuwLdyIWxrAJwPMoKWagmDJoXWmnvNVu4RAQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBHqjrujK4GqzIFrw2KDm8gk8t5mMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNTg2NjJhNjEtYzlmYy0z
ZGVlLTliMzQtMmYwY2I3YjA3OWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAHL
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADe80VgCR9fRPghb06Np9c9tt14e1bn7pf+P7VkW+hqxCxwWEWis
zh6MJC9AdFR3hkLHWX44W0BySIYyQ5LUxCf1Qys5lvi7aULa52o+0fIvDwxs3UrL
MkMp0khO9rL15XoTI1TO1nzNpUV0Gt3x2gBv08HR3jhf0m8QB+6i4BJpsrSP9Wy3
LJISD1fCdxXOA+F6aWwtj5lAHn5rY1Ubs+X/0WMdtMuhOKv9oWslD9cVwU4KQuHm
YhdYcnKqyW3Gw09qQ/vgeCLgiYrvD6oMpIMB7/jKHnzNLYmj2Ykyxmpb2NzXptxX
rT1l1W6jT5wcOAHsI/0VYuaV30nIt1QNuLE=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:33:38 2025 by rpki-client