Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a7da6d9b-e286-3654-8f45-bcfc78a9fee5.roa
File: a7da6d9b-e286-3654-8f45-bcfc78a9fee5.roa (raw, json)
Hash identifier: yBiZJl3QaBao1J50F/E5dOH6RvNjIVBlO+32jx6YgQk=
Subject key identifier: C4:9B:70:72:2D:B7:C2:31:29:EC:93:9E:AA:FC:E5:04:9D:74:FB:3D
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819D01E6E155522EA3F07F870
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a7da6d9b-e286-3654-8f45-bcfc78a9fee5.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 62081
IP address blocks: 2001:470:2a1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:1e:6e:15:55:22:ea:3f:07:f8:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=f332b553-b00f-4b4f-b1bc-e74ae607c37a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:31:78:39:25:3c:0c:cf:8e:29:ed:e0:6d:20:
a4:1f:db:27:ff:78:09:30:59:2a:2f:f3:44:fe:4a:
cb:a4:dc:62:13:c2:b0:bf:bc:9f:e4:7e:59:42:5b:
d6:15:1f:e8:9c:09:6b:ec:74:09:05:46:92:20:d0:
90:b5:93:72:af:ce:a0:05:36:74:4e:3d:20:32:b2:
14:0d:a1:75:2d:db:81:8a:2e:a3:7e:b6:8d:7a:72:
f5:2d:a9:ab:23:cf:b1:b1:a1:a6:64:cf:f0:a3:38:
1a:fd:56:52:9f:e2:c7:47:40:15:b9:40:88:92:62:
49:6e:c5:08:28:57:de:7d:66:94:a0:97:4b:97:4d:
55:af:dd:b3:5b:35:40:7e:8f:9f:bb:aa:ef:ba:c2:
3e:87:68:9b:fc:d2:50:92:07:c1:91:64:50:69:e6:
4d:46:f2:8e:28:09:44:08:d7:80:34:e0:ee:bc:ee:
4e:73:ce:e4:88:82:42:aa:cf:b4:90:9e:5a:88:ad:
13:9d:05:4b:e6:41:11:56:96:08:f4:d9:e5:9d:b2:
69:1c:87:e7:b6:06:b3:1a:24:de:26:48:e9:bb:53:
ce:e7:76:b1:47:66:c4:7b:f6:cb:f5:13:4a:af:63:
0a:a3:37:a1:af:39:89:4a:15:32:94:90:bb:37:42:
91:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:9B:70:72:2D:B7:C2:31:29:EC:93:9E:AA:FC:E5:04:9D:74:FB:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a7da6d9b-e286-3654-8f45-bcfc78a9fee5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2a1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:4b:e3:c0:f7:2a:6f:73:d7:94:91:53:0c:b2:fc:e0:04:c9:
de:90:1d:5e:dc:8b:37:0a:1c:36:6a:2f:fb:49:06:36:d6:15:
a5:d5:13:17:bd:f5:a3:c6:79:85:0f:69:ec:d9:53:26:ca:01:
c1:cc:f9:47:1c:10:e2:2e:14:8a:35:fe:85:be:10:bb:5c:be:
c1:61:9e:08:1a:5d:26:93:83:60:39:6b:64:bc:af:19:27:f4:
65:ea:53:47:cf:37:bb:59:03:2d:ff:60:f5:8f:97:18:d3:62:
81:6a:fd:50:7a:1f:69:c7:47:43:7e:23:5d:53:35:49:7b:b5:
fa:4e:88:0a:4d:64:5e:21:c9:9f:8a:e3:58:23:82:32:77:32:
b0:97:70:d9:f3:18:25:a0:cb:3e:d3:a1:46:51:75:7c:5c:b5:
16:e4:ae:2d:62:c5:78:78:79:2d:c0:ae:3e:62:c3:27:0e:10:
23:bd:df:62:da:45:40:80:b4:5d:ed:da:74:71:91:61:ef:b0:
2e:d9:6f:d0:e1:04:cf:74:44:01:b7:e8:4d:43:34:53:17:21:
76:d4:8f:0b:6d:b9:f5:17:92:91:63:5d:df:6f:54:29:9e:18:
19:ca:99:c7:88:c1:7f:83:01:bd:91:da:00:ec:50:45:6b:b1:
0d:6f:c9:48
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgZ0B5uFVUi6j8H+HAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MTIwNTAyMDAzOVoXDTI1MDMwNTAyMDAzOVowLzEtMCsGA1UEAxMk
ZjMzMmI1NTMtYjAwZi00YjRmLWIxYmMtZTc0YWU2MDdjMzdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTF4OSU8DM+OKe3gbSCkH9sn/3gJMFkqL/NE
/krLpNxiE8Kwv7yf5H5ZQlvWFR/onAlr7HQJBUaSINCQtZNyr86gBTZ0Tj0gMrIU
DaF1LduBii6jfraNenL1LamrI8+xsaGmZM/wozga/VZSn+LHR0AVuUCIkmJJbsUI
KFfefWaUoJdLl01Vr92zWzVAfo+fu6rvusI+h2ib/NJQkgfBkWRQaeZNRvKOKAlE
CNeANODuvO5Oc87kiIJCqs+0kJ5aiK0TnQVL5kERVpYI9NnlnbJpHIfntgazGiTe
Jkjpu1PO53axR2bEe/bL9RNKr2MKozehrzmJShUylJC7N0KRsQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMSbcHItt8IxKeyTnqr85QSddPs9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTdkYTZkOWItZTI4Ni0z
NjU0LThmNDUtYmNmYzc4YTlmZWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKh
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEBL48D3Km9z15SRUwyy/OAEyd6QHV7cizcKHDZqL/tJBjbWFaXV
Exe99aPGeYUPaezZUybKAcHM+UccEOIuFIo1/oW+ELtcvsFhnggaXSaTg2A5a2S8
rxkn9GXqU0fPN7tZAy3/YPWPlxjTYoFq/VB6H2nHR0N+I11TNUl7tfpOiApNZF4h
yZ+K41gjgjJ3MrCXcNnzGCWgyz7ToUZRdXxctRbkri1ixXh4eS3Arj5iwycOECO9
32LaRUCAtF3t2nRxkWHvsC7Zb9DhBM90RAG36E1DNFMXIXbUjwttufUXkpFjXd9v
VCmeGBnKmceIwX+DAb2R2gDsUEVrsQ1vyUg=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:36:28 2025 by rpki-client