Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b9a5f2d8-8b7f-36de-b907-a3d969db3468.roa
File: b9a5f2d8-8b7f-36de-b907-a3d969db3468.roa (raw, json)
Hash identifier: 2N0nyRoP2P3EW4ZL9+p8QFvRRW7j7PM/bE6Wp07xV0c=
Subject key identifier: 68:68:56:61:1D:CA:E2:6F:B9:53:8A:FA:0B:59:EA:84:02:2D:F7:D0
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819D00524555593CA9BB50300
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b9a5f2d8-8b7f-36de-b907-a3d969db3468.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 3853
IP address blocks: 2001:470:2f4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:05:24:55:55:93:ca:9b:b5:03:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=314aa42d-53c3-49a5-b311-58eabad497e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ce:8f:1f:07:22:f1:f7:ce:ce:a5:d0:4c:13:
79:f4:1e:c0:12:4f:71:eb:39:6f:96:ed:6d:10:02:
1c:23:01:55:ea:50:e7:8e:1e:b2:70:e6:c8:95:29:
6c:6b:15:22:05:72:bb:90:3c:6f:bb:31:e6:6d:60:
3c:77:cb:0b:c5:6c:95:8a:28:ea:b1:be:c5:37:9b:
0b:2a:71:ec:df:7f:d8:cc:32:01:55:1d:99:35:15:
9a:19:30:39:51:d9:d7:04:40:4a:a3:90:e3:59:96:
0b:45:66:f7:18:9b:48:f9:95:26:ba:50:96:61:c7:
37:28:14:5e:7d:23:8e:9b:0b:66:ff:3a:b5:10:a1:
1f:dc:47:e4:99:35:64:6a:15:f2:c7:ef:97:7c:bd:
01:e6:2f:56:8c:04:3d:73:a8:77:e4:bd:f3:58:b8:
3e:3f:09:8f:f2:44:cc:ce:58:f5:42:6a:41:f9:38:
1c:5f:e6:d0:2e:e5:32:d5:c7:a2:f5:e3:05:64:5a:
8d:98:1b:0d:c3:38:58:b5:11:91:6d:4f:2c:bb:16:
5d:29:71:cb:28:43:7b:96:0c:fe:d5:82:b6:83:63:
09:07:b1:f8:4c:b8:1a:91:c2:8a:54:dd:2d:5d:f7:
1c:22:bc:d8:e2:5e:4e:94:4a:16:af:1b:0e:12:37:
28:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:68:56:61:1D:CA:E2:6F:B9:53:8A:FA:0B:59:EA:84:02:2D:F7:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b9a5f2d8-8b7f-36de-b907-a3d969db3468.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2f4::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:72:6a:df:1d:84:79:f6:f0:84:77:97:57:24:32:f2:91:bb:
36:ae:1f:ca:1b:99:d0:4a:eb:b4:f4:c4:73:74:cc:56:e9:40:
3f:31:6e:cc:30:79:7d:a2:4e:35:e9:3d:bb:78:be:d9:f7:4e:
70:f8:4c:5d:45:f0:3d:92:fd:a4:d7:75:ea:83:a6:3b:3d:a1:
1a:25:e8:6b:0f:e1:d3:b7:c6:28:5d:f2:cb:00:44:d5:fb:f0:
b4:d5:a6:a5:d3:77:70:06:17:b9:e0:82:74:76:f1:f4:ee:83:
87:01:10:f0:3a:03:3e:3d:ab:48:94:37:a2:8c:af:37:86:7b:
ae:2e:08:b4:4f:b1:84:3e:80:c2:f7:e6:93:39:e3:af:42:4c:
5b:7e:6e:ca:4c:5c:89:0f:42:29:dd:ff:b9:b6:86:90:de:16:
e1:c6:ba:ad:38:9b:0c:ee:f9:08:59:3f:bf:89:f3:bd:d4:5c:
40:1b:87:27:23:10:9c:b5:90:09:38:3f:0f:59:0b:1f:3a:c6:
d2:75:14:21:61:d7:62:fb:d1:0a:d6:38:0a:53:5f:ea:00:f8:
b1:5b:35:24:6d:a5:03:a3:a0:11:26:70:cf:93:db:f8:29:da:
bd:0b:b5:4d:05:e9:fe:83:59:d2:bc:e2:0a:6a:80:cd:e4:6e:
9e:35:6c:55
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgZ0AUkVVWTypu1AwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MTIwNTAyMDAzOVoXDTI1MDMwNTAyMDAzOVowLzEtMCsGA1UEAxMk
MzE0YWE0MmQtNTNjMy00OWE1LWIzMTEtNThlYWJhZDQ5N2UwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxM6PHwci8ffOzqXQTBN59B7AEk9x6zlvlu1t
EAIcIwFV6lDnjh6ycObIlSlsaxUiBXK7kDxvuzHmbWA8d8sLxWyViijqsb7FN5sL
KnHs33/YzDIBVR2ZNRWaGTA5UdnXBEBKo5DjWZYLRWb3GJtI+ZUmulCWYcc3KBRe
fSOOmwtm/zq1EKEf3EfkmTVkahXyx++XfL0B5i9WjAQ9c6h35L3zWLg+PwmP8kTM
zlj1QmpB+TgcX+bQLuUy1cei9eMFZFqNmBsNwzhYtRGRbU8suxZdKXHLKEN7lgz+
1YK2g2MJB7H4TLgakcKKVN0tXfccIrzY4l5OlEoWrxsOEjco6QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGhoVmEdyuJvuVOK+gtZ6oQCLffQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYjlhNWYyZDgtOGI3Zi0z
NmRlLWI5MDctYTNkOTY5ZGIzNDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAL0
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGNyat8dhHn28IR3l1ckMvKRuzauH8obmdBK67T0xHN0zFbpQD8x
bswweX2iTjXpPbt4vtn3TnD4TF1F8D2S/aTXdeqDpjs9oRol6GsP4dO3xihd8ssA
RNX78LTVpqXTd3AGF7nggnR28fTug4cBEPA6Az49q0iUN6KMrzeGe64uCLRPsYQ+
gML35pM5469CTFt+bspMXIkPQind/7m2hpDeFuHGuq04mwzu+QhZP7+J873UXEAb
hycjEJy1kAk4Pw9ZCx86xtJ1FCFh12L70QrWOApTX+oA+LFbNSRtpQOjoBEmcM+T
2/gp2r0LtU0F6f6DWdK84gpqgM3kbp41bFU=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:38:16 2025 by rpki-client