Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c22bc220-e891-3368-ab86-e348501dd1a3.roa
File: c22bc220-e891-3368-ab86-e348501dd1a3.roa (raw, json)
Hash identifier: GJJO5wwO0KuwsHypKb8PH9EC+JuRFPEs2nSBoHGh8jw=
Subject key identifier: 5E:2C:D3:E3:93:5E:DE:DD:C7:3F:C2:CA:3B:88:ED:99:03:74:7B:4E
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819D011083F500D7AA998E300
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c22bc220-e891-3368-ab86-e348501dd1a3.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 394230
IP address blocks: 2001:470:c9::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:11:08:3f:50:0d:7a:a9:98:e3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=a3c3a7fb-e455-4df6-9285-eb6dc89d4a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3b:9a:60:eb:85:bb:04:0f:b9:f8:95:95:b7:
88:55:ba:85:88:01:e5:e1:5d:a5:62:2e:64:63:c1:
b3:e2:2d:9e:74:64:ea:c6:72:5f:e9:84:e3:c4:6c:
01:21:3f:9b:cb:59:4b:84:74:19:a8:37:5c:10:b3:
30:65:54:8d:4b:3d:79:69:cb:e2:40:8b:43:6a:8c:
a7:cf:46:20:a2:29:96:83:60:86:83:a4:8d:eb:18:
82:96:69:8b:6f:22:33:80:a2:60:70:3f:ca:0e:89:
0b:76:e4:ac:2f:94:00:b4:e4:b0:7f:7f:e9:ef:80:
8d:07:46:0b:43:62:20:25:69:ca:ee:c1:d8:4a:d1:
a4:ef:db:14:91:ea:62:d1:f6:06:bf:1b:3f:dc:95:
9f:29:4e:5a:71:fb:55:27:71:05:a0:00:e1:6a:1e:
ca:f3:08:0c:d9:06:78:7b:62:e6:6e:db:08:59:ea:
50:b0:a6:41:4f:6f:74:84:da:80:5c:fc:b0:ac:5a:
d2:ce:2b:25:0b:a7:29:02:59:30:c7:66:0d:4b:3b:
f3:d9:f9:76:29:98:31:c1:56:7f:93:7e:78:2c:77:
59:99:09:10:9a:3d:dd:92:a9:81:45:0a:6a:8f:e0:
92:77:89:f1:3b:2b:cd:fb:ae:a0:91:76:9e:89:80:
b3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:2C:D3:E3:93:5E:DE:DD:C7:3F:C2:CA:3B:88:ED:99:03:74:7B:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c22bc220-e891-3368-ab86-e348501dd1a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:c9::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:27:75:65:34:1e:3a:3d:b8:6c:7c:e7:4f:a1:85:b3:10:9d:
f0:70:05:bf:b0:b3:b1:e6:e6:33:52:8d:bf:e2:f2:1d:22:72:
dd:e6:73:d8:c9:c5:e2:0f:87:05:95:d2:f9:14:7a:9d:f2:4e:
8a:dd:da:b4:1b:dd:e0:f7:b7:dd:07:f5:2d:ee:5e:b9:e0:41:
81:e7:29:07:94:a2:76:04:dd:fc:a7:06:8b:a9:d6:49:59:45:
3f:24:a9:ba:98:82:8e:ff:d7:a7:35:20:0c:f7:29:cf:a0:89:
28:00:4b:b9:01:2d:c2:0a:b0:ef:6f:e7:2f:50:be:b5:c7:3d:
ac:c4:eb:ca:92:36:36:52:d5:e3:5b:30:cd:02:36:dc:63:36:
de:d9:00:9c:05:bd:c8:2a:ba:4e:18:23:4d:cc:2c:f2:d9:20:
d2:e8:bb:ea:15:c4:60:f8:41:df:57:91:83:36:88:45:51:05:
fd:34:f8:b1:d0:04:fb:cc:d9:15:0c:4d:2a:cc:0b:65:f5:4a:
b1:5d:b2:12:17:ec:24:88:b3:ca:a0:fa:84:36:a9:2f:9d:f4:
e9:78:1e:02:78:9d:59:8e:e0:85:12:35:0d:78:c7:b6:2d:65:
7a:77:6c:8a:0e:a4:55:e6:8c:93:9d:91:7a:5a:7a:6c:ce:16:
f7:87:a6:bf
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgZ0BEIP1ANeqmY4wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MTIwNTAyMDAzOVoXDTI1MDMwNTAyMDAzOVowLzEtMCsGA1UEAxMk
YTNjM2E3ZmItZTQ1NS00ZGY2LTkyODUtZWI2ZGM4OWQ0YTAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DuaYOuFuwQPufiVlbeIVbqFiAHl4V2lYi5k
Y8Gz4i2edGTqxnJf6YTjxGwBIT+by1lLhHQZqDdcELMwZVSNSz15acviQItDaoyn
z0YgoimWg2CGg6SN6xiClmmLbyIzgKJgcD/KDokLduSsL5QAtOSwf3/p74CNB0YL
Q2IgJWnK7sHYStGk79sUkepi0fYGvxs/3JWfKU5acftVJ3EFoADhah7K8wgM2QZ4
e2LmbtsIWepQsKZBT290hNqAXPywrFrSzislC6cpAlkwx2YNSzvz2fl2KZgxwVZ/
k354LHdZmQkQmj3dkqmBRQpqj+CSd4nxOyvN+66gkXaeiYCzyQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFF4s0+OTXt7dxz/CyjuI7ZkDdHtOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzIyYmMyMjAtZTg5MS0z
MzY4LWFiODYtZTM0ODUwMWRkMWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcADJ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIsndWU0Hjo9uGx850+hhbMQnfBwBb+ws7Hm5jNSjb/i8h0ict3m
c9jJxeIPhwWV0vkUep3yTord2rQb3eD3t90H9S3uXrngQYHnKQeUonYE3fynBoup
1klZRT8kqbqYgo7/16c1IAz3Kc+giSgAS7kBLcIKsO9v5y9QvrXHPazE68qSNjZS
1eNbMM0CNtxjNt7ZAJwFvcgquk4YI03MLPLZINLou+oVxGD4Qd9XkYM2iEVRBf00
+LHQBPvM2RUMTSrMC2X1SrFdshIX7CSIs8qg+oQ2qS+d9Ol4HgJ4nVmO4IUSNQ14
x7YtZXp3bIoOpFXmjJOdkXpaemzOFveHpr8=
-----END CERTIFICATE-----
Generated at Sat Apr 26 02:32:05 2025 by rpki-client