Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c8d0cce3-234e-378c-aa79-f69293d49938.roa
File: c8d0cce3-234e-378c-aa79-f69293d49938.roa (raw, json)
Hash identifier: dz+B9wfVf49d+mZPLSJE/7UDtkGq9DgdpNcDSo7rjBE=
Subject key identifier: 36:83:B4:0B:5E:B9:18:42:AF:AF:94:EF:8D:14:4D:AF:95:1A:24:27
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848A2A9F424A45F7858FF16B5C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c8d0cce3-234e-378c-aa79-f69293d49938.roa
Signing time: Thu 23 Jan 2025 02:30:17 +0000
ROA not before: Thu 23 Jan 2025 02:30:17 +0000
ROA not after: Wed 23 Apr 2025 01:30:17 +0000
asID: 59953
IP address blocks: 2001:470:3f7::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a2:a9:f4:24:a4:5f:78:58:ff:16:b5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jan 23 02:30:17 2025 GMT
Not After : Apr 23 01:30:17 2025 GMT
Subject: CN=2324de8d-0fc3-41f5-8a1d-08d836058fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5f:88:12:b6:33:36:93:d7:23:ed:0f:61:81:
23:51:1c:7c:9e:f9:72:ea:eb:05:11:ca:a3:38:3e:
8e:10:ec:fb:38:c1:ca:71:df:49:fb:50:17:8a:c4:
2f:7e:13:fd:fd:97:6b:fe:93:35:24:76:1b:6b:7d:
1e:19:21:1a:22:71:94:7d:27:39:87:b9:ca:b0:87:
9a:e4:26:50:b0:7e:87:c6:e7:e0:72:67:4e:04:1a:
00:df:cc:da:a0:9c:35:30:ef:51:c5:f7:c5:e9:a8:
c6:66:f9:5c:c7:2d:09:37:2f:b6:1b:ba:b0:37:58:
c6:b4:ed:e4:0f:be:80:06:9b:15:29:84:16:4a:d1:
f5:4e:65:eb:f1:59:9d:16:36:70:d7:84:c7:92:30:
eb:53:95:57:a9:3f:28:3e:7a:b5:66:b4:51:b2:fa:
02:a6:24:ba:ac:0a:56:60:20:37:7f:bb:48:f4:38:
30:fb:ae:a9:2c:62:80:f3:49:fe:12:3a:9f:fe:8f:
6f:67:22:93:91:87:5c:8f:d2:97:b7:e3:ae:02:d8:
d8:9c:0a:f9:a2:43:23:8c:31:7b:89:8d:2c:ad:75:
e1:4b:ad:a9:3e:44:f8:23:c5:50:3e:95:7a:3b:73:
35:59:f2:22:e6:c7:2f:31:66:ad:a7:9b:72:25:3b:
a4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:83:B4:0B:5E:B9:18:42:AF:AF:94:EF:8D:14:4D:AF:95:1A:24:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c8d0cce3-234e-378c-aa79-f69293d49938.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:3f7::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:d5:4c:82:52:14:27:9f:2c:c9:cd:62:be:6b:a1:0e:82:91:
bf:a7:9d:3b:fb:ef:c6:2f:76:b4:09:f6:08:3b:db:cf:04:2c:
b1:fb:be:69:d6:56:b4:34:6a:6b:5c:ce:7d:a5:4d:c2:f8:5b:
a9:4f:be:f5:e5:11:73:32:ec:0c:ff:6f:ce:5e:ba:77:9a:30:
c7:71:a7:11:1b:57:9f:8b:b3:72:fc:ff:77:81:88:e1:85:f2:
72:21:bd:6a:96:08:2e:ff:22:7a:e0:69:97:e7:08:04:d5:98:
96:a3:83:ea:51:12:03:7a:bf:0b:a1:8c:0c:32:b4:de:e1:96:
1b:6a:5b:9a:75:09:7b:71:df:64:b4:14:b8:ff:17:95:7d:24:
c8:cb:29:5f:8f:01:86:57:7e:14:a0:6b:76:3e:91:e8:ca:1b:
be:89:e4:49:07:3e:86:83:70:6d:7d:3b:63:f5:5c:2d:30:b5:
4c:01:6c:2b:cd:e2:20:3f:47:6b:fa:03:ab:44:44:8c:6f:55:
c5:63:8b:e1:bc:86:68:1d:9d:83:eb:03:35:fa:e5:64:18:ce:
80:60:98:91:cf:06:41:26:17:33:f4:72:03:31:23:ab:0a:01:
32:e7:89:8a:3c:bb:a3:ec:e8:f7:b8:8c:21:f5:75:e5:01:0f:
c2:15:be:3c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiiqfQkpF94WP8WtcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDEyMzAyMzAxN1oXDTI1MDQyMzAxMzAxN1owLzEtMCsGA1UEAxMk
MjMyNGRlOGQtMGZjMy00MWY1LThhMWQtMDhkODM2MDU4ZmE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoV+IErYzNpPXI+0PYYEjURx8nvly6usFEcqj
OD6OEOz7OMHKcd9J+1AXisQvfhP9/Zdr/pM1JHYba30eGSEaInGUfSc5h7nKsIea
5CZQsH6HxufgcmdOBBoA38zaoJw1MO9RxffF6ajGZvlcxy0JNy+2G7qwN1jGtO3k
D76ABpsVKYQWStH1TmXr8VmdFjZw14THkjDrU5VXqT8oPnq1ZrRRsvoCpiS6rApW
YCA3f7tI9Dgw+66pLGKA80n+Ejqf/o9vZyKTkYdcj9KXt+OuAtjYnAr5okMjjDF7
iY0srXXhS62pPkT4I8VQPpV6O3M1WfIi5scvMWatp5tyJTukaQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDaDtAteuRhCr6+U740UTa+VGiQnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzhkMGNjZTMtMjM0ZS0z
NzhjLWFhNzktZjY5MjkzZDQ5OTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAP3
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAATVTIJSFCefLMnNYr5roQ6Ckb+nnTv778YvdrQJ9gg7288ELLH7
vmnWVrQ0amtczn2lTcL4W6lPvvXlEXMy7Az/b85euneaMMdxpxEbV5+Ls3L8/3eB
iOGF8nIhvWqWCC7/InrgaZfnCATVmJajg+pREgN6vwuhjAwytN7hlhtqW5p1CXtx
32S0FLj/F5V9JMjLKV+PAYZXfhSga3Y+kejKG76J5EkHPoaDcG19O2P1XC0wtUwB
bCvN4iA/R2v6A6tERIxvVcVji+G8hmgdnYPrAzX65WQYzoBgmJHPBkEmFzP0cgMx
I6sKATLniYo8u6Ps6Pe4jCH1deUBD8IVvjw=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:41:03 2025 by rpki-client