Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d78c59fc-d0fa-3454-a9a5-3dbb60e345a1.roa
File: d78c59fc-d0fa-3454-a9a5-3dbb60e345a1.roa (raw, json)
Hash identifier: 8dMUw+F4X/Evp0q8S6TEn7359gUEf6BmA8nN27ERO1w=
Subject key identifier: 67:03:04:EA:94:67:A6:66:C0:D9:F6:0E:41:56:46:3E:9E:6F:EB:41
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584850403004AF088F0DF1B13500
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d78c59fc-d0fa-3454-a9a5-3dbb60e345a1.roa
Signing time: Tue 24 Dec 2024 14:00:53 +0000
ROA not before: Tue 24 Dec 2024 14:00:53 +0000
ROA not after: Mon 24 Mar 2025 13:00:53 +0000
asID: 35908
IP address blocks: 2001:470:3a2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:50:40:30:04:af:08:8f:0d:f1:b1:35:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 24 14:00:53 2024 GMT
Not After : Mar 24 13:00:53 2025 GMT
Subject: CN=1a85cf20-04d7-4346-b66e-1c21e23ec7d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5b:d6:62:c7:26:f6:69:ae:16:e9:64:a5:c6:
da:27:6d:f5:4f:45:2e:ee:d4:1a:97:d0:1c:63:3c:
5d:d9:cf:97:7f:4b:03:22:b2:bb:d9:34:80:e9:18:
0a:28:a0:a6:2b:f3:d8:7c:e3:2e:07:21:ca:1e:9f:
83:8e:5f:0b:33:d4:11:eb:b8:48:68:75:69:55:1b:
df:2b:13:0a:42:53:f4:d1:bc:30:1b:c3:d2:7f:39:
9d:fa:6f:d8:b3:24:11:3b:d8:f0:6a:c6:85:a2:52:
73:90:10:93:0c:1f:bb:57:17:c1:42:83:8a:11:3d:
bc:d3:d5:8e:29:95:41:c8:60:92:72:f1:3a:99:76:
af:56:7e:69:66:66:57:d5:b9:e3:33:59:6f:ea:03:
64:95:d6:0a:43:53:e1:7a:0d:d0:4a:07:fd:96:73:
f5:65:01:d3:53:76:b9:e7:cc:d2:f5:21:d2:1e:54:
ef:06:38:0a:61:46:34:6e:f2:c8:9f:ec:8c:ce:58:
63:cb:dd:f4:2b:49:7d:ec:4d:3a:92:32:b6:c7:93:
bd:3e:5d:af:fc:a5:be:b0:2b:b4:15:d3:dc:be:c0:
93:ba:d4:38:e6:a1:46:de:a3:6d:2f:9a:42:88:7c:
36:b1:b3:e7:fe:3e:f6:c4:f1:44:f2:f0:84:9a:7a:
d4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:03:04:EA:94:67:A6:66:C0:D9:F6:0E:41:56:46:3E:9E:6F:EB:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d78c59fc-d0fa-3454-a9a5-3dbb60e345a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:3a2::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:f9:5f:92:2c:fb:7a:e0:4e:2b:ba:53:85:6b:32:51:4c:f5:
b3:88:4b:92:48:44:10:cd:e9:cc:72:d7:64:95:db:6f:09:f0:
b4:b1:79:f6:b3:ce:18:f6:34:67:cd:99:ad:80:ee:88:0f:58:
f5:3c:07:60:d3:c1:c0:37:2f:2d:ae:db:68:d3:f1:d2:58:69:
4c:73:b2:37:89:6c:bb:f7:ab:56:05:91:33:51:42:09:87:aa:
88:ec:bc:42:80:22:5a:d1:e7:48:65:11:26:5a:df:5b:34:6f:
20:64:23:2a:d3:1a:53:e7:bd:8f:08:72:d9:39:1d:35:af:25:
4b:53:61:23:7d:87:41:f0:74:73:93:2b:2c:77:1f:48:0a:0d:
65:b3:92:72:91:01:ba:7f:bc:2f:0a:11:84:de:d4:4c:9a:97:
0b:9e:8d:48:40:2d:98:1f:8e:df:51:a5:1d:c8:11:5d:c7:1d:
2c:ae:16:3c:05:4e:8f:f7:b4:98:8a:c2:25:2a:96:83:28:bc:
76:f4:da:ff:8e:16:7f:d8:ab:b4:06:52:47:5a:ab:32:09:24:
c2:02:59:61:5b:98:a7:65:de:4f:9c:c6:43:06:7e:39:20:49:
09:d6:d1:01:cc:43:d1:ec:53:25:1a:ac:00:29:e2:31:87:38:
2b:9c:67:36
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhQQDAErwiPDfGxNQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MTIyNDE0MDA1M1oXDTI1MDMyNDEzMDA1M1owLzEtMCsGA1UEAxMk
MWE4NWNmMjAtMDRkNy00MzQ2LWI2NmUtMWMyMWUyM2VjN2Q2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFvWYscm9mmuFulkpcbaJ231T0Uu7tQal9Ac
Yzxd2c+Xf0sDIrK72TSA6RgKKKCmK/PYfOMuByHKHp+Djl8LM9QR67hIaHVpVRvf
KxMKQlP00bwwG8PSfzmd+m/YsyQRO9jwasaFolJzkBCTDB+7VxfBQoOKET2809WO
KZVByGCScvE6mXavVn5pZmZX1bnjM1lv6gNkldYKQ1Pheg3QSgf9lnP1ZQHTU3a5
58zS9SHSHlTvBjgKYUY0bvLIn+yMzlhjy930K0l97E06kjK2x5O9Pl2v/KW+sCu0
FdPcvsCTutQ45qFG3qNtL5pCiHw2sbPn/j72xPFE8vCEmnrUhwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGcDBOqUZ6ZmwNn2DkFWRj6eb+tBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDc4YzU5ZmMtZDBmYS0z
NDU0LWE5YTUtM2RiYjYwZTM0NWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOi
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKr5X5Is+3rgTiu6U4VrMlFM9bOIS5JIRBDN6cxy12SV228J8LSx
efazzhj2NGfNma2A7ogPWPU8B2DTwcA3Ly2u22jT8dJYaUxzsjeJbLv3q1YFkTNR
QgmHqojsvEKAIlrR50hlESZa31s0byBkIyrTGlPnvY8Ictk5HTWvJUtTYSN9h0Hw
dHOTKyx3H0gKDWWzknKRAbp/vC8KEYTe1EyalwuejUhALZgfjt9RpR3IEV3HHSyu
FjwFTo/3tJiKwiUqloMovHb02v+OFn/Yq7QGUkdaqzIJJMICWWFbmKdl3k+cxkMG
fjkgSQnW0QHMQ9HsUyUarAAp4jGHOCucZzY=
-----END CERTIFICATE-----
Generated at Sat May 3 19:39:31 2025 by rpki-client