Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f923c228-09d4-3ff8-a079-132926cbd633.roa
File: f923c228-09d4-3ff8-a079-132926cbd633.roa (raw, json)
Hash identifier: vvKnDfdO/8nZ9KRMzKm2T1IeywMwbsldDOhvHCncqeU=
Subject key identifier: 4A:03:9B:D8:9B:C8:7A:22:4F:44:1B:73:24:E9:10:4C:17:0C:04:0D
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819D0135C8E531F7BC862A480
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f923c228-09d4-3ff8-a079-132926cbd633.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 20119
IP address blocks: 2001:470:1c1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:13:5c:8e:53:1f:7b:c8:62:a4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=68e0b6b5-b942-4c3c-a5ea-2570f1ba8655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:62:40:f0:c6:5b:94:fc:5c:c0:0c:5a:19:ec:
8c:91:0e:3e:71:97:7f:ae:d4:ae:e4:5e:7b:5f:d7:
f9:b6:55:4f:c6:53:00:75:46:09:60:e4:bc:67:c1:
b4:34:60:c3:2e:f6:d8:ba:80:41:4e:74:77:7b:3d:
a0:b5:67:0c:fb:4c:cc:55:50:d5:d8:99:14:a1:1e:
9d:84:cc:e0:85:57:01:46:20:04:da:13:47:43:d3:
53:46:04:c4:2d:6b:75:cf:25:fe:19:db:11:66:f0:
c9:19:b7:e1:7f:f0:63:ff:70:11:9c:35:d5:c3:96:
b2:83:86:09:c5:cc:78:e1:d5:1d:75:84:be:d8:50:
ba:18:cd:27:3f:4b:88:be:fe:b4:51:54:35:00:6b:
ec:85:6c:40:aa:8c:64:02:61:d2:3f:55:8f:bb:4d:
06:cb:5c:24:71:9a:d2:1e:b0:24:da:ca:de:6b:16:
de:69:1a:a5:18:06:07:f3:6f:60:52:c1:9f:56:53:
b4:2a:d8:35:8e:e4:6d:be:da:e4:45:03:f0:7d:97:
8c:20:11:62:af:99:d6:a4:e5:a5:bf:88:ae:9e:5a:
73:c3:c0:a9:1a:7d:6d:ff:44:cf:08:ab:46:1d:0d:
b6:07:9f:fd:51:c8:9c:92:fa:3f:06:f6:fd:6d:cb:
90:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:03:9B:D8:9B:C8:7A:22:4F:44:1B:73:24:E9:10:4C:17:0C:04:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f923c228-09d4-3ff8-a079-132926cbd633.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:1c1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:3a:00:bc:de:b6:af:50:88:aa:eb:91:10:f6:ed:a3:d8:76:
49:39:fe:0e:b2:cf:b4:e6:e9:94:46:ac:e3:5a:a2:f9:13:8b:
71:8e:1d:4d:c0:f5:aa:b5:6f:29:94:74:68:94:80:84:27:41:
ba:ad:e2:4c:29:46:0c:61:cd:6b:a0:81:09:89:85:49:0c:2a:
e6:1c:6e:87:c1:0b:2d:3d:15:ac:38:57:f0:45:8a:bf:ed:eb:
a2:d6:a6:dd:44:a3:5b:38:18:5d:6e:53:36:63:f2:a7:8c:f6:
95:91:fd:03:84:f4:db:6d:36:3a:f5:f7:7b:d3:2d:83:7c:70:
5b:4d:dc:6f:16:e3:85:f6:16:72:8a:5c:b3:60:2e:f7:a5:3c:
cb:70:0e:74:8a:f1:54:ed:44:c2:4a:db:dd:16:62:45:a3:4a:
ac:65:e3:59:ca:fd:f7:de:b4:ea:e3:7c:bd:05:83:fe:b0:54:
5d:7e:8a:20:0b:96:64:a7:c5:41:46:17:fc:2b:dd:3c:96:8b:
98:45:d8:27:32:e7:2b:ad:c1:01:b8:e3:12:3a:de:66:c0:1e:
13:03:bb:2a:10:2f:76:1c:04:b0:11:8d:f9:9a:43:73:26:d9:
95:a4:b6:71:0f:ab:db:60:a2:15:48:37:d8:6d:9f:4c:11:a4:
78:64:e8:ba
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgZ0BNcjlMfe8hipIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MTIwNTAyMDAzOVoXDTI1MDMwNTAyMDAzOVowLzEtMCsGA1UEAxMk
NjhlMGI2YjUtYjk0Mi00YzNjLWE1ZWEtMjU3MGYxYmE4NjU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWJA8MZblPxcwAxaGeyMkQ4+cZd/rtSu5F57
X9f5tlVPxlMAdUYJYOS8Z8G0NGDDLvbYuoBBTnR3ez2gtWcM+0zMVVDV2JkUoR6d
hMzghVcBRiAE2hNHQ9NTRgTELWt1zyX+GdsRZvDJGbfhf/Bj/3ARnDXVw5ayg4YJ
xcx44dUddYS+2FC6GM0nP0uIvv60UVQ1AGvshWxAqoxkAmHSP1WPu00Gy1wkcZrS
HrAk2sreaxbeaRqlGAYH829gUsGfVlO0Ktg1juRtvtrkRQPwfZeMIBFir5nWpOWl
v4iunlpzw8CpGn1t/0TPCKtGHQ22B5/9Ucickvo/Bvb9bcuQZQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEoDm9ibyHoiT0QbcyTpEEwXDAQNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZjkyM2MyMjgtMDlkNC0z
ZmY4LWEwNzktMTMyOTI2Y2JkNjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAHB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALE6ALzetq9QiKrrkRD27aPYdkk5/g6yz7Tm6ZRGrONaovkTi3GO
HU3A9aq1bymUdGiUgIQnQbqt4kwpRgxhzWuggQmJhUkMKuYcbofBCy09Faw4V/BF
ir/t66LWpt1Eo1s4GF1uUzZj8qeM9pWR/QOE9NttNjr193vTLYN8cFtN3G8W44X2
FnKKXLNgLvelPMtwDnSK8VTtRMJK290WYkWjSqxl41nK/ffetOrjfL0Fg/6wVF1+
iiALlmSnxUFGF/wr3TyWi5hF2Ccy5yutwQG44xI63mbAHhMDuyoQL3YcBLARjfma
Q3Mm2ZWktnEPq9tgohVIN9htn0wRpHhk6Lo=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:35:53 2025 by rpki-client