Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ff4ae1ca-432a-3b79-9d34-47f76c009d27.roa
File: ff4ae1ca-432a-3b79-9d34-47f76c009d27.roa (raw, json)
Hash identifier: IYtxz9XbD/YfKeV5q4MyG6pLwkPPbYeWvXe/Nd6/Sss=
Subject key identifier: 01:88:21:C8:A6:6D:B9:B1:8C:F4:AB:3D:99:0A:1C:37:BF:4D:4C:3B
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858484D757F7FF1B8C55F253D8340
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ff4ae1ca-432a-3b79-9d34-47f76c009d27.roa
Signing time: Mon 23 Dec 2024 14:00:51 +0000
ROA not before: Mon 23 Dec 2024 14:00:51 +0000
ROA not after: Sun 23 Mar 2025 13:00:51 +0000
asID: 150158
IP address blocks: 2001:470:39f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4d:75:7f:7f:f1:b8:c5:5f:25:3d:83:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 23 14:00:51 2024 GMT
Not After : Mar 23 13:00:51 2025 GMT
Subject: CN=e078daa5-454e-45b7-9dec-64b2d0250939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:12:75:16:a8:9e:e1:d7:df:a0:df:e5:f3:5c:
5d:95:84:45:bc:ae:65:8a:51:ab:a6:f9:13:2d:02:
7c:d5:ff:eb:6f:35:eb:2d:80:c6:de:aa:07:cb:cb:
fd:99:da:6a:4a:6a:37:f8:98:66:c4:46:95:4c:21:
75:7a:fc:e2:09:bc:b6:6e:e0:ad:ae:1c:e4:69:8f:
42:ad:11:3b:12:73:bb:f8:a0:e2:5a:bc:6d:87:45:
6c:b7:d2:ee:b2:f2:8e:77:e1:78:50:2d:0f:3f:8a:
ac:41:f5:d6:50:1c:e0:11:52:e8:75:bc:b7:34:3f:
e1:34:ff:db:f1:db:03:25:2a:c3:9a:c1:d9:3f:66:
10:82:9b:86:0f:1d:c9:ce:a3:6c:86:60:1d:55:4d:
87:17:3a:89:1c:28:f8:f0:ae:c0:ae:5f:ee:d7:e2:
77:ff:ac:ce:c6:e5:f8:c0:7a:03:4d:f5:12:ed:ce:
0e:91:f4:8c:ac:b2:de:62:5c:e2:36:8c:4d:9c:bf:
23:e9:d2:e5:6d:ac:f0:f6:63:c0:d9:95:3e:b9:c9:
9e:f4:75:71:f4:30:e1:c1:73:64:fc:e8:6e:00:98:
e4:6f:56:53:bd:64:cc:bd:82:81:e2:df:dc:3c:85:
60:a4:8b:43:aa:6f:31:13:bf:11:d3:9a:9d:d4:0b:
5b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:88:21:C8:A6:6D:B9:B1:8C:F4:AB:3D:99:0A:1C:37:BF:4D:4C:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ff4ae1ca-432a-3b79-9d34-47f76c009d27.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:39f::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:9d:2f:ee:76:26:dc:45:b1:d3:7d:57:91:a4:9a:c2:66:39:
af:d2:fd:43:83:d1:6d:e5:59:70:e8:c3:8c:e5:d3:91:21:d8:
d4:cd:a6:87:17:ce:92:b2:92:5e:36:ce:8a:99:33:46:41:ea:
a2:1b:61:33:3d:09:8d:bb:a2:cd:f3:51:68:4c:02:a9:b9:5f:
b9:d0:db:6b:bc:5a:4b:c6:65:6c:65:a7:37:aa:28:74:64:a7:
49:26:d6:85:55:75:1c:3a:f5:df:48:3b:48:39:35:05:1e:f5:
de:4a:3f:ce:1a:3d:fd:d2:ce:af:db:d4:02:f1:05:63:ca:4d:
ce:79:fe:b0:a8:01:60:14:bc:ea:07:23:5e:cf:d7:71:73:ef:
9a:12:ad:5d:22:8e:ce:9b:bd:e0:b7:15:97:4d:5d:65:f7:31:
d5:b9:3c:3a:38:65:0e:23:2c:f9:5f:cc:7f:5d:80:12:eb:4b:
a0:fd:87:1c:dc:ae:98:f6:ee:ba:65:aa:2a:b6:d9:e3:a7:b3:
ff:5a:a3:cf:7b:ce:fe:3e:95:f7:6d:ac:07:4d:9e:39:46:86:
b8:3f:75:60:d4:9f:59:5c:ff:ec:a4:7c:1f:56:53:c4:d4:38:
f7:18:74:94:c5:94:e4:ff:4b:27:51:4e:ae:bd:97:a9:b4:80:
d4:ba:4e:f4
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhNdX9/8bjFXyU9g0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MTIyMzE0MDA1MVoXDTI1MDMyMzEzMDA1MVowLzEtMCsGA1UEAxMk
ZTA3OGRhYTUtNDU0ZS00NWI3LTlkZWMtNjRiMmQwMjUwOTM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohJ1Fqie4dffoN/l81xdlYRFvK5lilGrpvkT
LQJ81f/rbzXrLYDG3qoHy8v9mdpqSmo3+JhmxEaVTCF1evziCby2buCtrhzkaY9C
rRE7EnO7+KDiWrxth0Vst9LusvKOd+F4UC0PP4qsQfXWUBzgEVLodby3ND/hNP/b
8dsDJSrDmsHZP2YQgpuGDx3JzqNshmAdVU2HFzqJHCj48K7Arl/u1+J3/6zOxuX4
wHoDTfUS7c4OkfSMrLLeYlziNoxNnL8j6dLlbazw9mPA2ZU+ucme9HVx9DDhwXNk
/OhuAJjkb1ZTvWTMvYKB4t/cPIVgpItDqm8xE78R05qd1Atb5wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAGIIcimbbmxjPSrPZkKHDe/TUw7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZmY0YWUxY2EtNDMyYS0z
Yjc5LTlkMzQtNDdmNzZjMDA5ZDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOf
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEidL+52JtxFsdN9V5GkmsJmOa/S/UOD0W3lWXDow4zl05Eh2NTN
pocXzpKykl42zoqZM0ZB6qIbYTM9CY27os3zUWhMAqm5X7nQ22u8WkvGZWxlpzeq
KHRkp0km1oVVdRw69d9IO0g5NQUe9d5KP84aPf3Szq/b1ALxBWPKTc55/rCoAWAU
vOoHI17P13Fz75oSrV0ijs6bveC3FZdNXWX3MdW5PDo4ZQ4jLPlfzH9dgBLrS6D9
hxzcrpj27rplqiq22eOns/9ao897zv4+lfdtrAdNnjlGhrg/dWDUn1lc/+ykfB9W
U8TUOPcYdJTFlOT/SydRTq69l6m0gNS6TvQ=
-----END CERTIFICATE-----
Generated at Fri May 9 18:00:02 2025 by rpki-client