Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ff8d12c7-da9a-3c02-9857-99964f26a6a9.roa
File: ff8d12c7-da9a-3c02-9857-99964f26a6a9.roa (raw, json)
Hash identifier: 7w07ay/6IENFZvue3gDfRye8Yd0rcElr8a8wdGVeJMw=
Subject key identifier: CC:FE:39:94:9A:E0:D4:5C:DB:CB:61:F8:D8:15:76:F3:98:63:48:F8
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584858A042AF79D0679739A92D00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ff8d12c7-da9a-3c02-9857-99964f26a6a9.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 400228
IP address blocks: 2001:470:3a5::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:42:af:79:d0:67:97:39:a9:2d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=99785405-8f9f-410c-9e3a-0bcf35951bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b0:36:96:9d:b0:7e:fa:b1:00:cc:e9:57:77:
80:ea:0e:33:0e:0a:08:9a:7d:36:ba:e1:15:94:3a:
9f:a3:97:b7:0f:f7:75:6b:9e:30:4f:db:54:ec:ca:
2a:7f:f7:f0:bd:2f:7a:8a:f3:90:f4:d1:d7:97:9d:
49:fa:01:31:5e:e5:6e:42:d5:ee:32:8c:7b:ec:c9:
59:ee:52:d0:02:0a:f6:a1:cf:dd:3c:b7:f9:a3:61:
25:3e:5c:7d:66:4d:36:e6:95:1f:3d:bc:a2:e6:bf:
10:38:c1:78:f4:a0:bc:0b:f6:f8:69:c7:6c:af:07:
c4:61:53:49:84:8a:79:d7:14:52:a6:5e:7e:3d:c9:
b0:78:18:f0:67:d7:2b:8a:30:6e:93:92:72:f4:70:
3f:10:28:43:27:f7:56:56:8f:c0:00:b5:c3:51:aa:
68:d7:63:7a:fc:34:0a:38:6c:7b:25:89:04:2e:3e:
75:98:db:55:cd:9a:08:ab:c8:62:d2:52:bc:ea:4a:
43:52:76:19:db:38:fe:3b:39:15:67:81:f6:4a:b1:
04:25:e5:0f:05:5f:53:ac:7f:78:8c:de:77:07:bb:
06:0e:e7:ac:d6:19:8d:a2:cb:46:9e:c7:91:b3:30:
88:7e:61:73:ed:05:2b:04:d8:76:89:0f:97:6c:c3:
a6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:FE:39:94:9A:E0:D4:5C:DB:CB:61:F8:D8:15:76:F3:98:63:48:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ff8d12c7-da9a-3c02-9857-99964f26a6a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:3a5::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:54:f7:7e:fd:91:3b:91:d6:66:95:68:ea:48:b3:55:38:6a:
a5:26:11:3b:01:c1:85:6e:c7:2f:ea:3d:e8:57:dc:c2:ab:56:
27:0e:4e:be:ca:c3:d2:a3:4d:52:fd:0e:ad:8b:cf:91:1e:ea:
ae:be:a2:8c:64:11:ce:71:a4:1f:cf:12:66:f2:52:f0:23:c6:
75:b4:39:31:99:7c:b8:61:17:32:50:c2:37:f9:f1:03:6b:d2:
89:3f:3c:81:39:a1:b2:41:f1:de:a5:d8:f3:22:3b:87:7a:b3:
8c:ae:58:c4:6b:2a:00:b5:66:bb:fc:f4:c4:4e:68:b4:9d:a6:
ca:d9:8e:23:e1:6c:29:fd:b2:d0:b2:a6:bb:5d:b0:c2:d9:02:
af:58:48:c6:28:22:49:4f:4d:06:73:8f:19:9d:6f:29:f9:05:
0a:ff:89:7b:ab:dd:91:17:e0:3f:ab:2d:d5:53:84:1d:22:2d:
03:ea:1b:64:13:c5:c0:c9:6d:c8:15:86:59:62:fe:40:90:73:
8a:c9:09:fe:5d:f2:e8:75:eb:c8:2f:fe:af:dd:4c:83:94:5b:
63:ab:a8:b5:e6:3d:9a:94:fc:80:fe:b3:09:d1:92:cc:23:00:
16:fe:bb:94:f1:2e:83:32:43:6d:46:8d:56:07:5f:dc:b0:d7:
63:34:fd:c4
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhYoEKvedBnlzmpLQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MTIyNzE0MDA1MloXDTI1MDMyNzEzMDA1MlowLzEtMCsGA1UEAxMk
OTk3ODU0MDUtOGY5Zi00MTBjLTllM2EtMGJjZjM1OTUxYmM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7A2lp2wfvqxAMzpV3eA6g4zDgoImn02uuEV
lDqfo5e3D/d1a54wT9tU7Moqf/fwvS96ivOQ9NHXl51J+gExXuVuQtXuMox77MlZ
7lLQAgr2oc/dPLf5o2ElPlx9Zk025pUfPbyi5r8QOMF49KC8C/b4acdsrwfEYVNJ
hIp51xRSpl5+PcmweBjwZ9crijBuk5Jy9HA/EChDJ/dWVo/AALXDUapo12N6/DQK
OGx7JYkELj51mNtVzZoIq8hi0lK86kpDUnYZ2zj+OzkVZ4H2SrEEJeUPBV9TrH94
jN53B7sGDues1hmNostGnseRszCIfmFz7QUrBNh2iQ+XbMOmRwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMz+OZSa4NRc28th+NgVdvOYY0j4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZmY4ZDEyYzctZGE5YS0z
YzAyLTk4NTctOTk5NjRmMjZhNmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOl
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJ5U9379kTuR1maVaOpIs1U4aqUmETsBwYVuxy/qPehX3MKrVicO
Tr7Kw9KjTVL9Dq2Lz5Ee6q6+ooxkEc5xpB/PEmbyUvAjxnW0OTGZfLhhFzJQwjf5
8QNr0ok/PIE5obJB8d6l2PMiO4d6s4yuWMRrKgC1Zrv89MROaLSdpsrZjiPhbCn9
stCyprtdsMLZAq9YSMYoIklPTQZzjxmdbyn5BQr/iXur3ZEX4D+rLdVThB0iLQPq
G2QTxcDJbcgVhlli/kCQc4rJCf5d8uh168gv/q/dTIOUW2OrqLXmPZqU/ID+swnR
kswjABb+u5TxLoMyQ21GjVYHX9yw12M0/cQ=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:38:36 2025 by rpki-client