Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1ba0206c-61d8-3603-a0e7-78a8359505fc.roa
File: 1ba0206c-61d8-3603-a0e7-78a8359505fc.roa (raw, json)
Hash identifier: r0H0yGNrVCGBIyefH1Jh1Q58lMQ5rbW72/AsaNeoL+4=
Subject key identifier: 73:92:07:11:82:BB:65:0A:75:B4:0C:5E:7F:7F:2F:01:8A:07:92:56
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926C0498C4D787097793F00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1ba0206c-61d8-3603-a0e7-78a8359505fc.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 398266
IP address blocks: 2001:470:3b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:c0:49:8c:4d:78:70:97:79:3f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=1847d024-0d11-4b89-ae0d-c6e41dde286e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3a:8b:56:d3:3c:8d:8d:f7:ec:6b:59:8b:e1:
6a:20:54:f2:d3:32:2a:75:9f:96:6f:8d:01:80:18:
d8:1e:da:10:86:70:24:11:af:f3:a4:85:1b:24:dd:
30:73:90:5c:e1:73:58:6c:88:7d:e6:39:b1:bd:db:
bd:01:9c:09:24:05:dd:48:e8:e7:23:34:1a:6a:57:
3d:c9:b3:66:30:7f:85:61:86:29:17:3c:a1:43:ec:
fc:e0:06:89:bf:6f:bc:64:6c:2e:dc:bf:e1:ab:e4:
db:b8:75:a5:28:a7:1f:8a:9c:9b:04:ab:cf:31:4f:
0d:49:3a:0f:0b:83:79:d9:29:e0:20:fa:37:46:5e:
25:43:38:2b:9e:cf:62:ef:d1:0f:50:76:eb:18:ef:
aa:47:da:37:6c:64:a0:b6:59:2a:38:60:84:81:e2:
51:fb:94:e2:70:71:31:03:94:a3:f8:b5:e9:5b:75:
60:68:26:73:d7:31:bb:5c:69:b5:eb:60:ec:5a:df:
84:6c:02:3c:f0:ac:da:16:60:20:92:c5:79:81:fa:
c4:a9:79:d6:66:dc:1e:c5:ff:76:30:1e:4f:ca:dc:
40:37:02:19:e3:74:51:b7:2e:da:7f:6b:1a:64:de:
bd:51:70:a1:0c:90:40:fd:98:c1:c3:0b:17:ec:c1:
6d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:92:07:11:82:BB:65:0A:75:B4:0C:5E:7F:7F:2F:01:8A:07:92:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1ba0206c-61d8-3603-a0e7-78a8359505fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:3b::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:e2:13:26:b4:0c:2c:69:ef:ee:33:5b:67:71:65:28:7e:c3:
92:58:42:6b:50:af:e7:21:ce:38:43:ae:b4:16:7c:9c:eb:4b:
69:5c:92:6c:5a:26:d0:58:22:fc:a1:54:7c:57:28:f8:ce:79:
fa:70:f2:de:5f:71:f7:06:06:6b:ae:1e:5b:b2:57:a9:cf:c4:
7f:e7:0f:fd:a4:85:f1:e9:50:7f:d2:4f:98:fe:bb:59:6c:9c:
7f:2e:de:b5:63:5b:a0:74:0b:f4:8d:f1:8b:b6:8d:c1:fd:2a:
36:25:6e:99:44:1d:07:88:12:2c:3f:d3:ca:09:d0:96:a3:b4:
5f:db:44:49:58:f7:83:fc:bc:a3:aa:42:d6:cb:44:ea:81:7d:
48:82:71:07:62:4a:fc:11:16:31:e6:04:c7:39:8f:06:d2:d0:
96:51:cc:be:01:00:67:3b:23:1c:f2:9e:00:02:5d:1b:74:42:
d6:9f:60:14:78:d5:36:2a:17:84:76:21:1f:4e:33:f2:d7:7d:
aa:7f:7e:09:6f:2c:7d:7b:0e:a7:0c:35:48:88:c7:d1:9b:9e:
aa:79:1d:39:13:c6:73:96:b6:9a:0e:27:b1:75:a7:63:63:58:
83:c3:e5:af:83:04:66:64:d2:f6:83:59:ed:27:54:e5:d6:69:
80:3d:ba:14
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JsBJjE14cJd5PwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk
MTg0N2QwMjQtMGQxMS00Yjg5LWFlMGQtYzZlNDFkZGUyODZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDqLVtM8jY337GtZi+FqIFTy0zIqdZ+Wb40B
gBjYHtoQhnAkEa/zpIUbJN0wc5Bc4XNYbIh95jmxvdu9AZwJJAXdSOjnIzQaalc9
ybNmMH+FYYYpFzyhQ+z84AaJv2+8ZGwu3L/hq+TbuHWlKKcfipybBKvPMU8NSToP
C4N52SngIPo3Rl4lQzgrns9i79EPUHbrGO+qR9o3bGSgtlkqOGCEgeJR+5TicHEx
A5Sj+LXpW3VgaCZz1zG7XGm162DsWt+EbAI88KzaFmAgksV5gfrEqXnWZtwexf92
MB5PytxANwIZ43RRty7af2saZN69UXChDJBA/ZjBwwsX7MFt5wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHOSBxGCu2UKdbQMXn9/LwGKB5JWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMWJhMDIwNmMtNjFkOC0z
NjAzLWEwZTctNzhhODM1OTUwNWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAA7
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABLiEya0DCxp7+4zW2dxZSh+w5JYQmtQr+chzjhDrrQWfJzrS2lc
kmxaJtBYIvyhVHxXKPjOefpw8t5fcfcGBmuuHluyV6nPxH/nD/2khfHpUH/ST5j+
u1lsnH8u3rVjW6B0C/SN8Yu2jcH9KjYlbplEHQeIEiw/08oJ0JajtF/bRElY94P8
vKOqQtbLROqBfUiCcQdiSvwRFjHmBMc5jwbS0JZRzL4BAGc7IxzyngACXRt0Qtaf
YBR41TYqF4R2IR9OM/LXfap/fglvLH17DqcMNUiIx9Gbnqp5HTkTxnOWtpoOJ7F1
p2NjWIPD5a+DBGZk0vaDWe0nVOXWaYA9uhQ=
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:47:53 2025 by rpki-client