Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1f0bcff4-5b6a-3404-8846-e4f80b1c3fa1.roa
File: 1f0bcff4-5b6a-3404-8846-e4f80b1c3fa1.roa (raw, json)
Hash identifier: QBD9AN7OP4IbyWWcs/caoQZbVGNQjDhbVlug0FBguIk=
Subject key identifier: 08:4E:E3:2A:63:52:9F:61:B9:36:B7:E3:29:A2:6F:FE:2F:C2:CC:57
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584958029BD48FDF18D93198C540
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1f0bcff4-5b6a-3404-8846-e4f80b1c3fa1.roa
Signing time: Sat 29 Mar 2025 01:30:13 +0000
ROA not before: Sat 29 Mar 2025 01:30:13 +0000
ROA not after: Fri 27 Jun 2025 01:30:13 +0000
asID: 22690
IP address blocks: 2001:470:3d8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:58:02:9b:d4:8f:df:18:d9:31:98:c5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 29 01:30:13 2025 GMT
Not After : Jun 27 01:30:13 2025 GMT
Subject: CN=8b393495-3ed4-47de-9cda-ed91b2e61200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cb:d4:3f:a2:5d:ab:6f:f8:70:35:02:70:de:
18:94:40:24:27:3d:c3:6c:6c:ae:b9:f4:9a:60:6c:
f8:c4:ae:0c:30:ad:19:61:8a:74:81:bd:b6:84:8e:
68:81:ba:b6:08:0c:27:4d:0c:8b:74:20:f5:44:cb:
1b:f1:97:78:0d:c0:3e:5a:15:bf:6f:51:8f:be:32:
59:81:36:18:61:dc:6f:e3:ed:07:1f:0b:29:7b:75:
3f:50:6a:4c:21:8d:7e:25:dc:8e:5d:85:8e:49:01:
1e:ff:96:40:d8:38:2d:1e:c4:5b:3f:13:34:0c:de:
d4:6f:c5:8a:da:5a:fd:67:5e:a5:8f:97:94:3b:06:
76:89:6f:77:55:33:8b:1a:13:06:4f:2d:39:ea:e0:
ab:e8:81:f0:be:1f:4d:60:a4:75:29:31:f7:b6:93:
fc:45:6f:35:e8:7b:94:c0:70:5b:d7:dc:b9:2f:8d:
af:ec:d7:ca:76:2b:0b:2a:f8:58:67:60:58:92:6c:
46:1a:c4:b0:91:79:79:12:0e:60:09:f2:32:39:59:
57:14:17:f4:92:58:20:17:43:6b:de:c7:2a:e1:b0:
f6:5d:e9:5a:f2:cd:0b:91:78:40:6b:7f:48:c6:1a:
8a:c2:09:75:df:5b:b1:bb:f7:4f:63:03:6f:cd:8e:
86:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:4E:E3:2A:63:52:9F:61:B9:36:B7:E3:29:A2:6F:FE:2F:C2:CC:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1f0bcff4-5b6a-3404-8846-e4f80b1c3fa1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:3d8::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:c7:04:35:57:bf:da:95:a4:d3:f3:32:4b:76:e3:7a:f5:c2:
5f:0d:27:94:1c:18:b2:8d:da:89:1f:04:62:79:a8:b1:42:d2:
46:30:32:a6:02:cc:ab:43:e3:63:c2:7d:1c:d9:66:a9:ae:a5:
7c:98:ce:98:e0:04:71:fe:5a:13:32:c8:b6:dc:fc:f0:57:dd:
b4:85:82:9a:af:f5:8f:e8:0a:82:f2:7d:6f:f1:65:26:35:a1:
60:3b:c9:db:2d:08:cb:d0:21:a7:bd:87:83:a0:a7:09:0f:24:
be:11:df:b2:07:f0:b4:b5:85:32:6b:12:a2:e8:81:e1:1c:38:
34:8b:44:e2:11:45:b8:55:ec:b5:84:4e:33:2c:39:96:8c:4f:
44:6b:4c:3b:68:95:f9:b7:d2:69:26:ac:cb:47:ec:f7:9d:8a:
ee:bf:6f:f5:5d:59:38:0a:8b:b6:5f:15:cc:41:84:71:b0:41:
39:43:e5:16:e7:34:d7:d0:a3:7d:6b:b6:f7:0a:00:a9:3a:ea:
b9:b7:c8:0e:3f:72:ef:2a:4f:f2:36:5e:db:ea:6d:0a:79:29:
be:17:2a:33:ea:0e:68:a9:56:b0:31:01:d2:8f:05:d9:a4:d0:
26:8b:44:e4:42:64:5f:a1:1e:4a:76:e1:a1:0c:0b:54:22:bc:
55:74:55:f2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElYApvUj98Y2TGYxUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDMyOTAxMzAxM1oXDTI1MDYyNzAxMzAxM1owLzEtMCsGA1UEAxMk
OGIzOTM0OTUtM2VkNC00N2RlLTljZGEtZWQ5MWIyZTYxMjAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMvUP6Jdq2/4cDUCcN4YlEAkJz3DbGyuufSa
YGz4xK4MMK0ZYYp0gb22hI5ogbq2CAwnTQyLdCD1RMsb8Zd4DcA+WhW/b1GPvjJZ
gTYYYdxv4+0HHwspe3U/UGpMIY1+JdyOXYWOSQEe/5ZA2DgtHsRbPxM0DN7Ub8WK
2lr9Z16lj5eUOwZ2iW93VTOLGhMGTy056uCr6IHwvh9NYKR1KTH3tpP8RW816HuU
wHBb19y5L42v7NfKdisLKvhYZ2BYkmxGGsSwkXl5Eg5gCfIyOVlXFBf0klggF0Nr
3scq4bD2Xela8s0LkXhAa39IxhqKwgl131uxu/dPYwNvzY6GkwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAhO4ypjUp9huTa34ymib/4vwsxXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMWYwYmNmZjQtNWI2YS0z
NDA0LTg4NDYtZTRmODBiMWMzZmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPY
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEPHBDVXv9qVpNPzMkt243r1wl8NJ5QcGLKN2okfBGJ5qLFC0kYw
MqYCzKtD42PCfRzZZqmupXyYzpjgBHH+WhMyyLbc/PBX3bSFgpqv9Y/oCoLyfW/x
ZSY1oWA7ydstCMvQIae9h4OgpwkPJL4R37IH8LS1hTJrEqLogeEcODSLROIRRbhV
7LWETjMsOZaMT0RrTDtolfm30mkmrMtH7Pediu6/b/VdWTgKi7ZfFcxBhHGwQTlD
5RbnNNfQo31rtvcKAKk66rm3yA4/cu8qT/I2XtvqbQp5Kb4XKjPqDmipVrAxAdKP
Bdmk0CaLRORCZF+hHkp24aEMC1QivFV0VfI=
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:49:36 2025 by rpki-client