Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/22845774-85e2-3a81-8e7e-f042762050ff.roa
File: 22845774-85e2-3a81-8e7e-f042762050ff.roa (raw, json)
Hash identifier: 3qUGQvLC40GBgpZamx01yZ7IMtrNXZMhVDMDGy/MgZ8=
Subject key identifier: DD:2C:B9:00:40:B2:69:84:20:07:A9:1C:D0:87:CD:D1:50:FB:51:13
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926E4ECFB2B18FF99B335C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/22845774-85e2-3a81-8e7e-f042762050ff.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 7480
IP address blocks: 2001:470:299::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:e4:ec:fb:2b:18:ff:99:b3:35:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=040e5713-62ef-4be7-867e-97261456f42f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:40:e2:19:0e:bb:6e:5a:5f:4c:80:56:d5:98:
26:d2:5e:cb:ae:ed:f9:14:04:34:bc:82:8b:9e:db:
22:85:c9:21:b4:18:51:8d:8e:34:dd:a0:5f:e2:16:
17:d0:85:ac:d3:62:03:a1:c6:30:da:87:1f:5f:8a:
90:1e:48:ac:de:17:ce:57:c9:25:81:13:60:5c:4f:
d5:f5:7b:53:0a:74:34:86:70:f4:98:07:a7:01:32:
3d:7d:c6:69:7d:d7:f4:2b:04:c2:f6:66:96:41:91:
01:17:5e:36:3c:49:ec:12:26:fe:6d:5c:da:ff:12:
73:cf:42:2c:03:0a:98:27:57:30:d4:cf:af:91:4b:
04:f2:2b:e6:59:41:83:35:5f:7a:39:db:29:2f:08:
80:b0:f4:74:64:66:8b:f7:5e:5c:d1:1d:1e:ee:d1:
51:a2:8d:f6:9c:b1:25:d4:90:dc:bb:a9:0e:45:85:
67:42:9c:bf:97:0f:55:07:39:60:03:53:d0:cf:ca:
45:e8:dc:4e:19:9b:aa:2a:ca:77:89:0c:2a:96:aa:
47:4b:e5:96:44:01:23:e2:05:ed:c2:97:da:d1:3e:
1b:8f:18:e0:e5:8d:af:bb:7a:36:84:75:87:41:0f:
c7:20:06:c3:2a:cc:60:9f:d0:9c:a8:bb:6d:42:5c:
68:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:2C:B9:00:40:B2:69:84:20:07:A9:1C:D0:87:CD:D1:50:FB:51:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/22845774-85e2-3a81-8e7e-f042762050ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:299::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:be:a5:e8:80:cc:41:fc:7e:20:80:cc:5f:23:47:34:58:42:
11:e9:cb:20:a8:a1:86:83:da:2c:c4:75:59:d1:98:59:92:39:
a0:f2:12:11:23:bd:e6:59:3c:a6:5a:a9:1c:61:a7:f4:0b:3c:
e4:a9:48:1a:92:d8:68:fe:86:a9:7a:2a:73:f2:c0:eb:cc:8a:
65:b0:47:03:90:7a:fc:36:d5:75:e4:43:fc:05:be:ad:74:54:
17:9c:ed:b3:2a:20:74:08:98:af:4b:97:e3:d6:46:dc:c6:16:
8d:f6:20:86:21:db:69:9a:67:99:7b:16:7a:5b:87:98:b7:ab:
99:94:40:1d:3c:c6:48:95:d6:e5:32:65:34:cd:53:5a:1c:ab:
49:cd:91:02:06:10:4a:36:9d:ad:a3:92:bb:20:80:2a:4a:bb:
ef:ad:2f:59:88:df:50:83:17:2c:4a:bf:6e:25:67:8c:d8:01:
17:4b:78:62:25:66:b5:96:fb:69:b5:f0:1f:fc:8f:7f:49:64:
cb:80:3a:9c:e2:d7:38:2a:31:19:54:d1:c6:ea:d0:c8:2e:5d:
ab:64:2c:11:3b:0b:0d:fc:74:4a:56:9b:de:05:97:87:fd:71:
88:44:92:3d:c6:0c:1a:1e:eb:87:01:d1:6a:f8:d2:5b:04:12:
17:4e:05:34
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JuTs+ysY/5mzNcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk
MDQwZTU3MTMtNjJlZi00YmU3LTg2N2UtOTcyNjE0NTZmNDJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEDiGQ67blpfTIBW1Zgm0l7Lru35FAQ0vIKL
ntsihckhtBhRjY403aBf4hYX0IWs02IDocYw2ocfX4qQHkis3hfOV8klgRNgXE/V
9XtTCnQ0hnD0mAenATI9fcZpfdf0KwTC9maWQZEBF142PEnsEib+bVza/xJzz0Is
AwqYJ1cw1M+vkUsE8ivmWUGDNV96OdspLwiAsPR0ZGaL915c0R0e7tFRoo32nLEl
1JDcu6kORYVnQpy/lw9VBzlgA1PQz8pF6NxOGZuqKsp3iQwqlqpHS+WWRAEj4gXt
wpfa0T4bjxjg5Y2vu3o2hHWHQQ/HIAbDKsxgn9CcqLttQlxorwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFN0suQBAsmmEIAepHNCHzdFQ+1ETMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjI4NDU3NzQtODVlMi0z
YTgxLThlN2UtZjA0Mjc2MjA1MGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKZ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFe+peiAzEH8fiCAzF8jRzRYQhHpyyCooYaD2izEdVnRmFmSOaDy
EhEjveZZPKZaqRxhp/QLPOSpSBqS2Gj+hql6KnPywOvMimWwRwOQevw21XXkQ/wF
vq10VBec7bMqIHQImK9Ll+PWRtzGFo32IIYh22maZ5l7Fnpbh5i3q5mUQB08xkiV
1uUyZTTNU1ocq0nNkQIGEEo2na2jkrsggCpKu++tL1mI31CDFyxKv24lZ4zYARdL
eGIlZrWW+2m18B/8j39JZMuAOpzi1zgqMRlU0cbq0MguXatkLBE7Cw38dEpWm94F
l4f9cYhEkj3GDBoe64cB0Wr40lsEEhdOBTQ=
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:56:46 2025 by rpki-client