Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/28722eea-4e6d-30fa-8919-b232b78092f2.roa
File: 28722eea-4e6d-30fa-8919-b232b78092f2.roa (raw, json)
Hash identifier: CNF5zy/Ezh0yZuBj5AzZXaSNFswBYf9KKl14bJF6A/A=
Subject key identifier: B6:E0:46:DB:2B:82:85:31:FB:47:33:8D:65:63:88:B8:7D:F9:6B:9A
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926BA10564C86CD6F151700
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/28722eea-4e6d-30fa-8919-b232b78092f2.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 393552
IP address blocks: 2001:470:d5::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:ba:10:56:4c:86:cd:6f:15:17:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=e4bd8e30-53e7-4ab3-9063-3af3aefcac9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d7:3e:db:cc:07:f7:e9:32:1d:37:cc:f6:cc:
bc:4e:02:3d:6d:af:67:d2:f3:ba:27:83:f3:d2:ed:
30:b3:59:0b:16:64:55:b1:52:77:1e:ab:e2:b3:1b:
3c:7f:8f:a6:77:ad:92:af:e5:07:a0:52:23:55:67:
79:ba:5a:bd:f4:ee:06:6d:23:c7:7c:4d:f4:5b:70:
65:81:7a:94:6d:f2:86:f5:7b:88:10:ed:d3:fa:37:
a9:d8:f7:c2:c7:e7:9f:87:e5:19:fa:81:cd:99:49:
1b:c7:37:dd:8d:76:ae:95:2c:ab:6f:5e:43:be:a4:
af:16:c7:66:9c:a3:ba:d7:33:da:59:de:69:b0:6b:
e7:bf:60:e5:30:f5:62:45:8b:4d:2a:8d:f7:4f:34:
bc:f5:d9:c5:18:7d:d3:7a:fd:df:52:9e:22:e5:11:
96:2c:c3:33:30:40:e8:92:f4:c8:1b:b8:60:af:c1:
3d:64:be:42:0f:6b:92:b3:94:50:b0:04:90:a8:57:
f6:46:2b:0c:ca:d7:43:10:f1:90:f2:97:88:98:af:
6c:d5:c1:ba:64:68:e2:95:a8:2c:aa:a4:60:e0:33:
1d:a2:41:ff:f7:b5:c3:a1:e7:82:3a:d3:0e:3b:7d:
51:84:95:a9:ba:6a:5b:76:3c:33:56:8c:ec:e1:b5:
59:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E0:46:DB:2B:82:85:31:FB:47:33:8D:65:63:88:B8:7D:F9:6B:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/28722eea-4e6d-30fa-8919-b232b78092f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:d5::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:07:59:25:3f:ed:5a:89:16:bf:55:aa:00:b7:4b:cd:b0:8a:
57:8e:39:61:71:b2:2f:1b:f4:19:a0:e2:4e:79:cb:72:8a:dc:
6d:5b:db:0e:ab:8e:f6:4d:f9:6f:fe:4c:61:59:11:f1:67:6a:
a6:19:ad:e6:d1:99:f2:7c:fe:75:9d:58:b8:bd:71:41:12:d2:
2a:9c:98:95:18:8d:1a:07:7f:59:4d:d8:a4:56:17:b2:30:f2:
e2:82:52:23:dd:cf:a0:b6:c1:76:1e:0b:6e:a9:cf:bd:0b:fa:
1b:93:07:5e:82:32:6c:86:32:2c:cc:71:33:f9:50:37:cf:fc:
1d:9a:03:20:b3:1c:f5:ce:16:18:77:37:f2:33:8f:2e:0e:3b:
44:6c:4b:9a:4d:08:bf:52:57:b1:42:95:74:cc:eb:68:64:16:
d8:47:37:52:4f:3d:ed:08:d5:4e:42:4b:d8:11:2f:48:ff:8f:
12:a9:a9:a8:f0:2b:dd:e1:11:2a:37:93:be:93:ad:a7:4c:75:
87:15:89:82:5f:de:04:dc:7c:dc:a5:01:83:97:94:e2:70:e9:
eb:b6:24:23:d6:11:e6:d9:80:8d:70:22:4e:cf:a6:9b:3a:cd:
4a:0a:ae:b3:be:27:b1:35:e7:8b:2d:4a:95:68:ab:2a:ab:2d:
4f:21:ec:d7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JroQVkyGzW8VFwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk
ZTRiZDhlMzAtNTNlNy00YWIzLTkwNjMtM2FmM2FlZmNhYzliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNc+28wH9+kyHTfM9sy8TgI9ba9n0vO6J4Pz
0u0ws1kLFmRVsVJ3Hqvisxs8f4+md62Sr+UHoFIjVWd5ulq99O4GbSPHfE30W3Bl
gXqUbfKG9XuIEO3T+jep2PfCx+efh+UZ+oHNmUkbxzfdjXaulSyrb15DvqSvFsdm
nKO61zPaWd5psGvnv2DlMPViRYtNKo33TzS89dnFGH3Tev3fUp4i5RGWLMMzMEDo
kvTIG7hgr8E9ZL5CD2uSs5RQsASQqFf2RisMytdDEPGQ8peImK9s1cG6ZGjilags
qqRg4DMdokH/97XDoeeCOtMOO31RhJWpumpbdjwzVozs4bVZewIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLbgRtsrgoUx+0czjWVjiLh9+WuaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjg3MjJlZWEtNGU2ZC0z
MGZhLTg5MTktYjIzMmI3ODA5MmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcADV
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIoHWSU/7VqJFr9VqgC3S82wileOOWFxsi8b9Bmg4k55y3KK3G1b
2w6rjvZN+W/+TGFZEfFnaqYZrebRmfJ8/nWdWLi9cUES0iqcmJUYjRoHf1lN2KRW
F7Iw8uKCUiPdz6C2wXYeC26pz70L+huTB16CMmyGMizMcTP5UDfP/B2aAyCzHPXO
Fhh3N/Izjy4OO0RsS5pNCL9SV7FClXTM62hkFthHN1JPPe0I1U5CS9gRL0j/jxKp
qajwK93hESo3k76TradMdYcViYJf3gTcfNylAYOXlOJw6eu2JCPWEebZgI1wIk7P
pps6zUoKrrO+J7E154stSpVoqyqrLU8h7Nc=
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:54:04 2025 by rpki-client