Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2b2176fd-7080-397f-90a9-c8ceb7e2ad2d.roa
File: 2b2176fd-7080-397f-90a9-c8ceb7e2ad2d.roa (raw, json)
Hash identifier: c0a/nFMF6nlqYX2ERjMGcJ24xb14OM82QPHaGWa3Xic=
Subject key identifier: B2:2B:F6:21:5F:1C:36:7F:DD:17:03:0D:E2:5C:FC:1F:CF:8C:F0:72
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926C5C9ECDB2A6873386E20
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2b2176fd-7080-397f-90a9-c8ceb7e2ad2d.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 31769
IP address blocks: 2001:470:1af::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:c5:c9:ec:db:2a:68:73:38:6e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=f4585ca8-4755-48fa-849c-3d8d58fd1c5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:29:49:3d:b1:41:f3:08:cf:d9:e7:df:34:79:
d9:af:73:dc:66:96:ef:87:d9:c0:80:ba:77:b4:fd:
52:05:2e:1c:b2:32:af:cf:ba:c6:9a:bb:6d:51:5c:
eb:4e:e8:f7:08:69:3f:35:9b:0d:c9:d5:11:f9:44:
ab:12:21:8a:0a:12:9c:d2:da:b9:b4:0b:26:d3:35:
60:24:e9:28:31:43:6c:2d:5b:fa:b0:d3:33:de:b1:
7c:a6:dc:8d:b4:05:6c:25:9c:fb:69:79:68:e1:1e:
aa:6c:12:6e:14:73:02:ea:27:b5:13:03:d9:6b:4d:
73:c3:8e:68:f6:36:4d:52:68:26:46:92:e4:90:9b:
de:57:55:a4:55:87:0f:ac:51:48:f9:84:52:2a:07:
a5:cc:2e:6e:81:cc:a1:e2:50:fd:d9:32:63:7d:e7:
4a:a8:b8:0e:63:bf:5f:94:8a:b7:3a:7b:6d:46:a0:
e1:64:b7:1f:28:bf:8f:5b:af:84:96:f0:3f:08:f9:
46:3d:e5:04:8e:af:2e:c5:af:81:c8:8c:b0:05:a5:
b4:92:ea:e8:f5:44:a3:eb:d8:d8:6f:c4:d0:b2:2d:
a5:cf:64:86:16:27:24:a8:0a:3c:0e:55:2a:93:7f:
f6:85:3e:d3:17:b5:a7:da:36:b0:e0:f5:bf:34:93:
c9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2B:F6:21:5F:1C:36:7F:DD:17:03:0D:E2:5C:FC:1F:CF:8C:F0:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2b2176fd-7080-397f-90a9-c8ceb7e2ad2d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:1af::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:a6:65:14:5f:6f:fc:46:02:79:7f:4e:cf:0c:39:23:d4:9c:
9b:b9:5a:1e:ff:5d:e2:45:bf:e1:b6:68:76:e4:d8:c4:12:30:
10:85:23:6b:65:ac:2b:84:a4:c6:27:32:3b:5a:00:24:ee:ee:
d7:28:b8:69:88:41:89:c7:f2:e2:b3:cf:1a:23:ea:a5:d1:55:
22:a0:a1:7a:57:a6:3e:be:75:32:23:95:7b:a0:36:98:3d:17:
b3:33:92:c1:54:a7:b9:ff:a0:2d:e0:d7:93:09:1d:4a:92:e3:
d1:d5:84:cb:28:95:7c:a7:5a:e6:f6:e4:24:b3:06:d8:8a:e9:
03:1e:01:39:6b:54:18:8d:91:c3:58:3f:f7:85:eb:a7:d5:47:
a1:b3:e5:6f:71:ed:74:2c:5b:bb:bf:44:b9:0a:29:19:0f:70:
57:a0:08:a2:a4:d6:ba:8d:3b:ab:5f:8f:b4:87:d1:9f:18:45:
08:3c:5f:74:c0:99:83:63:e4:6c:34:cc:e7:f7:45:48:3a:e7:
e2:81:62:33:2b:df:23:bb:08:6d:f9:68:18:f6:87:6f:96:e9:
4d:8a:e3:86:fa:d0:3f:4d:90:e9:3e:c5:4a:04:db:cc:9d:ab:
80:7c:29:43:83:e4:d3:5b:79:95:6f:b4:2d:36:a0:c9:79:92:
4d:f5:49:68
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JsXJ7NsqaHM4biAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk
ZjQ1ODVjYTgtNDc1NS00OGZhLTg0OWMtM2Q4ZDU4ZmQxYzVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgClJPbFB8wjP2effNHnZr3PcZpbvh9nAgLp3
tP1SBS4csjKvz7rGmrttUVzrTuj3CGk/NZsNydUR+USrEiGKChKc0tq5tAsm0zVg
JOkoMUNsLVv6sNMz3rF8ptyNtAVsJZz7aXlo4R6qbBJuFHMC6ie1EwPZa01zw45o
9jZNUmgmRpLkkJveV1WkVYcPrFFI+YRSKgelzC5ugcyh4lD92TJjfedKqLgOY79f
lIq3OnttRqDhZLcfKL+PW6+ElvA/CPlGPeUEjq8uxa+ByIywBaW0kuro9USj69jY
b8TQsi2lz2SGFickqAo8DlUqk3/2hT7TF7Wn2jaw4PW/NJPJVwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLIr9iFfHDZ/3RcDDeJc/B/PjPByMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMmIyMTc2ZmQtNzA4MC0z
OTdmLTkwYTktYzhjZWI3ZTJhZDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAGv
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJamZRRfb/xGAnl/Ts8MOSPUnJu5Wh7/XeJFv+G2aHbk2MQSMBCF
I2tlrCuEpMYnMjtaACTu7tcouGmIQYnH8uKzzxoj6qXRVSKgoXpXpj6+dTIjlXug
Npg9F7MzksFUp7n/oC3g15MJHUqS49HVhMsolXynWub25CSzBtiK6QMeATlrVBiN
kcNYP/eF66fVR6Gz5W9x7XQsW7u/RLkKKRkPcFegCKKk1rqNO6tfj7SH0Z8YRQg8
X3TAmYNj5Gw0zOf3RUg65+KBYjMr3yO7CG35aBj2h2+W6U2K44b60D9NkOk+xUoE
28ydq4B8KUOD5NNbeZVvtC02oMl5kk31SWg=
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:53:12 2025 by rpki-client