Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3b7188ad-ff41-35c7-9712-db1897af0ca8.roa
File: 3b7188ad-ff41-35c7-9712-db1897af0ca8.roa (raw, json)
Hash identifier: pnjkyLoG9OkXOMc6v/uI67lZA6jjIB6MN2vJfTmUR8s=
Subject key identifier: 04:D6:CA:A0:2F:26:9F:AB:AF:56:EA:95:25:F8:C9:0A:14:9E:02:4E
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858492F87C33B64114423814A3D00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3b7188ad-ff41-35c7-9712-db1897af0ca8.roa
Signing time: Fri 14 Mar 2025 13:30:22 +0000
ROA not before: Fri 14 Mar 2025 13:30:22 +0000
ROA not after: Thu 12 Jun 2025 13:30:22 +0000
asID: 34187
IP address blocks: 2001:470:427::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2f:87:c3:3b:64:11:44:23:81:4a:3d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 14 13:30:22 2025 GMT
Not After : Jun 12 13:30:22 2025 GMT
Subject: CN=3798e87c-1eb7-44db-b538-bc398005c338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:cf:85:c8:2a:e3:0c:9b:2c:65:d4:cc:b9:e9:
e9:30:a3:90:bf:29:cd:47:19:01:50:5a:fc:e1:4b:
d4:74:77:aa:6e:c1:bc:84:95:a6:8e:c3:80:88:b2:
4d:9d:03:92:1a:e7:8e:e2:48:9d:de:68:ea:7c:a8:
75:cd:f9:5f:8d:ce:fc:ee:0d:1c:6a:63:85:ff:4d:
84:f1:74:85:1c:b8:3c:11:63:be:ae:6c:d0:f3:e2:
f2:4c:de:32:db:86:f2:65:a5:97:53:d8:ff:b6:db:
e0:c0:a9:17:04:37:d9:f1:0c:1e:50:5c:f9:6a:fd:
80:f2:ec:60:10:69:e0:7c:38:3b:0c:ea:61:73:fa:
ce:1b:53:ed:d0:f6:cd:79:f5:36:1b:9f:87:2e:00:
73:2a:c8:24:4b:4a:25:f9:6b:da:a0:98:9d:80:4f:
ed:7d:0d:2e:a0:65:1b:d5:17:77:1f:d4:be:fb:d9:
21:84:ae:67:4c:2d:2b:11:d9:e0:bd:4d:c6:69:c4:
1e:5c:d5:ca:b1:44:f9:4d:b9:7f:6e:a3:08:6f:16:
03:8c:a0:99:68:d3:b9:a0:89:9a:65:ee:60:d4:a4:
a5:97:a2:c9:db:de:1f:c4:0e:05:d3:a8:e1:b3:e7:
8e:8f:f4:8b:84:bc:95:2c:ad:01:3a:59:ae:43:18:
c8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D6:CA:A0:2F:26:9F:AB:AF:56:EA:95:25:F8:C9:0A:14:9E:02:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3b7188ad-ff41-35c7-9712-db1897af0ca8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:427::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:45:ee:3e:73:d5:e4:e8:36:24:48:52:44:5c:2b:fd:2b:83:
b7:7c:81:2a:c7:5e:6d:5c:07:94:77:f8:ad:cf:42:c1:a3:f9:
1f:b1:b6:4f:4f:77:84:6e:12:23:22:79:61:c1:d1:de:ed:fb:
db:76:1c:1d:ac:5c:fa:95:74:d0:73:21:39:ff:2f:1e:0d:c9:
86:39:c0:dd:30:c8:ef:a7:b5:5f:79:09:92:8b:61:25:91:7d:
ac:13:37:17:7c:2d:5b:7e:1d:c9:d3:7e:5d:a9:f8:e1:a9:3a:
a9:5c:71:b2:98:e4:16:dc:7f:77:c1:71:b3:a5:3e:ff:64:a1:
96:2f:69:e4:18:3e:fa:51:67:63:5c:98:bd:24:66:48:1f:db:
63:dd:0c:49:08:70:5b:74:13:ac:b1:45:54:9e:6e:c0:f9:2e:
06:fd:58:6f:f0:52:3d:5b:ad:81:37:65:52:54:b7:75:f3:29:
71:af:9c:17:bf:78:e4:df:ac:8a:7f:62:bb:6a:98:34:f8:b1:
47:f3:a9:3d:7e:97:cf:0b:f6:64:19:23:f7:09:2c:dd:cb:d9:
a5:88:1c:15:72:a7:87:d4:8a:cf:71:b7:0a:d5:8f:f5:b7:05:
36:fd:be:cb:38:aa:40:e6:e9:3d:65:81:a5:0b:3e:a2:7b:a6:
d3:d4:74:c7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkvh8M7ZBFEI4FKPQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDMxNDEzMzAyMloXDTI1MDYxMjEzMzAyMlowLzEtMCsGA1UEAxMk
Mzc5OGU4N2MtMWViNy00NGRiLWI1MzgtYmMzOTgwMDVjMzM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgM+FyCrjDJssZdTMuenpMKOQvynNRxkBUFr8
4UvUdHeqbsG8hJWmjsOAiLJNnQOSGueO4kid3mjqfKh1zflfjc787g0camOF/02E
8XSFHLg8EWO+rmzQ8+LyTN4y24byZaWXU9j/ttvgwKkXBDfZ8QweUFz5av2A8uxg
EGngfDg7DOphc/rOG1Pt0PbNefU2G5+HLgBzKsgkS0ol+WvaoJidgE/tfQ0uoGUb
1Rd3H9S++9khhK5nTC0rEdngvU3GacQeXNXKsUT5Tbl/bqMIbxYDjKCZaNO5oIma
Ze5g1KSll6LJ294fxA4F06jhs+eOj/SLhLyVLK0BOlmuQxjITwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFATWyqAvJp+rr1bqlSX4yQoUngJOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvM2I3MTg4YWQtZmY0MS0z
NWM3LTk3MTItZGIxODk3YWYwY2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQn
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHBF7j5z1eToNiRIUkRcK/0rg7d8gSrHXm1cB5R3+K3PQsGj+R+x
tk9Pd4RuEiMieWHB0d7t+9t2HB2sXPqVdNBzITn/Lx4NyYY5wN0wyO+ntV95CZKL
YSWRfawTNxd8LVt+HcnTfl2p+OGpOqlccbKY5Bbcf3fBcbOlPv9koZYvaeQYPvpR
Z2NcmL0kZkgf22PdDEkIcFt0E6yxRVSebsD5Lgb9WG/wUj1brYE3ZVJUt3XzKXGv
nBe/eOTfrIp/YrtqmDT4sUfzqT1+l88L9mQZI/cJLN3L2aWIHBVyp4fUis9xtwrV
j/W3BTb9vss4qkDm6T1lgaULPqJ7ptPUdMc=
-----END CERTIFICATE-----
Generated at Tue Apr 8 23:43:58 2025 by rpki-client