Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/63a0e981-8b68-34f7-a310-5a64803821f1.roa
File: 63a0e981-8b68-34f7-a310-5a64803821f1.roa (raw, json)
Hash identifier: eDGGZAGWFFCBPzi4/qaCubRqM+Zz6tWfJI3d8MbE2Go=
Subject key identifier: BA:CB:61:BA:5F:5F:E3:43:DC:F4:99:CB:3C:8E:A1:0E:86:F7:8C:84
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926E5843A121C099224A920
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/63a0e981-8b68-34f7-a310-5a64803821f1.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 47702
IP address blocks: 2001:470:2a1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:e5:84:3a:12:1c:09:92:24:a9:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=70a624ee-bea8-42b0-ae9d-ff99177307c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e2:bd:36:d2:8b:ed:4f:f8:a6:ec:60:3b:ff:
f6:c8:10:51:1a:d5:31:16:d5:b3:28:32:b4:4d:99:
3d:25:8c:42:92:35:db:17:ed:73:fe:6a:f4:1a:8b:
e3:f8:80:4a:e8:a9:88:64:ab:05:23:9d:25:42:4d:
3c:83:bb:46:61:ea:23:bc:1a:c0:82:52:a0:cc:0f:
ba:97:48:5f:ea:93:9a:f7:10:47:98:a9:44:bb:3c:
3a:46:76:63:6c:27:e6:c1:01:3d:50:96:11:57:c0:
fd:54:6d:34:3e:77:6b:b7:4d:14:c2:21:8b:f3:94:
1c:04:ff:a7:1e:66:67:6f:0d:18:19:32:e8:34:6a:
73:7c:e9:76:e4:da:72:25:e9:c8:89:c4:4f:0d:14:
97:46:12:32:41:8a:de:58:bc:a0:6d:8a:06:f3:09:
99:8a:3d:00:68:23:4f:c8:37:dc:88:5d:07:a5:f7:
a4:75:c5:f0:f5:d7:de:90:d2:f8:09:bf:19:9c:05:
18:7c:bc:8a:a0:95:0d:8d:f7:f5:86:8a:2c:a2:2d:
92:9f:e2:85:2c:fc:46:d8:20:ab:f8:6c:ef:0d:7c:
9b:e1:c8:3f:d7:94:1e:57:d1:09:26:fc:1e:fb:60:
66:ec:20:8b:c8:5b:fb:bb:a3:8b:6b:ba:72:5b:c6:
b2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:CB:61:BA:5F:5F:E3:43:DC:F4:99:CB:3C:8E:A1:0E:86:F7:8C:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/63a0e981-8b68-34f7-a310-5a64803821f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2a1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
be:56:46:1a:03:23:19:04:11:cd:6e:28:55:73:13:27:5e:41:
1b:87:a7:15:fb:bd:78:7d:f3:2c:8d:6b:d4:d9:e4:9e:10:7a:
4a:fb:20:71:c3:33:60:fd:a4:8c:ab:66:6b:94:e3:2d:57:fa:
2f:dc:0e:ae:b4:bf:83:b5:f7:f8:c4:67:db:c7:82:be:38:b3:
b3:08:07:78:fb:38:9c:b4:32:44:cf:7d:e3:fa:56:08:81:54:
89:56:10:42:29:86:0c:81:0e:46:3d:f6:97:e5:5c:90:ac:02:
df:78:0a:d4:d3:c0:7f:a0:ae:65:64:e4:0b:d7:9b:8a:c7:ba:
09:4c:0a:50:d2:fc:3b:6c:49:58:e0:d7:f4:fb:bf:8f:26:5c:
bc:d1:2d:37:de:cf:14:9f:10:9a:7c:99:50:58:0c:05:a4:d9:
38:70:eb:a9:e5:f9:bf:31:70:7a:5b:b7:ff:21:ac:05:bb:4b:
f8:e4:4d:75:30:3a:65:bd:6d:32:bf:c4:ea:7c:cc:71:75:09:
89:df:49:c2:b0:b5:19:f2:12:0f:78:b3:54:c9:e0:e7:e1:19:
54:42:89:56:3e:c4:a4:31:5b:9b:90:67:37:f1:4c:d4:0d:e9:
b7:e5:da:cc:d5:33:1b:07:31:ca:ec:70:17:ee:0a:ed:d7:3b:
90:7b:cd:a7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JuWEOhIcCZIkqSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk
NzBhNjI0ZWUtYmVhOC00MmIwLWFlOWQtZmY5OTE3NzMwN2MwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOK9NtKL7U/4puxgO//2yBBRGtUxFtWzKDK0
TZk9JYxCkjXbF+1z/mr0Govj+IBK6KmIZKsFI50lQk08g7tGYeojvBrAglKgzA+6
l0hf6pOa9xBHmKlEuzw6RnZjbCfmwQE9UJYRV8D9VG00Pndrt00UwiGL85QcBP+n
HmZnbw0YGTLoNGpzfOl25NpyJenIicRPDRSXRhIyQYreWLygbYoG8wmZij0AaCNP
yDfciF0HpfekdcXw9dfekNL4Cb8ZnAUYfLyKoJUNjff1hoosoi2Sn+KFLPxG2CCr
+GzvDXyb4cg/15QeV9EJJvwe+2Bm7CCLyFv7u6OLa7pyW8ayVQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLrLYbpfX+ND3PSZyzyOoQ6G94yEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNjNhMGU5ODEtOGI2OC0z
NGY3LWEzMTAtNWE2NDgwMzgyMWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKh
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAL5WRhoDIxkEEc1uKFVzEydeQRuHpxX7vXh98yyNa9TZ5J4Qekr7
IHHDM2D9pIyrZmuU4y1X+i/cDq60v4O19/jEZ9vHgr44s7MIB3j7OJy0MkTPfeP6
VgiBVIlWEEIphgyBDkY99pflXJCsAt94CtTTwH+grmVk5AvXm4rHuglMClDS/Dts
SVjg1/T7v48mXLzRLTfezxSfEJp8mVBYDAWk2Thw66nl+b8xcHpbt/8hrAW7S/jk
TXUwOmW9bTK/xOp8zHF1CYnfScKwtRnyEg94s1TJ4OfhGVRCiVY+xKQxW5uQZzfx
TNQN6bfl2szVMxsHMcrscBfuCu3XO5B7zac=
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:52:24 2025 by rpki-client