Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6efb5054-07b5-3aff-bbeb-3cb42eabfa8c.roa
File: 6efb5054-07b5-3aff-bbeb-3cb42eabfa8c.roa (raw, json)
Hash identifier: xmRFZ7lJqd5+8sUeNGhGxdhJDjpu3kChFwlw/qSPb1Y=
Subject key identifier: 0B:55:E4:AF:D6:10:C8:31:37:AB:C4:ED:63:DC:1F:FF:E6:92:2B:BA
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926DE6B1E22506DD7F1BDC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6efb5054-07b5-3aff-bbeb-3cb42eabfa8c.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 149448
IP address blocks: 2001:470:1c6::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:de:6b:1e:22:50:6d:d7:f1:bd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=990ae986-7ef3-485c-beed-ce5525af4cc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ed:4b:c3:69:be:e8:b4:33:e6:9f:9e:41:9c:
d8:ef:ed:7d:50:21:ba:29:ce:29:8f:49:07:ad:cc:
1c:88:b5:78:a6:14:99:53:ee:0e:df:45:cf:63:72:
40:05:5e:7e:89:f0:5b:ac:09:6a:b3:0c:8b:62:26:
7a:14:e2:b7:9f:c7:57:69:af:58:e1:4a:6d:bf:b7:
1f:d4:4d:7c:c3:a7:dc:1c:84:1c:17:af:47:1a:d9:
95:6a:70:de:02:56:a3:cf:07:17:41:28:c4:b3:96:
f8:01:3e:63:da:3c:d0:ac:72:81:ea:ba:99:78:b9:
01:a1:5d:64:88:d2:6c:e3:e3:b4:bb:70:92:cf:b8:
1d:fa:de:a5:98:e6:2f:3e:d6:ed:73:12:99:9a:18:
6f:0d:10:53:6a:02:8d:40:67:19:b2:b8:14:2c:d0:
ed:b5:da:16:d1:5c:b6:20:87:09:64:58:a5:58:a8:
7a:92:94:e7:82:aa:93:4b:49:3c:1c:3e:74:64:36:
3e:02:91:c4:4e:0c:7d:68:1b:47:86:2c:05:a6:fd:
ff:80:af:cb:45:3f:bf:ec:14:90:73:85:62:a9:6e:
66:ae:de:bd:2c:c2:94:99:97:d5:35:db:00:3c:55:
35:00:43:e5:92:99:a8:ff:e9:18:e3:7d:3c:0d:87:
83:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:55:E4:AF:D6:10:C8:31:37:AB:C4:ED:63:DC:1F:FF:E6:92:2B:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6efb5054-07b5-3aff-bbeb-3cb42eabfa8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:1c6::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:93:b8:39:13:cc:5b:51:63:35:48:ae:34:52:a8:d6:7b:06:
77:a7:8e:31:f7:ea:d3:6b:4c:b1:6b:25:03:6d:27:7f:6d:e0:
07:08:fe:ff:3b:28:f9:45:36:36:39:c5:c3:94:e7:1a:95:0d:
f7:e6:aa:c6:b5:3e:c7:39:48:8e:eb:e2:2e:b3:4b:b4:a8:b3:
fe:2d:c4:04:75:fa:64:fd:57:46:a4:98:f2:79:b8:c4:c3:f7:
ed:fc:83:f7:61:c7:82:cb:8e:63:78:ae:cf:0c:20:bb:e4:2d:
77:9e:db:f0:d7:d7:95:05:a2:12:a0:97:f6:9a:00:f9:bf:97:
3f:d5:10:60:da:4f:51:ac:b5:06:a1:1d:a2:cc:22:14:62:2c:
83:fe:ac:b0:d1:92:30:2c:dd:36:06:94:d3:e0:05:68:50:ff:
9b:3b:c7:98:48:e1:53:d5:f3:c7:5d:18:0c:75:9e:52:41:9f:
02:ab:87:ae:27:4a:c9:fc:58:b9:b8:cb:ce:aa:a8:c3:e0:17:
bb:e4:44:16:2e:f2:4d:f0:60:a2:89:7b:93:5d:6e:84:cd:e9:
34:cc:67:dc:57:a7:37:ba:ff:d2:c5:b2:d8:d8:94:a8:8c:7c:
92:84:ef:53:73:ef:0c:7d:d8:b5:81:4d:b0:3e:5e:89:41:c2:
dd:d9:11:ee
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5Jt5rHiJQbdfxvcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk
OTkwYWU5ODYtN2VmMy00ODVjLWJlZWQtY2U1NTI1YWY0Y2MzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAru1Lw2m+6LQz5p+eQZzY7+19UCG6Kc4pj0kH
rcwciLV4phSZU+4O30XPY3JABV5+ifBbrAlqswyLYiZ6FOK3n8dXaa9Y4Uptv7cf
1E18w6fcHIQcF69HGtmVanDeAlajzwcXQSjEs5b4AT5j2jzQrHKB6rqZeLkBoV1k
iNJs4+O0u3CSz7gd+t6lmOYvPtbtcxKZmhhvDRBTagKNQGcZsrgULNDttdoW0Vy2
IIcJZFilWKh6kpTngqqTS0k8HD50ZDY+ApHETgx9aBtHhiwFpv3/gK/LRT+/7BSQ
c4ViqW5mrt69LMKUmZfVNdsAPFU1AEPlkpmo/+kY4308DYeDWwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAtV5K/WEMgxN6vE7WPcH//mkiu6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNmVmYjUwNTQtMDdiNS0z
YWZmLWJiZWItM2NiNDJlYWJmYThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAHG
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIyTuDkTzFtRYzVIrjRSqNZ7BnenjjH36tNrTLFrJQNtJ39t4AcI
/v87KPlFNjY5xcOU5xqVDffmqsa1Psc5SI7r4i6zS7Sos/4txAR1+mT9V0akmPJ5
uMTD9+38g/dhx4LLjmN4rs8MILvkLXee2/DX15UFohKgl/aaAPm/lz/VEGDaT1Gs
tQahHaLMIhRiLIP+rLDRkjAs3TYGlNPgBWhQ/5s7x5hI4VPV88ddGAx1nlJBnwKr
h64nSsn8WLm4y86qqMPgF7vkRBYu8k3wYKKJe5NdboTN6TTMZ9xXpze6/9LFstjY
lKiMfJKE71Nz7wx92LWBTbA+XolBwt3ZEe4=
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:48:41 2025 by rpki-client