Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/91fa05ad-8ee4-34ec-b5f6-399a0c6935f5.roa
File: 91fa05ad-8ee4-34ec-b5f6-399a0c6935f5.roa (raw, json)
Hash identifier: 8EWXoMx6BAGxpHB3aOyjoL3bucoWm0MhTXVOIOadJ1w=
Subject key identifier: B1:21:29:C1:04:00:CF:BD:26:4C:E0:36:B9:A0:61:6E:3B:51:51:A5
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926D5E30424EC6002070700
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/91fa05ad-8ee4-34ec-b5f6-399a0c6935f5.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 19969
IP address blocks: 2001:470:32::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:d5:e3:04:24:ec:60:02:07:07:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=9f5148d8-239f-4bb6-b351-42ed53707bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:99:05:1c:b3:8d:a7:f5:71:b4:26:be:0a:a9:
b7:bc:4e:4f:fe:81:1e:c1:b8:7f:37:f2:d3:df:1d:
9a:87:8c:39:ef:2c:ce:5f:8a:3d:a6:bb:da:a9:b9:
6f:c0:01:3d:49:64:53:4b:ef:f3:e0:0d:dc:fa:57:
d3:24:25:93:9f:c1:6d:ca:a3:7e:d9:3a:09:55:38:
9a:3e:96:19:5f:57:4f:af:71:47:a0:e1:3c:15:52:
be:22:34:67:9d:33:db:56:7c:1a:df:e2:f0:6f:2f:
c7:7c:2a:a6:8e:b4:a5:4c:e7:7f:cf:4b:db:43:43:
d2:fd:9c:4b:8a:d2:c4:5d:2e:3f:24:ed:8f:f9:36:
64:fb:a3:e1:12:00:98:2e:58:01:b2:94:70:d9:74:
80:ee:f8:a3:ac:23:11:c5:cb:12:fd:0d:ae:7e:f5:
6d:8d:ba:b5:cc:c4:a0:c1:fb:ff:a9:9b:a1:fa:c3:
57:9d:db:c1:ed:9d:63:f8:d2:bb:4c:73:47:16:3a:
e3:7f:69:e2:96:50:44:52:38:8b:b3:0d:52:8d:2c:
b4:f5:34:1c:3b:8a:92:05:5e:c0:64:8a:c9:1d:b6:
78:cc:f2:7c:b3:65:b6:28:c1:6f:ce:1a:56:bc:a3:
2e:79:fe:13:a7:a3:0f:ac:5a:38:41:bd:03:2c:c0:
4c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:21:29:C1:04:00:CF:BD:26:4C:E0:36:B9:A0:61:6E:3B:51:51:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/91fa05ad-8ee4-34ec-b5f6-399a0c6935f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:32::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bc:01:e0:1f:cc:b1:58:0e:ce:68:93:79:b0:d8:13:c4:ca:7b:
4e:66:df:7b:77:f4:50:b3:34:6c:15:29:de:83:e3:fb:2b:25:
01:b7:7f:ae:2e:be:62:45:75:e3:8e:6a:70:22:0d:05:f2:e9:
f9:75:cc:57:b0:95:1a:16:a5:17:17:64:24:12:33:81:c4:e1:
3f:9a:9d:b0:05:2d:ca:70:f7:68:99:93:b3:3b:aa:06:f3:28:
77:d0:d4:6c:d1:c1:5b:a1:e5:a5:00:b9:4d:4b:70:ff:9e:ee:
5d:f9:46:b6:55:cc:0e:b0:de:ab:94:42:19:b6:86:c4:ba:fd:
75:4c:87:28:be:9e:f9:a2:3c:5f:7e:02:cf:a6:40:24:42:b6:
60:d7:41:cf:3c:e9:de:35:fa:ea:54:40:ab:8f:65:1f:70:dd:
d9:c6:36:e2:63:d8:4e:de:31:65:e5:a0:1f:6e:f9:77:82:7e:
ff:16:18:b0:66:49:b7:a8:f1:2f:75:c3:f3:73:f1:60:86:ad:
dc:b9:d2:67:d3:d0:95:aa:a3:43:a4:da:b4:9c:78:b4:e0:de:
f8:9b:6b:c7:1c:80:42:b8:87:78:97:44:91:70:6d:f2:e1:74:
10:97:a3:cc:d2:1a:f3:61:ee:e5:ea:dd:08:e1:d2:2b:bf:8e:
51:c5:94:ea
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JtXjBCTsYAIHBwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk
OWY1MTQ4ZDgtMjM5Zi00YmI2LWIzNTEtNDJlZDUzNzA3YmQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5kFHLONp/VxtCa+Cqm3vE5P/oEewbh/N/LT
3x2ah4w57yzOX4o9prvaqblvwAE9SWRTS+/z4A3c+lfTJCWTn8FtyqN+2ToJVTia
PpYZX1dPr3FHoOE8FVK+IjRnnTPbVnwa3+Lwby/HfCqmjrSlTOd/z0vbQ0PS/ZxL
itLEXS4/JO2P+TZk+6PhEgCYLlgBspRw2XSA7vijrCMRxcsS/Q2ufvVtjbq1zMSg
wfv/qZuh+sNXndvB7Z1j+NK7THNHFjrjf2nillBEUjiLsw1SjSy09TQcO4qSBV7A
ZIrJHbZ4zPJ8s2W2KMFvzhpWvKMuef4Tp6MPrFo4Qb0DLMBMEQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLEhKcEEAM+9JkzgNrmgYW47UVGlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOTFmYTA1YWQtOGVlNC0z
NGVjLWI1ZjYtMzk5YTBjNjkzNWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAAy
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALwB4B/MsVgOzmiTebDYE8TKe05m33t39FCzNGwVKd6D4/srJQG3
f64uvmJFdeOOanAiDQXy6fl1zFewlRoWpRcXZCQSM4HE4T+anbAFLcpw92iZk7M7
qgbzKHfQ1GzRwVuh5aUAuU1LcP+e7l35RrZVzA6w3quUQhm2hsS6/XVMhyi+nvmi
PF9+As+mQCRCtmDXQc886d41+upUQKuPZR9w3dnGNuJj2E7eMWXloB9u+XeCfv8W
GLBmSbeo8S91w/Nz8WCGrdy50mfT0JWqo0Ok2rSceLTg3viba8ccgEK4h3iXRJFw
bfLhdBCXo8zSGvNh7uXq3Qjh0iu/jlHFlOo=
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:54:56 2025 by rpki-client