Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a09b7742-cb4a-35e9-8fc9-02bee3443977.roa
File: a09b7742-cb4a-35e9-8fc9-02bee3443977.roa (raw, json)
Hash identifier: dCNq5ed+ex3LzNOGzAL1m2NcOjb7qbWr+KimB5KD/98=
Subject key identifier: E4:90:CF:2C:27:4A:AC:63:89:24:64:E8:33:B1:64:90:98:55:A2:D7
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926C664FB8196A8A8E77A00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a09b7742-cb4a-35e9-8fc9-02bee3443977.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 54133
IP address blocks: 2001:470:1bf::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:c6:64:fb:81:96:a8:a8:e7:7a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=a4b833ff-efb4-46ca-a48b-ba8925982bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cc:ab:18:f3:1c:95:54:3b:42:a0:49:9b:76:
9d:3a:9a:aa:fd:b1:50:d8:b8:b1:25:8c:c4:d6:6a:
31:f4:83:a6:57:d9:9f:07:30:57:df:14:d6:62:90:
21:b9:37:92:23:3b:58:f1:83:e8:ae:db:3f:78:0f:
ba:47:b1:3d:c9:da:60:64:98:bd:62:88:f2:21:35:
7c:2b:17:5a:a3:2c:b6:93:ad:43:c2:45:14:dd:d8:
b2:ba:69:6d:f7:7c:8d:fc:6e:b4:d3:88:58:f8:50:
2d:2c:4b:be:e5:a8:f5:cd:16:99:75:bf:f6:9d:95:
0d:51:49:00:3b:fc:a9:30:89:fd:a4:2d:3a:15:5a:
91:a6:f5:1e:87:83:5f:ae:2d:c8:54:09:5b:79:3e:
b9:68:b3:f9:ab:fb:63:ab:0f:65:11:01:99:46:90:
c5:20:46:9a:d0:08:db:cc:4b:37:37:b4:4d:19:4c:
9c:c4:8b:de:f9:bd:74:25:14:25:5c:c4:c1:56:af:
82:84:47:21:98:f2:1d:5b:b2:35:7d:41:b1:02:de:
3f:3e:37:9f:0f:f4:1c:44:57:13:56:a2:d5:39:13:
65:bb:a5:a3:3d:00:c3:ab:41:5c:dc:d4:64:c2:05:
9c:68:96:48:27:53:d2:36:63:93:6c:1e:ca:3b:7b:
33:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:90:CF:2C:27:4A:AC:63:89:24:64:E8:33:B1:64:90:98:55:A2:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a09b7742-cb4a-35e9-8fc9-02bee3443977.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:1bf::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:80:12:0e:a3:82:07:c1:a5:8f:7e:a4:af:f1:8b:68:dc:18:
4c:3c:f4:5d:b7:1b:aa:5c:fb:b9:a5:7d:c1:b8:ee:c1:05:74:
42:a5:31:88:40:bf:c4:14:18:e8:86:91:e9:8a:57:6a:c8:c0:
ac:0c:9a:19:3a:a3:90:be:6b:2e:ea:68:d3:3d:00:42:55:25:
c7:dd:02:3f:eb:95:fc:e3:50:67:e3:cd:43:58:b5:dd:66:48:
53:0d:66:21:95:97:e3:42:db:b5:d4:31:e0:35:2e:a7:dc:df:
6f:89:db:50:a4:c4:73:41:8f:4a:1b:e0:89:30:5c:b3:53:aa:
ad:50:37:df:1d:8b:f2:de:3b:d2:05:30:99:33:7a:2c:95:77:
8b:ae:63:66:2f:f7:04:65:56:7e:81:68:2e:84:38:01:b9:de:
b1:e2:2c:f8:f3:91:98:78:14:df:3a:a9:8b:b6:72:85:a9:b6:
5b:b8:e5:1b:90:1c:83:43:07:95:22:98:63:74:6c:83:17:c9:
9e:73:48:b1:3b:8b:95:a0:56:f2:9d:ed:48:e0:d1:63:62:38:
7e:bb:84:9c:50:40:5c:12:59:55:19:33:2c:0e:1d:b3:78:b4:
74:0c:85:0d:33:b1:fd:de:0d:3a:68:3c:48:9a:e7:86:12:cf:
f5:38:fd:0c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JsZk+4GWqKjnegAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk
YTRiODMzZmYtZWZiNC00NmNhLWE0OGItYmE4OTI1OTgyYmQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosyrGPMclVQ7QqBJm3adOpqq/bFQ2LixJYzE
1mox9IOmV9mfBzBX3xTWYpAhuTeSIztY8YPorts/eA+6R7E9ydpgZJi9YojyITV8
Kxdaoyy2k61DwkUU3diyumlt93yN/G6004hY+FAtLEu+5aj1zRaZdb/2nZUNUUkA
O/ypMIn9pC06FVqRpvUeh4Nfri3IVAlbeT65aLP5q/tjqw9lEQGZRpDFIEaa0Ajb
zEs3N7RNGUycxIve+b10JRQlXMTBVq+ChEchmPIdW7I1fUGxAt4/PjefD/QcRFcT
VqLVORNlu6WjPQDDq0Fc3NRkwgWcaJZIJ1PSNmOTbB7KO3szgwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOSQzywnSqxjiSRk6DOxZJCYVaLXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTA5Yjc3NDItY2I0YS0z
NWU5LThmYzktMDJiZWUzNDQzOTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAG/
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABaAEg6jggfBpY9+pK/xi2jcGEw89F23G6pc+7mlfcG47sEFdEKl
MYhAv8QUGOiGkemKV2rIwKwMmhk6o5C+ay7qaNM9AEJVJcfdAj/rlfzjUGfjzUNY
td1mSFMNZiGVl+NC27XUMeA1Lqfc32+J21CkxHNBj0ob4IkwXLNTqq1QN98di/Le
O9IFMJkzeiyVd4uuY2Yv9wRlVn6BaC6EOAG53rHiLPjzkZh4FN86qYu2coWptlu4
5RuQHINDB5UimGN0bIMXyZ5zSLE7i5WgVvKd7Ujg0WNiOH67hJxQQFwSWVUZMywO
HbN4tHQMhQ0zsf3eDTpoPEia54YSz/U4/Qw=
-----END CERTIFICATE-----
Generated at Wed Apr 9 07:48:54 2025 by rpki-client