Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ad3907b2-32a3-3611-b9fc-0820dd81460b.roa
File: ad3907b2-32a3-3611-b9fc-0820dd81460b.roa (raw, json)
Hash identifier: xG2C7S1sN9Nk6/iQDsOCSKr3MOx59FpLF9x2bHzLjHM=
Subject key identifier: E2:84:06:5A:A4:0E:C6:79:B7:CE:90:A8:16:20:29:F8:74:1F:2B:F1
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926E85D60911E6346D8ED80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ad3907b2-32a3-3611-b9fc-0820dd81460b.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 400686
IP address blocks: 2001:470:2f3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:e8:5d:60:91:1e:63:46:d8:ed:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=ecadc88f-1003-4f9e-8045-5ea62d5d7e06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:33:bc:99:f8:55:22:c4:2b:8e:64:2c:bd:fe:
bc:88:e8:4c:6f:12:cf:6d:5d:96:cd:65:52:ec:06:
69:09:6c:c9:85:30:d9:c8:c1:6f:01:9a:26:20:d2:
03:a5:67:05:80:83:da:7d:a2:23:cd:4b:61:bc:4f:
20:f3:6c:34:20:7c:43:f7:11:08:8f:20:f6:ab:59:
89:e6:e3:fe:5d:95:dc:df:71:4d:78:8a:f2:e1:af:
d3:e1:c6:de:3d:6b:21:42:78:f2:e6:f7:d4:32:82:
37:51:16:75:34:f0:a0:19:c0:1a:a4:4d:23:25:e2:
6e:6e:69:71:a8:68:02:e4:9d:a6:3e:93:5d:87:12:
24:c9:00:01:fc:24:1b:c4:91:e8:fd:e6:2b:2e:21:
d2:18:a2:6e:80:5a:22:31:c6:d4:d2:5b:a9:87:65:
6f:6e:7e:9e:5e:5b:93:13:52:4a:8d:80:3c:4f:a1:
a7:ce:7c:c0:ef:a3:08:14:8c:b8:f6:64:d9:ae:1c:
2b:50:19:3c:fc:cd:c3:11:b8:a8:19:5b:50:87:b7:
e4:72:72:21:32:3c:01:f1:47:0a:97:86:14:52:ae:
b3:e8:36:de:79:5e:a2:29:4d:57:e3:da:91:9b:fe:
9f:6d:c3:86:62:b0:51:ff:ba:42:b2:b4:a0:90:4f:
be:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:84:06:5A:A4:0E:C6:79:B7:CE:90:A8:16:20:29:F8:74:1F:2B:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ad3907b2-32a3-3611-b9fc-0820dd81460b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2f3::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:87:f8:31:97:36:9f:8d:55:a6:f1:77:81:95:a3:fe:ba:fc:
c6:4f:8a:e9:34:cd:b6:2b:2a:02:ab:42:3c:63:27:9b:01:4a:
0c:77:b8:ff:1e:7e:23:ee:01:70:01:45:0f:c2:d8:2b:c3:6f:
65:66:61:97:bc:89:ce:a2:ed:89:3c:05:e9:00:76:e5:be:35:
31:b5:1a:3e:13:8c:87:c6:db:72:30:6b:fb:4f:b6:cc:08:e7:
07:c6:ce:4d:16:79:a7:8b:4a:62:d3:d3:41:ff:c9:13:27:27:
f1:55:ea:55:2d:a7:8a:0e:04:5c:5b:55:0c:bf:8f:e1:37:c9:
31:12:b6:15:1e:72:40:ad:79:ee:d3:61:1c:cb:d6:1f:dd:2c:
53:a3:ee:5b:17:e7:cc:98:a3:3a:82:9d:dd:96:d5:e1:35:b3:
d7:d8:60:7f:2b:a4:33:0c:9e:f3:a2:0d:68:4a:10:14:a8:73:
b4:29:dc:e9:ba:cf:e0:d0:91:3e:f7:06:53:e0:a1:52:d8:e5:
0c:6c:86:d7:76:71:86:21:bb:d3:e5:7a:93:6e:cf:27:75:be:
07:d7:25:38:a2:66:0b:cc:93:43:48:4c:d6:d5:b5:e0:79:92:
5d:2a:e7:12:24:76:5a:d3:e6:1e:47:fe:d4:d6:6d:67:15:91:
44:3b:02:ae
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JuhdYJEeY0bY7YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk
ZWNhZGM4OGYtMTAwMy00ZjllLTgwNDUtNWVhNjJkNWQ3ZTA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjO8mfhVIsQrjmQsvf68iOhMbxLPbV2WzWVS
7AZpCWzJhTDZyMFvAZomINIDpWcFgIPafaIjzUthvE8g82w0IHxD9xEIjyD2q1mJ
5uP+XZXc33FNeIry4a/T4cbePWshQnjy5vfUMoI3URZ1NPCgGcAapE0jJeJubmlx
qGgC5J2mPpNdhxIkyQAB/CQbxJHo/eYrLiHSGKJugFoiMcbU0luph2Vvbn6eXluT
E1JKjYA8T6GnznzA76MIFIy49mTZrhwrUBk8/M3DEbioGVtQh7fkcnIhMjwB8UcK
l4YUUq6z6DbeeV6iKU1X49qRm/6fbcOGYrBR/7pCsrSgkE++9QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOKEBlqkDsZ5t86QqBYgKfh0HyvxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYWQzOTA3YjItMzJhMy0z
NjExLWI5ZmMtMDgyMGRkODE0NjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcALz
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGuH+DGXNp+NVabxd4GVo/66/MZPiuk0zbYrKgKrQjxjJ5sBSgx3
uP8efiPuAXABRQ/C2CvDb2VmYZe8ic6i7Yk8BekAduW+NTG1Gj4TjIfG23Iwa/tP
tswI5wfGzk0WeaeLSmLT00H/yRMnJ/FV6lUtp4oOBFxbVQy/j+E3yTESthUeckCt
ee7TYRzL1h/dLFOj7lsX58yYozqCnd2W1eE1s9fYYH8rpDMMnvOiDWhKEBSoc7Qp
3Om6z+DQkT73BlPgoVLY5Qxshtd2cYYhu9PlepNuzyd1vgfXJTiiZgvMk0NITNbV
teB5kl0q5xIkdlrT5h5H/tTWbWcVkUQ7Aq4=
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:50:29 2025 by rpki-client