Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/be6c9a6b-d631-3a7a-b2b7-20c7deeea63f.roa
File: be6c9a6b-d631-3a7a-b2b7-20c7deeea63f.roa (raw, json)
Hash identifier: Qg8CIvOKemKB+qKxqcgFdXBq7YqNJmtziZLqA2TsHS4=
Subject key identifier: 15:63:98:20:62:1A:FE:1E:9C:12:C1:8B:EE:BB:BA:C5:4A:8A:C2:12
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926C74AD6385A45C84A7700
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/be6c9a6b-d631-3a7a-b2b7-20c7deeea63f.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 25198
IP address blocks: 2001:470:1d7::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:c7:4a:d6:38:5a:45:c8:4a:77:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=4e1b9184-9dc3-40a4-9c95-c18f3f3fa958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b8:b1:1a:05:6b:ee:29:b8:4e:17:a1:88:b7:
fa:c1:1e:b0:d8:5f:83:69:3c:27:6b:07:90:72:93:
32:52:36:89:0c:9b:c1:ee:2c:6c:9f:c0:09:d4:d1:
e7:9e:a1:07:db:20:ac:49:c1:ed:d0:cf:ba:31:65:
0d:87:88:65:51:67:d0:32:9c:df:66:3a:d7:93:ac:
ff:98:29:78:73:e9:63:7e:3e:68:eb:5e:24:7b:81:
db:0e:1f:43:9d:ec:e3:13:01:a4:92:bf:6b:05:20:
f1:c4:d2:aa:76:88:b4:18:6d:1b:81:6c:70:70:34:
10:85:b2:dc:e1:a0:54:78:e2:2d:db:7e:9b:00:e8:
73:36:e3:60:e4:03:50:d8:33:5a:93:75:6a:13:a5:
7d:1c:07:b0:99:d1:a5:69:ef:c6:13:47:05:8f:9c:
ec:d6:6c:50:fb:43:1e:78:a9:00:7a:a6:87:d3:1a:
6b:69:7b:f6:04:b1:b1:92:92:2c:4d:cf:99:6c:f7:
c7:93:be:2f:5d:7f:40:8d:31:20:41:9a:12:53:3b:
05:de:c2:4d:eb:52:b7:16:cc:e9:3f:06:ea:7c:20:
3a:25:fe:65:e8:7b:8e:db:ef:5d:11:c2:87:e4:8a:
78:9a:68:08:f8:96:0f:6b:88:af:36:e6:28:ff:ab:
ff:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:63:98:20:62:1A:FE:1E:9C:12:C1:8B:EE:BB:BA:C5:4A:8A:C2:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/be6c9a6b-d631-3a7a-b2b7-20c7deeea63f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:1d7::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:1f:67:94:9c:38:0e:34:62:3d:cc:d6:19:a6:f3:33:6d:fb:
d1:ba:69:65:39:e4:44:dc:f0:bd:68:7d:58:6b:e7:fb:4e:af:
17:01:13:2e:bb:94:9e:fc:93:c6:07:15:15:c2:d0:ae:28:f2:
5d:7f:9f:a1:ba:08:bf:8a:2b:a4:af:92:b0:d5:0a:32:cd:99:
b4:bc:37:16:9e:29:65:b0:9f:9a:22:da:7a:4d:86:36:6d:47:
dc:12:10:6d:b8:04:af:22:86:1a:08:4b:c1:7c:6a:06:b1:56:
29:50:81:54:43:f9:17:69:24:9f:4f:d2:35:80:d0:d0:fd:ff:
ca:26:80:b4:c2:c4:6e:c2:fc:92:79:a2:6f:50:44:1c:25:32:
8a:2c:ba:71:e6:4c:e3:25:1f:8c:c8:ad:6d:6d:f4:20:94:72:
b2:8c:dd:d6:40:97:15:a3:24:ef:4a:38:64:15:00:c4:ba:11:
74:7e:bc:58:77:df:f2:74:13:50:af:0a:33:91:f5:bd:cc:a6:
22:ae:19:ca:5f:ec:38:f4:55:e3:0a:f3:4d:20:28:56:62:ae:
b0:07:f3:c6:9b:c4:d5:c8:89:f9:ff:a9:25:72:ad:a7:b4:e0:
3c:50:8d:f9:bf:9a:36:fe:5e:6c:7b:97:52:b9:7a:66:99:6b:
63:a5:ef:f0
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JsdK1jhaRchKdwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk
NGUxYjkxODQtOWRjMy00MGE0LTljOTUtYzE4ZjNmM2ZhOTU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurixGgVr7im4ThehiLf6wR6w2F+DaTwnaweQ
cpMyUjaJDJvB7ixsn8AJ1NHnnqEH2yCsScHt0M+6MWUNh4hlUWfQMpzfZjrXk6z/
mCl4c+ljfj5o614ke4HbDh9DnezjEwGkkr9rBSDxxNKqdoi0GG0bgWxwcDQQhbLc
4aBUeOIt236bAOhzNuNg5ANQ2DNak3VqE6V9HAewmdGlae/GE0cFj5zs1mxQ+0Me
eKkAeqaH0xpraXv2BLGxkpIsTc+ZbPfHk74vXX9AjTEgQZoSUzsF3sJN61K3Fszp
PwbqfCA6Jf5l6HuO2+9dEcKH5Ip4mmgI+JYPa4ivNuYo/6v/twIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBVjmCBiGv4enBLBi+67usVKisISMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYmU2YzlhNmItZDYzMS0z
YTdhLWIyYjctMjBjN2RlZWVhNjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAHX
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFQfZ5ScOA40Yj3M1hmm8zNt+9G6aWU55ETc8L1ofVhr5/tOrxcB
Ey67lJ78k8YHFRXC0K4o8l1/n6G6CL+KK6SvkrDVCjLNmbS8NxaeKWWwn5oi2npN
hjZtR9wSEG24BK8ihhoIS8F8agaxVilQgVRD+RdpJJ9P0jWA0ND9/8omgLTCxG7C
/JJ5om9QRBwlMoosunHmTOMlH4zIrW1t9CCUcrKM3dZAlxWjJO9KOGQVAMS6EXR+
vFh33/J0E1CvCjOR9b3MpiKuGcpf7Dj0VeMK800gKFZirrAH88abxNXIifn/qSVy
rae04DxQjfm/mjb+Xmx7l1K5emaZa2Ol7/A=
-----END CERTIFICATE-----
Generated at Wed Apr 9 01:00:18 2025 by rpki-client