Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c8c97ed1-3c86-33be-bfc2-001f656c1b95.roa
File: c8c97ed1-3c86-33be-bfc2-001f656c1b95.roa (raw, json)
Hash identifier: hTZGWfvyNgR1dxxjWnqHgdhPr9D3l0rYMhHwsWRjeok=
Subject key identifier: 76:AB:FD:6F:5C:D8:45:D6:56:4E:CC:E5:C0:50:5D:8A:DE:8E:96:B6
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848CF54E3E65107D324106D6960
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c8c97ed1-3c86-33be-bfc2-001f656c1b95.roa
Signing time: Sat 08 Feb 2025 02:30:16 +0000
ROA not before: Sat 08 Feb 2025 02:30:16 +0000
ROA not after: Fri 09 May 2025 01:30:16 +0000
asID: 54004
IP address blocks: 2001:470:411::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cf:54:e3:e6:51:07:d3:24:10:6d:69:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 8 02:30:16 2025 GMT
Not After : May 9 01:30:16 2025 GMT
Subject: CN=13f3f0bd-9a79-4b91-8784-83aa435f5646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5f:d5:bf:d6:84:8c:10:00:cc:39:4d:19:e4:
66:16:2a:82:fd:34:c3:60:cd:33:18:89:3f:43:1f:
1d:05:5d:56:d2:03:b3:fc:a1:17:26:eb:41:50:f7:
57:74:be:15:68:69:33:93:23:4a:38:8c:ff:75:b3:
2a:db:e8:b5:42:14:38:2e:41:4b:64:3a:e6:a8:88:
6d:07:20:c1:f3:52:0f:c1:39:24:9d:c4:7e:2f:d4:
f8:e4:f5:63:73:5b:71:ff:42:49:8b:7e:67:67:6c:
2c:8d:88:18:b8:13:e8:4d:31:14:f5:cc:b4:da:75:
1a:3d:dd:96:55:ef:d0:16:bc:38:6a:a1:ab:bb:64:
cb:c7:f2:06:bf:47:31:5f:2a:0b:16:f5:29:79:ef:
c7:11:ca:bd:60:d8:2c:c2:fc:dd:51:f5:6b:08:77:
e4:b0:76:2f:52:ef:bc:ac:cf:dd:ff:0b:64:cb:12:
dc:a3:f5:f8:0e:64:85:f8:b0:f0:fc:d4:37:ac:51:
fc:09:21:6a:0d:ac:b8:16:27:de:1f:ca:9d:79:0b:
0f:39:b9:aa:cc:b1:dc:93:1e:d7:d2:fe:0e:28:ca:
bd:7b:e9:68:35:f7:fd:60:ee:8e:38:fe:76:39:30:
af:be:e9:e9:c6:c6:ee:82:3e:63:ae:19:bb:54:c4:
b2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:AB:FD:6F:5C:D8:45:D6:56:4E:CC:E5:C0:50:5D:8A:DE:8E:96:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c8c97ed1-3c86-33be-bfc2-001f656c1b95.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:411::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ba:8a:7b:dd:c9:ea:66:f7:1c:d0:5c:14:69:d7:d0:de:08:b0:
5a:b1:b8:a0:63:ed:2e:56:fe:62:28:9e:45:ea:c5:60:a0:ab:
1f:d0:84:65:d2:bc:df:84:41:3d:d3:f4:5c:f7:e0:75:2a:0d:
c5:df:e2:13:26:80:fe:93:38:0e:69:55:7a:bd:c1:4a:a0:93:
f4:f1:36:01:bb:e5:2b:ce:00:f2:eb:2c:75:89:47:69:d0:85:
00:3a:6b:81:96:41:6e:26:78:d9:b7:70:5d:57:72:12:9b:a0:
9c:e8:3b:fd:c8:24:90:f1:55:af:6e:30:da:03:63:b3:70:11:
02:ad:75:dc:40:36:fd:0b:f0:94:f6:b4:ca:25:dd:49:20:1b:
00:58:db:a5:3d:c9:bb:18:a8:85:d5:ef:7d:2d:2f:ed:9f:3e:
f3:42:b4:e8:c9:3c:1f:43:03:24:bb:85:1e:b4:38:ff:05:e2:
52:55:b0:a2:41:f5:ac:0a:f1:25:a5:b1:73:64:56:26:54:e3:
41:45:32:6d:46:a4:72:a4:c0:1d:01:d7:7f:17:c9:b4:d2:86:
98:34:58:96:05:ea:82:da:6c:f6:dd:b2:de:9c:31:40:1f:46:
e6:b5:98:34:51:83:fe:d6:e8:97:82:1f:04:8c:15:be:11:8a:
33:4b:0b:1c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjPVOPmUQfTJBBtaWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDIwODAyMzAxNloXDTI1MDUwOTAxMzAxNlowLzEtMCsGA1UEAxMk
MTNmM2YwYmQtOWE3OS00YjkxLTg3ODQtODNhYTQzNWY1NjQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlF/Vv9aEjBAAzDlNGeRmFiqC/TTDYM0zGIk/
Qx8dBV1W0gOz/KEXJutBUPdXdL4VaGkzkyNKOIz/dbMq2+i1QhQ4LkFLZDrmqIht
ByDB81IPwTkkncR+L9T45PVjc1tx/0JJi35nZ2wsjYgYuBPoTTEU9cy02nUaPd2W
Ve/QFrw4aqGru2TLx/IGv0cxXyoLFvUpee/HEcq9YNgswvzdUfVrCHfksHYvUu+8
rM/d/wtkyxLco/X4DmSF+LDw/NQ3rFH8CSFqDay4FifeH8qdeQsPObmqzLHckx7X
0v4OKMq9e+loNff9YO6OOP52OTCvvunpxsbugj5jrhm7VMSyfwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHar/W9c2EXWVk7M5cBQXYrejpa2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzhjOTdlZDEtM2M4Ni0z
M2JlLWJmYzItMDAxZjY1NmMxYjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQR
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALqKe93J6mb3HNBcFGnX0N4IsFqxuKBj7S5W/mIonkXqxWCgqx/Q
hGXSvN+EQT3T9Fz34HUqDcXf4hMmgP6TOA5pVXq9wUqgk/TxNgG75SvOAPLrLHWJ
R2nQhQA6a4GWQW4meNm3cF1XchKboJzoO/3IJJDxVa9uMNoDY7NwEQKtddxANv0L
8JT2tMol3UkgGwBY26U9ybsYqIXV730tL+2fPvNCtOjJPB9DAyS7hR60OP8F4lJV
sKJB9awK8SWlsXNkViZU40FFMm1GpHKkwB0B138XybTShpg0WJYF6oLabPbdst6c
MUAfRua1mDRRg/7W6JeCHwSMFb4RijNLCxw=
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:51:16 2025 by rpki-client