Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8dc688c8-d263-3e7b-be29-d4ff4f73d1b2.roa
File: 8dc688c8-d263-3e7b-be29-d4ff4f73d1b2.roa (raw, json)
Hash identifier: 2flr5w/sJmiTCixnPWNYLLNbFJc2FqIAAT452+5sYAI=
Subject key identifier: DE:A3:51:86:E6:4F:27:95:A5:79:56:09:D7:F7:65:29:EA:8D:F0:EE
Certificate issuer: /CN=8e2da239-793e-4082-afde-6458f2319e7e
Certificate serial: 010D0C9F43285848828086C65A355195F99FF800
Authority key identifier: B6:1E:B0:C8:29:6F:59:D0:64:2B:44:2F:41:AC:38:58:E0:07:01:E8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8dc688c8-d263-3e7b-be29-d4ff4f73d1b2.roa
Signing time: Sat 11 Jan 2025 14:00:52 +0000
ROA not before: Sat 11 Jan 2025 14:00:52 +0000
ROA not after: Fri 11 Apr 2025 13:00:52 +0000
asID: 3755
IP address blocks: 2620:f:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:82:80:86:c6:5a:35:51:95:f9:9f:f8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e2da239-793e-4082-afde-6458f2319e7e
Validity
Not Before: Jan 11 14:00:52 2025 GMT
Not After : Apr 11 13:00:52 2025 GMT
Subject: CN=cf23f72f-bbe9-4251-aafa-19b7cd6ea4c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:04:4b:51:c5:17:94:e7:be:5c:08:b6:6e:40:
c6:4b:c0:16:a5:11:63:18:63:58:4a:73:3b:4f:c1:
84:d5:b3:2c:88:b8:2f:05:35:28:3e:6a:ae:2f:ea:
0b:56:c4:99:36:f6:e2:15:58:23:32:89:de:b2:a6:
b7:3a:14:de:09:6a:5b:0c:fa:48:55:5a:97:be:d9:
c0:10:1e:7f:07:44:fa:87:39:de:ac:47:8f:94:11:
42:ee:e1:13:08:92:61:6b:41:04:34:be:39:b5:ae:
2b:0f:73:b4:ab:88:30:7f:8f:17:f7:90:fa:61:bd:
3a:cc:46:5c:c2:80:bc:8b:3d:57:c6:ee:a5:f1:3b:
e7:f5:97:6e:7e:d6:98:f5:03:f2:dd:09:81:2f:80:
36:b7:ae:4a:a8:6d:f5:f0:64:2c:de:06:04:0c:dd:
c8:b7:aa:62:24:22:3a:cf:71:1e:69:d8:c0:7d:0a:
ab:1b:3a:4e:16:49:99:13:3e:c3:52:06:6a:98:05:
8b:77:c6:f0:84:f2:42:cc:0e:cd:9b:ac:e6:80:77:
d6:28:1c:9b:ac:9b:f4:b0:9d:b7:df:57:00:39:eb:
13:4e:e8:a6:14:07:06:8c:13:56:71:94:46:32:62:
df:be:7d:9e:67:03:8b:76:f8:bb:03:17:10:e1:4e:
56:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A3:51:86:E6:4F:27:95:A5:79:56:09:D7:F7:65:29:EA:8D:F0:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8dc688c8-d263-3e7b-be29-d4ff4f73d1b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.crl
X509v3 Authority Key Identifier:
keyid:B6:1E:B0:C8:29:6F:59:D0:64:2B:44:2F:41:AC:38:58:E0:07:01:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:f:2::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:26:12:51:43:5b:97:16:df:26:1b:19:16:ac:85:5d:01:f8:
34:d4:76:0c:fd:4f:ad:ea:bb:2f:81:ac:e0:f5:1c:9c:fb:5a:
0e:dc:0c:c6:f5:d7:4c:53:4b:8e:59:3a:7e:1e:cd:3f:cf:9e:
50:f8:e1:d2:88:3a:dd:03:2e:f4:78:fc:09:84:8d:3d:ad:38:
47:d7:ea:f4:36:de:3b:62:98:46:60:fb:b2:2b:d8:bc:61:e5:
00:c4:3a:1d:7a:31:9a:b5:fb:61:c7:31:40:25:9c:ca:87:c0:
e2:28:a7:29:48:bb:02:32:e7:13:a1:92:15:1a:0f:fb:db:96:
45:32:57:8e:95:cb:6e:c7:86:de:cd:d2:ad:90:27:6e:64:4f:
a1:c4:9c:2d:cc:39:80:bc:ea:31:05:6c:60:22:51:67:4b:9c:
48:b4:bc:c5:2b:24:57:5f:e2:3b:f7:f7:d8:6a:dc:8d:30:d8:
95:7e:aa:8e:e9:65:17:b1:a3:64:f9:37:db:cf:61:08:95:e2:
52:65:af:12:b0:ef:f0:b3:a7:77:67:47:9d:82:39:85:cb:9e:
e0:13:5d:30:73:c7:08:3d:26:d4:33:1e:31:af:c3:d5:c1:7c:
ac:c5:c4:79:10:24:ec:f8:af:32:f5:b6:1d:5e:9d:3f:83:2c:
62:0f:d4:48
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiCgIbGWjVRlfmf+AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGUyZGEyMzktNzkzZS00MDgyLWFmZGUtNjQ1OGYyMzE5
ZTdlMB4XDTI1MDExMTE0MDA1MloXDTI1MDQxMTEzMDA1MlowLzEtMCsGA1UEAxMk
Y2YyM2Y3MmYtYmJlOS00MjUxLWFhZmEtMTliN2NkNmVhNGM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowRLUcUXlOe+XAi2bkDGS8AWpRFjGGNYSnM7
T8GE1bMsiLgvBTUoPmquL+oLVsSZNvbiFVgjMonesqa3OhTeCWpbDPpIVVqXvtnA
EB5/B0T6hznerEePlBFC7uETCJJha0EENL45ta4rD3O0q4gwf48X95D6Yb06zEZc
woC8iz1Xxu6l8Tvn9ZduftaY9QPy3QmBL4A2t65KqG318GQs3gYEDN3It6piJCI6
z3EeadjAfQqrGzpOFkmZEz7DUgZqmAWLd8bwhPJCzA7Nm6zmgHfWKBybrJv0sJ23
31cAOesTTuimFAcGjBNWcZRGMmLfvn2eZwOLdvi7AxcQ4U5WvQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFN6jUYbmTyeVpXlWCdf3ZSnqjfDuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84ZTJk
YTIzOS03OTNlLTQwODItYWZkZS02NDU4ZjIzMTllN2UvOGRjNjg4YzgtZDI2My0z
ZTdiLWJlMjktZDRmZjRmNzNkMWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOGUyZGEyMzktNzkzZS00MDgyLWFm
ZGUtNjQ1OGYyMzE5ZTdlLzhlMmRhMjM5LTc5M2UtNDA4Mi1hZmRlLTY0NThmMjMx
OWU3ZS5jcmwwHwYDVR0jBBgwFoAUth6wyClvWdBkK0QvQaw4WOAHAegwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy84ZTJkYTIzOS03OTNlLTQwODItYWZkZS02NDU4
ZjIzMTllN2UuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAADwAC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAF0mElFDW5cW3yYbGRashV0B+DTUdgz9T63quy+BrOD1HJz7Wg7c
DMb110xTS45ZOn4ezT/PnlD44dKIOt0DLvR4/AmEjT2tOEfX6vQ23jtimEZg+7Ir
2Lxh5QDEOh16MZq1+2HHMUAlnMqHwOIopylIuwIy5xOhkhUaD/vblkUyV46Vy27H
ht7N0q2QJ25kT6HEnC3MOYC86jEFbGAiUWdLnEi0vMUrJFdf4jv399hq3I0w2JV+
qo7pZRexo2T5N9vPYQiV4lJlrxKw7/Czp3dnR52COYXLnuATXTBzxwg9JtQzHjGv
w9XBfKzFxHkQJOz4rzL1th1enT+DLGIP1Eg=
-----END CERTIFICATE-----
Generated at Mon Apr 28 16:47:29 2025 by rpki-client