Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/34f2c767-116c-381b-b77f-2c51ea9a987b.roa
File: 34f2c767-116c-381b-b77f-2c51ea9a987b.roa (raw, json)
Hash identifier: iHfCaSXds8FTpbTuzgyMCu803XDjZEXgDnd/Xu7rNHA=
Subject key identifier: 50:E1:C0:28:2F:55:84:68:9C:93:5A:6C:F1:52:14:26:93:81:B2:B5
Certificate issuer: /CN=9fbd098f-9e01-4c26-9395-e5b63399acaf
Certificate serial: 010D0C9F43285848A996244AD2DBE272E5772880
Authority key identifier: 38:52:68:1E:F9:A1:C1:15:72:67:A3:05:E1:1A:68:FC:23:8B:73:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/34f2c767-116c-381b-b77f-2c51ea9a987b.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 14939
IP address blocks: 2604:5000:2000::/36 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:24:4a:d2:db:e2:72:e5:77:28:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fbd098f-9e01-4c26-9395-e5b63399acaf
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=c6657779-c0f5-4c39-8d1c-240c7faede74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:78:ce:cc:26:75:b1:ac:fc:6a:ac:02:8c:96:
ef:76:61:da:25:f2:c0:8d:15:9b:7d:d5:d2:87:15:
b0:dd:36:0b:4b:ca:eb:21:31:c1:b6:2b:d6:81:c1:
83:60:35:d6:d4:21:e1:34:fa:2e:13:63:89:a3:16:
49:79:db:70:13:fa:90:2e:06:9c:8e:f2:95:4e:e5:
9b:a8:fe:eb:58:a7:69:58:4d:9e:5e:e4:19:66:d0:
9d:24:78:2b:9b:af:16:c9:20:8c:d8:d1:69:9b:ed:
9f:04:7e:93:aa:42:06:ee:a8:f3:a7:26:22:f4:36:
f4:b4:11:5a:a6:99:4f:28:5a:64:4e:52:86:4e:8d:
d7:1e:19:3a:2f:63:b9:86:bc:1d:22:bd:a7:d5:1a:
dd:35:08:28:0f:d4:2c:1f:67:9a:50:55:e9:fd:88:
9c:69:c3:b1:0f:aa:0a:13:27:54:e6:98:01:e9:39:
fa:ab:bb:dd:bd:21:a5:89:63:9f:9c:d4:40:8b:2a:
41:17:c6:1e:06:d5:c6:5a:23:b5:0e:96:34:05:e3:
48:9e:f1:bd:92:5a:af:78:e7:48:34:3e:85:84:28:
65:39:a4:c6:96:7c:0c:78:7a:8e:63:18:48:f6:c1:
8f:f4:e7:da:63:3a:3a:40:b9:66:81:49:5d:db:c7:
90:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E1:C0:28:2F:55:84:68:9C:93:5A:6C:F1:52:14:26:93:81:B2:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/34f2c767-116c-381b-b77f-2c51ea9a987b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/9fbd098f-9e01-4c26-9395-e5b63399acaf.crl
X509v3 Authority Key Identifier:
keyid:38:52:68:1E:F9:A1:C1:15:72:67:A3:05:E1:1A:68:FC:23:8B:73:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:5000:2000::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d2:c5:a0:11:02:2e:3d:1d:27:56:3f:79:79:37:76:03:e5:b8:
af:c8:b6:1d:c8:1c:18:e9:ad:a6:2a:4d:5e:0f:e3:a5:bc:ba:
15:8f:65:22:21:7c:d0:f2:22:8e:36:c4:b3:e2:40:d7:df:6c:
c8:cd:32:5a:df:87:20:7b:f8:5d:cc:cc:6b:d0:14:64:11:8e:
d6:5a:e1:0a:08:de:0e:2d:59:3b:91:90:65:92:52:e0:05:c9:
56:4c:1b:ea:22:bd:e6:ab:04:82:4e:ad:d7:1d:3f:e0:fa:2f:
14:ef:38:2e:f1:00:df:8a:e1:0a:04:fe:36:ed:bb:43:04:a5:
42:15:4a:26:89:4c:06:dd:ef:4e:f6:44:ee:6c:6c:c2:d0:d9:
d6:0c:59:36:34:42:f3:92:bf:cb:0e:91:ff:b4:4e:ac:4c:dd:
3f:c8:ff:11:27:2c:db:f2:ea:a2:75:13:c9:33:08:18:d3:ba:
7d:30:2a:1b:ab:79:60:3c:e8:26:42:55:28:0f:25:30:3a:fb:
bf:1c:ba:ee:b2:e2:31:bf:09:3f:75:f4:8f:55:6a:f6:59:24:
c1:bc:14:36:20:3b:c0:4e:86:63:d5:54:f5:df:45:42:18:38:
c0:f6:37:48:5d:be:f5:04:dc:2d:06:79:c5:1c:06:47:d7:28:
b1:13:2c:85
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEipliRK0tvicuV3KIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWZiZDA5OGYtOWUwMS00YzI2LTkzOTUtZTViNjMzOTlh
Y2FmMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk
YzY2NTc3NzktYzBmNS00YzM5LThkMWMtMjQwYzdmYWVkZTc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnjOzCZ1saz8aqwCjJbvdmHaJfLAjRWbfdXS
hxWw3TYLS8rrITHBtivWgcGDYDXW1CHhNPouE2OJoxZJedtwE/qQLgacjvKVTuWb
qP7rWKdpWE2eXuQZZtCdJHgrm68WySCM2NFpm+2fBH6TqkIG7qjzpyYi9Db0tBFa
pplPKFpkTlKGTo3XHhk6L2O5hrwdIr2n1RrdNQgoD9QsH2eaUFXp/YicacOxD6oK
EydU5pgB6Tn6q7vdvSGliWOfnNRAiypBF8YeBtXGWiO1DpY0BeNInvG9klqveOdI
ND6FhChlOaTGlnwMeHqOYxhI9sGP9OfaYzo6QLlmgUld28eQTwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFFDhwCgvVYRonJNabPFSFCaTgbK1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85ZmJk
MDk4Zi05ZTAxLTRjMjYtOTM5NS1lNWI2MzM5OWFjYWYvMzRmMmM3NjctMTE2Yy0z
ODFiLWI3N2YtMmM1MWVhOWE5ODdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOWZiZDA5OGYtOWUwMS00YzI2LTkz
OTUtZTViNjMzOTlhY2FmLzlmYmQwOThmLTllMDEtNGMyNi05Mzk1LWU1YjYzMzk5
YWNhZi5jcmwwHwYDVR0jBBgwFoAUOFJoHvmhwRVyZ6MF4Rpo/COLcxAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85ZmJkMDk4Zi05ZTAxLTRjMjYtOTM5NS1lNWI2
MzM5OWFjYWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgRQACAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEA0sWgEQIuPR0nVj95eTd2A+W4r8i2HcgcGOmtpipNXg/jpby6FY9l
IiF80PIijjbEs+JA199syM0yWt+HIHv4XczMa9AUZBGO1lrhCgjeDi1ZO5GQZZJS
4AXJVkwb6iK95qsEgk6t1x0/4PovFO84LvEA34rhCgT+Nu27QwSlQhVKJolMBt3v
TvZE7mxswtDZ1gxZNjRC85K/yw6R/7ROrEzdP8j/EScs2/LqonUTyTMIGNO6fTAq
G6t5YDzoJkJVKA8lMDr7vxy67rLiMb8JP3X0j1Vq9lkkwbwUNiA7wE6GY9VU9d9F
Qhg4wPY3SF2+9QTcLQZ5xRwGR9cosRMshQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 12:21:29 2025 by rpki-client