Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/22a68b1c-ef57-32f7-9246-5158fb17a8e0.roa
File: 22a68b1c-ef57-32f7-9246-5158fb17a8e0.roa (raw, json)
Hash identifier: kmTRz6Tkpe7GTipC5Ty/fCFl0f5KuFtIINHB+N5+Lr0=
Subject key identifier: F6:75:A3:3D:DA:F4:A3:C5:BE:4E:43:64:B3:53:C4:70:6D:D0:0E:5F
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C117C010A845844BB76C680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/22a68b1c-ef57-32f7-9246-5158fb17a8e0.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 2601:640:4000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:7c:01:0a:84:58:44:bb:76:c6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=612fe138-121f-4acd-a8ed-1c67a89b0e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c8:33:a2:0a:9b:fd:80:5c:d4:fc:3d:1e:62:
78:41:bd:ef:70:ed:4b:03:51:85:61:96:e6:68:9f:
b9:4a:ca:eb:27:f1:7a:3f:1b:9f:51:a1:93:77:62:
14:ee:e3:a9:91:58:b9:8a:ea:2e:61:34:d2:57:1c:
4a:7d:3d:98:a6:12:e7:92:7b:67:ad:05:f0:9c:91:
13:6b:76:b5:f1:4b:d1:9e:b7:4e:72:e3:22:ca:cd:
7a:83:30:10:0a:00:24:72:32:0a:d4:34:7f:fd:12:
a3:a8:40:14:c7:3f:fe:fb:31:90:8a:fe:37:62:92:
e4:d2:3e:5e:6b:46:a4:fc:14:84:18:3c:db:c9:d1:
cc:40:6c:99:84:51:90:87:7f:f8:2e:bd:af:1f:c8:
df:76:68:3b:25:0b:25:9c:2a:80:26:2e:8e:57:da:
a4:23:2b:1e:dc:0a:b8:1d:7f:bd:5e:b4:a9:98:b0:
3c:17:f2:c7:72:31:4c:a1:b2:38:f5:30:5d:11:fd:
dd:a7:be:71:95:b0:da:7c:f3:5f:27:f6:ba:6d:cc:
8d:37:00:e0:ab:e7:b3:fb:d4:ea:a1:3c:e5:d1:88:
92:49:d0:e7:15:ff:e0:8b:0f:ab:c0:c8:52:88:76:
ab:79:70:2e:53:bf:ca:09:b4:dc:22:34:2b:74:35:
76:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:75:A3:3D:DA:F4:A3:C5:BE:4E:43:64:B3:53:C4:70:6D:D0:0E:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/22a68b1c-ef57-32f7-9246-5158fb17a8e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2601:640:4000::/34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:a9:ef:34:3c:bc:d1:b7:42:a7:90:51:c9:44:70:36:85:63:
c2:0d:94:bb:81:eb:68:bb:0e:e8:b1:a4:7e:ed:50:8a:07:e5:
15:cf:66:74:11:90:02:5d:82:2b:b1:d6:5a:84:d5:2e:48:b6:
43:f4:fa:fa:84:8d:41:95:16:c2:e7:8b:80:5b:a4:f5:b6:5a:
f9:3f:2a:bc:d2:e9:e2:17:d9:ef:2e:ee:0f:0b:f0:b8:03:e2:
5c:c1:b9:61:7c:09:75:6b:45:d4:05:bc:ee:40:c2:14:79:77:
95:04:ad:bd:22:21:2a:cb:22:7f:eb:60:f7:03:08:33:de:ff:
67:5f:35:e6:b0:5c:90:03:6c:fe:ca:2f:82:b2:f8:5f:5e:a0:
92:7b:19:b3:cd:29:4e:49:7f:41:d5:f1:ee:fc:22:60:65:fc:
d0:d4:e2:85:79:a0:5c:08:81:1f:5d:fe:84:20:65:7f:7a:99:
3e:0d:b4:e6:53:81:8c:af:b1:af:45:4f:a6:7e:50:c3:9e:f0:
37:27:70:0d:91:17:78:f3:a6:a3:f4:0e:60:02:7d:02:c3:4a:
e0:a1:09:e4:5d:b8:42:11:ad:23:82:c2:22:b3:cd:ff:51:2c:
f7:b7:08:63:00:13:23:dc:49:af:fb:23:d0:fd:2a:92:b7:d5:
5d:67:cd:4e
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEhMEXwBCoRYRLt2xoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
NjEyZmUxMzgtMTIxZi00YWNkLWE4ZWQtMWM2N2E4OWIwZTNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMgzogqb/YBc1Pw9HmJ4Qb3vcO1LA1GFYZbm
aJ+5SsrrJ/F6PxufUaGTd2IU7uOpkVi5iuouYTTSVxxKfT2YphLnkntnrQXwnJET
a3a18UvRnrdOcuMiys16gzAQCgAkcjIK1DR//RKjqEAUxz/++zGQiv43YpLk0j5e
a0ak/BSEGDzbydHMQGyZhFGQh3/4Lr2vH8jfdmg7JQslnCqAJi6OV9qkIyse3Aq4
HX+9XrSpmLA8F/LHcjFMobI49TBdEf3dp75xlbDafPNfJ/a6bcyNNwDgq+ez+9Tq
oTzl0YiSSdDnFf/giw+rwMhSiHareXAuU7/KCbTcIjQrdDV2zwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFPZ1oz3a9KPFvk5DZLNTxHBt0A5fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjJhNjhiMWMtZWY1Ny0z
MmY3LTkyNDYtNTE1OGZiMTdhOGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgEGQEAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAbKnvNDy80bdCp5BRyURwNoVjwg2Uu4HraLsO6LGkfu1QigflFc9m
dBGQAl2CK7HWWoTVLki2Q/T6+oSNQZUWwueLgFuk9bZa+T8qvNLp4hfZ7y7uDwvw
uAPiXMG5YXwJdWtF1AW87kDCFHl3lQStvSIhKssif+tg9wMIM97/Z1815rBckANs
/sovgrL4X16gknsZs80pTkl/QdXx7vwiYGX80NTihXmgXAiBH13+hCBlf3qZPg20
5lOBjK+xr0VPpn5Qw57wNydwDZEXePOmo/QOYAJ9AsNK4KEJ5F24QhGtI4LCIrPN
/1Es97cIYwATI9xJr/sj0P0qkrfVXWfNTg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 12:50:03 2025 by rpki-client