Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/25b92701-3c45-398d-9400-672d27ccdeb4.roa
File: 25b92701-3c45-398d-9400-672d27ccdeb4.roa (raw, json)
Hash identifier: +IYJ/eKcJTEuAPfjMbfVRwRtOZUesgebTmvEMMpSz0E=
Subject key identifier: 0A:14:40:56:64:91:E4:07:F9:1E:25:C8:DE:1B:4E:F1:1E:BE:BB:E5
Certificate issuer: /CN=4ee5141e-a069-4955-8c55-4da5dfd36fa7
Certificate serial: 010D0C9F4328584819CFCE1D4C38425AB4847880
Authority key identifier: 65:C9:42:6B:A0:76:47:52:56:27:29:98:79:48:05:81:BE:B5:AE:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/25b92701-3c45-398d-9400-672d27ccdeb4.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 0
IP address blocks: 2001:504:102::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:ce:1d:4c:38:42:5a:b4:84:78:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee5141e-a069-4955-8c55-4da5dfd36fa7
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=158eee1d-d1ca-4795-98a0-a9f40804c5e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0a:b1:c1:34:02:73:0c:cf:fc:da:85:21:74:
a8:f3:c9:ab:6d:ab:3a:36:7e:99:ed:b1:a2:1f:5d:
4f:0e:08:34:84:06:00:b8:c4:83:8f:c1:46:7b:68:
95:e2:68:5a:49:5d:bb:e2:71:1e:23:f8:34:85:f8:
ed:41:f1:92:b6:3f:d4:06:04:46:ae:4f:d5:96:e8:
49:a2:13:85:0f:8e:cf:bc:28:45:10:1a:91:78:86:
62:73:09:4d:96:f3:03:92:f7:44:2e:75:9c:5c:17:
37:a6:54:f7:a9:e6:79:dd:80:b6:38:90:40:16:64:
3f:39:b4:a3:5c:fc:a3:28:1a:79:d6:9e:d6:b1:8e:
74:d3:c8:b4:67:80:f5:7e:d6:49:72:d8:20:8d:7a:
e2:d1:15:f2:24:74:ba:ce:d7:1a:b9:3c:a3:94:d7:
a7:f1:c6:9c:60:3a:a7:25:6c:08:8e:b2:2c:ee:9e:
9b:dd:3f:4f:45:e5:23:fb:45:e4:bc:83:8c:bf:65:
9d:a7:43:52:c0:02:5a:45:bd:90:ff:de:4b:bb:ca:
22:a3:d0:e2:fb:8f:a9:fa:fd:4a:6a:30:fc:e2:72:
e7:c7:ce:df:88:0e:7e:23:53:ff:de:8d:70:02:2c:
4e:c7:4b:04:29:64:7f:c9:e5:fe:6a:ce:67:b6:35:
50:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:14:40:56:64:91:E4:07:F9:1E:25:C8:DE:1B:4E:F1:1E:BE:BB:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/25b92701-3c45-398d-9400-672d27ccdeb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.crl
X509v3 Authority Key Identifier:
keyid:65:C9:42:6B:A0:76:47:52:56:27:29:98:79:48:05:81:BE:B5:AE:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:504:102::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:16:51:ba:9d:ff:6e:01:a4:0f:ba:8d:a5:a9:96:f0:5f:cb:
f3:07:fa:79:4a:49:db:39:75:fb:cb:56:84:bd:7f:49:eb:20:
9e:fd:89:97:7e:fc:0c:e1:33:27:f5:30:b8:f2:e5:a2:7d:ed:
8f:ee:8b:74:3e:22:e5:f3:fa:46:56:92:b1:68:0a:8c:6b:b7:
83:c5:c1:c5:b7:b4:57:aa:d9:41:7c:75:65:c6:d1:3a:20:68:
27:68:e8:25:f7:c8:55:41:cc:6b:0d:d2:ea:f3:ca:51:42:05:
cf:5d:b5:b2:ba:d4:de:73:d0:b2:9a:0b:5f:bb:c7:a3:0b:e1:
e9:1d:7e:a0:25:b5:7a:46:23:98:a4:bf:0f:0e:4c:d4:81:de:
09:c6:6f:bc:b8:3a:e4:d1:76:41:b7:83:4e:71:e2:83:c4:51:
20:d3:f3:54:b3:fa:52:cd:1e:70:fe:d1:5f:e0:70:bc:70:89:
a6:e7:d0:49:fc:47:1b:9d:c5:b5:1d:13:4b:f5:c3:4e:0e:5e:
77:97:65:5b:58:12:82:12:e4:19:65:74:20:93:4a:3e:02:83:
cd:85:49:4d:bf:f5:d6:9b:27:b5:b7:d8:31:af:b6:12:90:46:
d2:07:69:12:bd:cc:fa:83:74:4b:35:2d:c2:aa:8e:1d:cc:f2:
2a:b1:bd:6e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgZz84dTDhCWrSEeIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGVlNTE0MWUtYTA2OS00OTU1LThjNTUtNGRhNWRmZDM2
ZmE3MB4XDTI0MTIwNTAyMDAzOVoXDTI1MDMwNTAyMDAzOVowLzEtMCsGA1UEAxMk
MTU4ZWVlMWQtZDFjYS00Nzk1LTk4YTAtYTlmNDA4MDRjNWU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AqxwTQCcwzP/NqFIXSo88mrbas6Nn6Z7bGi
H11PDgg0hAYAuMSDj8FGe2iV4mhaSV274nEeI/g0hfjtQfGStj/UBgRGrk/VluhJ
ohOFD47PvChFEBqReIZicwlNlvMDkvdELnWcXBc3plT3qeZ53YC2OJBAFmQ/ObSj
XPyjKBp51p7WsY5008i0Z4D1ftZJctggjXri0RXyJHS6ztcauTyjlNen8cacYDqn
JWwIjrIs7p6b3T9PReUj+0XkvIOMv2Wdp0NSwAJaRb2Q/95Lu8oio9Di+4+p+v1K
ajD84nLnx87fiA5+I1P/3o1wAixOx0sEKWR/yeX+as5ntjVQpQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAoUQFZkkeQH+R4lyN4bTvEevrvlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWU1
MTQxZS1hMDY5LTQ5NTUtOGM1NS00ZGE1ZGZkMzZmYTcvMjViOTI3MDEtM2M0NS0z
OThkLTk0MDAtNjcyZDI3Y2NkZWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGVlNTE0MWUtYTA2OS00OTU1LThj
NTUtNGRhNWRmZDM2ZmE3LzRlZTUxNDFlLWEwNjktNDk1NS04YzU1LTRkYTVkZmQz
NmZhNy5jcmwwHwYDVR0jBBgwFoAUZclCa6B2R1JWJymYeUgFgb61rrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWU1MTQxZS1hMDY5LTQ5NTUtOGM1NS00ZGE1
ZGZkMzZmYTcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBAEC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJgWUbqd/24BpA+6jaWplvBfy/MH+nlKSds5dfvLVoS9f0nrIJ79
iZd+/AzhMyf1MLjy5aJ97Y/ui3Q+IuXz+kZWkrFoCoxrt4PFwcW3tFeq2UF8dWXG
0TogaCdo6CX3yFVBzGsN0urzylFCBc9dtbK61N5z0LKaC1+7x6ML4ekdfqAltXpG
I5ikvw8OTNSB3gnGb7y4OuTRdkG3g05x4oPEUSDT81Sz+lLNHnD+0V/gcLxwiabn
0En8RxudxbUdE0v1w04OXneXZVtYEoIS5BlldCCTSj4Cg82FSU2/9dabJ7W32DGv
thKQRtIHaRK9zPqDdEs1LcKqjh3M8iqxvW4=
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:30:04 2025 by rpki-client