Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/a68416c0-1952-319d-8981-4f1a935dc45c.roa
File: a68416c0-1952-319d-8981-4f1a935dc45c.roa (raw, json)
Hash identifier: ALZegDVEjPBWEAvdG4Wn9o5A1pGRkJLGiAjuWN+d/vo=
Subject key identifier: 09:9A:C0:59:87:63:24:3E:C5:BC:60:E5:E9:AC:7D:C0:61:F6:73:FE
Certificate issuer: /CN=e89b44b0-a151-49f2-b4a6-d917e3c95e83
Certificate serial: 010D0C9F43285848159FE9FBD02C4299675F3440
Authority key identifier: 65:DE:38:46:E6:89:94:A2:11:8F:52:2F:F6:E4:DD:24:48:A6:04:60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/a68416c0-1952-319d-8981-4f1a935dc45c.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 0
IP address blocks: 2001:504:3f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:e9:fb:d0:2c:42:99:67:5f:34:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e89b44b0-a151-49f2-b4a6-d917e3c95e83
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=42804ff6-9f98-4036-a7e1-fc91285dd1c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:32:84:ef:64:ef:48:b7:b3:54:c8:04:de:df:
81:43:a5:52:33:3f:59:3a:ec:b8:c3:89:f8:da:75:
e8:82:eb:ea:59:9f:32:ef:87:03:4f:4e:3b:5f:71:
6f:8a:75:35:99:b5:39:f2:55:73:bd:57:e1:50:ed:
1b:f2:0e:75:dc:d6:23:72:35:6e:4c:b9:c1:92:c1:
f6:ca:da:30:bb:22:f4:40:e8:78:4f:5a:0b:c9:c9:
83:14:60:1d:75:49:16:7a:fa:f5:b0:8b:3e:88:32:
cf:e0:6e:2b:36:55:a3:c4:99:84:b6:32:58:cd:e7:
d5:ab:41:c2:0a:9e:5b:8d:ba:9a:45:b9:08:d4:06:
98:7b:48:8e:78:49:dc:91:ad:dc:94:36:0f:79:fd:
09:84:2a:b8:59:d0:cc:be:fb:e1:76:d1:eb:eb:90:
ad:1f:ce:ac:38:95:7b:48:6a:20:93:6e:d5:f8:7d:
f0:39:c7:47:c5:ea:06:cf:95:6f:9e:3a:69:5f:9b:
da:06:cf:2d:47:3a:58:0e:5e:79:5e:34:c5:c3:04:
ee:27:be:45:b9:b1:3c:f2:e6:0b:9f:47:cf:e0:e1:
c8:98:94:41:db:d5:bc:42:b4:15:24:ad:ec:6b:3d:
d2:dd:43:02:46:90:af:89:65:c6:3f:d2:63:5a:de:
08:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:9A:C0:59:87:63:24:3E:C5:BC:60:E5:E9:AC:7D:C0:61:F6:73:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/a68416c0-1952-319d-8981-4f1a935dc45c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/e89b44b0-a151-49f2-b4a6-d917e3c95e83.crl
X509v3 Authority Key Identifier:
keyid:65:DE:38:46:E6:89:94:A2:11:8F:52:2F:F6:E4:DD:24:48:A6:04:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:504:3f::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:b0:50:bc:3c:ea:9b:5f:d1:5c:23:cd:24:c6:cd:59:4d:3c:
bc:a9:4e:6d:99:78:f7:e2:5b:0e:59:7e:14:93:6a:a5:a7:1f:
b6:53:8c:63:bd:12:8b:ed:10:08:ea:5f:3c:7c:d8:ed:3f:ba:
86:bc:c9:ca:07:f9:5f:31:7c:e5:cb:bc:8d:56:24:92:30:c9:
2e:85:b1:be:94:bc:eb:d0:aa:d2:06:15:7d:94:03:72:8c:c4:
d5:de:62:96:e1:64:e6:5d:cc:b1:8e:73:d6:6c:6a:4a:a9:6e:
51:32:09:47:3f:51:bd:d1:cf:c0:3e:36:23:43:b5:01:91:7d:
79:36:33:f0:f5:2c:ca:12:cc:dc:b4:70:28:f1:04:51:27:e6:
2e:b0:0e:b3:e2:f0:74:86:41:52:a8:5d:d7:d2:44:fb:4c:e9:
7f:1b:07:1c:15:c3:4f:78:47:5b:37:20:8a:94:09:5c:61:4a:
b2:e3:90:a3:9d:2d:52:b4:81:52:e1:7d:5d:fd:35:4d:e6:67:
ca:54:47:e0:ef:44:69:dd:a8:67:e1:3c:28:5c:8d:7b:0d:c9:
4d:d8:57:25:d9:38:34:80:83:28:95:6a:25:66:85:0e:7e:35:
ad:7b:78:d2:5e:b3:cb:c4:a2:9c:de:8b:d6:43:61:03:20:2d:
94:aa:60:3b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgVn+n70CxCmWdfNEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTg5YjQ0YjAtYTE1MS00OWYyLWI0YTYtZDkxN2UzYzk1
ZTgzMB4XDTI0MTIwMzE0MDA1MloXDTI1MDMwMzE0MDA1MlowLzEtMCsGA1UEAxMk
NDI4MDRmZjYtOWY5OC00MDM2LWE3ZTEtZmM5MTI4NWRkMWMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDKE72TvSLezVMgE3t+BQ6VSMz9ZOuy4w4n4
2nXoguvqWZ8y74cDT047X3FvinU1mbU58lVzvVfhUO0b8g513NYjcjVuTLnBksH2
ytowuyL0QOh4T1oLycmDFGAddUkWevr1sIs+iDLP4G4rNlWjxJmEtjJYzefVq0HC
Cp5bjbqaRbkI1AaYe0iOeEncka3clDYPef0JhCq4WdDMvvvhdtHr65CtH86sOJV7
SGogk27V+H3wOcdHxeoGz5VvnjppX5vaBs8tRzpYDl55XjTFwwTuJ75FubE88uYL
n0fP4OHImJRB29W8QrQVJK3saz3S3UMCRpCviWXGP9JjWt4ISwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAmawFmHYyQ+xbxg5emsfcBh9nP+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lODli
NDRiMC1hMTUxLTQ5ZjItYjRhNi1kOTE3ZTNjOTVlODMvYTY4NDE2YzAtMTk1Mi0z
MTlkLTg5ODEtNGYxYTkzNWRjNDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTg5YjQ0YjAtYTE1MS00OWYyLWI0
YTYtZDkxN2UzYzk1ZTgzL2U4OWI0NGIwLWExNTEtNDlmMi1iNGE2LWQ5MTdlM2M5
NWU4My5jcmwwHwYDVR0jBBgwFoAUZd44RuaJlKIRj1Iv9uTdJEimBGAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lODliNDRiMC1hMTUxLTQ5ZjItYjRhNi1kOTE3
ZTNjOTVlODMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBAA/
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABqwULw86ptf0VwjzSTGzVlNPLypTm2ZePfiWw5ZfhSTaqWnH7ZT
jGO9EovtEAjqXzx82O0/uoa8ycoH+V8xfOXLvI1WJJIwyS6Fsb6UvOvQqtIGFX2U
A3KMxNXeYpbhZOZdzLGOc9ZsakqpblEyCUc/Ub3Rz8A+NiNDtQGRfXk2M/D1LMoS
zNy0cCjxBFEn5i6wDrPi8HSGQVKoXdfSRPtM6X8bBxwVw094R1s3IIqUCVxhSrLj
kKOdLVK0gVLhfV39NU3mZ8pUR+DvRGndqGfhPChcjXsNyU3YVyXZODSAgyiVaiVm
hQ5+Na17eNJes8vEopzei9ZDYQMgLZSqYDs=
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:29:54 2025 by rpki-client