Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/af058194-e76e-39db-a314-4e56257d2b78.roa
File: af058194-e76e-39db-a314-4e56257d2b78.roa (raw, json)
Hash identifier: kO2DBbOOsOoPvINBdjQN0JWSUss/FfcbO9r86nYjOXg=
Subject key identifier: 5A:2A:0B:FB:D1:08:3D:60:8F:CF:E2:38:86:DD:EB:6A:F6:B5:F0:90
Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial: 010D0C9F432858486AC5A2017F672BF3D3E45480
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/af058194-e76e-39db-a314-4e56257d2b78.roa
Signing time: Fri 03 Jan 2025 02:00:40 +0000
ROA not before: Fri 03 Jan 2025 02:00:40 +0000
ROA not after: Thu 03 Apr 2025 01:00:40 +0000
asID: 11232
IP address blocks: 2604:7a00:d800::/37 maxlen: 37
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6a:c5:a2:01:7f:67:2b:f3:d3:e4:54:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Validity
Not Before: Jan 3 02:00:40 2025 GMT
Not After : Apr 3 01:00:40 2025 GMT
Subject: CN=fdde5ba7-76a2-4008-bc06-fcecebedec38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6a:d0:a8:52:69:3d:21:83:dd:26:33:aa:a6:
8d:09:64:0f:e8:31:3f:48:be:da:ef:63:be:3b:ae:
8e:e4:4d:20:29:ef:84:c2:10:7e:3b:cf:94:60:cd:
7a:c3:c7:f5:fc:27:f3:61:45:ea:b0:60:9b:7d:0a:
50:09:90:a3:51:f4:36:a0:63:1f:eb:de:cc:ce:19:
da:fd:a1:00:93:e2:55:82:41:73:be:4a:16:ef:e4:
4d:36:77:74:0b:b5:89:50:b5:56:18:90:a4:d9:4d:
dd:53:0a:7b:ef:ea:18:85:ea:57:c4:87:0e:32:a6:
2b:3e:61:6b:de:17:35:f3:f1:44:73:96:8d:eb:9e:
0e:71:a5:a5:99:2a:2c:a9:fe:28:7d:b5:9d:a4:09:
37:03:07:85:d2:ff:78:f1:e0:6a:e6:4b:77:9f:ff:
ea:7b:f6:d3:25:34:d5:bd:ca:55:db:ac:2d:d0:ce:
98:b5:2b:e7:95:c9:9f:76:02:60:bd:94:dc:3b:83:
97:44:71:d2:c8:c3:8a:99:12:ee:96:47:15:52:2c:
81:64:50:c6:76:3d:26:f5:c6:2c:d9:74:cd:01:23:
e1:f7:b6:d0:7b:b8:77:d2:33:35:71:4f:4b:dc:f8:
4c:f5:8a:af:b1:5d:8c:ba:c7:26:0f:c5:34:cb:97:
d7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2A:0B:FB:D1:08:3D:60:8F:CF:E2:38:86:DD:EB:6A:F6:B5:F0:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/af058194-e76e-39db-a314-4e56257d2b78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
X509v3 Authority Key Identifier:
keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:7a00:d800::/37
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:2b:2a:64:ab:55:ff:e7:43:1f:74:0e:f0:f2:e4:e2:20:6e:
f4:88:bd:5a:3b:58:b9:73:a2:05:3f:0a:2b:f2:1b:c0:60:ee:
60:e6:8f:5e:53:f4:09:dd:b0:e4:2e:b3:b9:89:e5:94:4f:84:
88:da:d4:57:c9:b0:96:5c:a4:c3:31:3c:d2:85:27:2c:61:3c:
36:e8:b7:b2:97:90:12:62:5d:b8:e4:8d:47:79:07:d0:d1:7e:
ab:23:7c:bc:6a:45:ef:d4:b2:6a:f2:76:f6:0e:03:3e:35:06:
09:85:1a:8c:d6:ec:d0:33:b8:e8:93:f6:57:7d:c4:e8:69:bf:
3b:01:a0:06:3d:02:da:2b:11:57:ea:b9:0c:56:89:cd:21:18:
13:8c:c3:12:bf:8e:e6:5b:0b:0e:c8:78:c1:5e:fd:a0:ff:bd:
bc:fe:fa:d6:eb:b4:66:b9:5e:bb:2b:30:aa:8c:ed:2f:77:ca:
3b:a5:13:c8:39:fa:88:04:02:7e:ff:66:07:d5:d5:6f:78:7d:
94:c4:fd:87:36:7b:b1:56:18:a6:bc:de:0c:a5:97:f7:7c:f3:
b2:ae:81:e0:5b:6a:23:26:b2:97:bc:28:1e:73:d4:38:59:94:
8c:f5:19:07:a7:d7:a5:e1:dc:5b:78:15:86:98:ca:7d:61:ab:
1d:cc:b7:ed
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEhqxaIBf2cr89PkVIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3
MDg1MB4XDTI1MDEwMzAyMDA0MFoXDTI1MDQwMzAxMDA0MFowLzEtMCsGA1UEAxMk
ZmRkZTViYTctNzZhMi00MDA4LWJjMDYtZmNlY2ViZWRlYzM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGrQqFJpPSGD3SYzqqaNCWQP6DE/SL7a72O+
O66O5E0gKe+EwhB+O8+UYM16w8f1/CfzYUXqsGCbfQpQCZCjUfQ2oGMf697Mzhna
/aEAk+JVgkFzvkoW7+RNNnd0C7WJULVWGJCk2U3dUwp77+oYhepXxIcOMqYrPmFr
3hc18/FEc5aN654OcaWlmSosqf4ofbWdpAk3AweF0v948eBq5kt3n//qe/bTJTTV
vcpV26wt0M6YtSvnlcmfdgJgvZTcO4OXRHHSyMOKmRLulkcVUiyBZFDGdj0m9cYs
2XTNASPh97bQe7h30jM1cU9L3PhM9YqvsV2MuscmD8U0y5fXlQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFFoqC/vRCD1gj8/iOIbd62r2tfCQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2
M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvYWYwNTgxOTQtZTc2ZS0z
OWRiLWEzMTQtNGU1NjI1N2QyYjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm
YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3
NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2
NDNhNzcwODUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYDJgR6ANgw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAMisqZKtV/+dDH3QO8PLk4iBu9Ii9WjtYuXOiBT8KK/IbwGDuYOaP
XlP0Cd2w5C6zuYnllE+EiNrUV8mwllykwzE80oUnLGE8Nui3speQEmJduOSNR3kH
0NF+qyN8vGpF79SyavJ29g4DPjUGCYUajNbs0DO46JP2V33E6Gm/OwGgBj0C2isR
V+q5DFaJzSEYE4zDEr+O5lsLDsh4wV79oP+9vP761uu0ZrleuyswqoztL3fKO6UT
yDn6iAQCfv9mB9XVb3h9lMT9hzZ7sVYYprzeDKWX93zzsq6B4FtqIyayl7woHnPU
OFmUjPUZB6fXpeHcW3gVhpjKfWGrHcy37Q==
-----END CERTIFICATE-----
Generated at Sun Apr 27 23:51:19 2025 by rpki-client