Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e32e81b4-c2a3-3931-ae9b-64260737fd0a.roa
File: e32e81b4-c2a3-3931-ae9b-64260737fd0a.roa (raw, json)
Hash identifier: yKjz6tpoFCJ8+uUMShVv6Y+U6joV0yiwrVMqq7zlvKw=
Subject key identifier: 06:F4:36:47:AE:84:75:CC:45:9A:07:71:94:AA:D6:46:F6:85:01:84
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F432858482D5AA3C03D5F03D36D13EE20
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e32e81b4-c2a3-3931-ae9b-64260737fd0a.roa
Signing time: Thu 12 Dec 2024 02:00:38 +0000
ROA not before: Thu 12 Dec 2024 02:00:38 +0000
ROA not after: Wed 12 Mar 2025 01:00:38 +0000
asID: 22773
IP address blocks: 2600:8809:4000::/35 maxlen: 35
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2d:5a:a3:c0:3d:5f:03:d3:6d:13:ee:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Dec 12 02:00:38 2024 GMT
Not After : Mar 12 01:00:38 2025 GMT
Subject: CN=3781de42-ef42-4b50-a43c-6660b1c7a743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:41:99:d0:b5:05:22:7b:d4:be:96:f3:4c:52:
0d:37:14:11:ec:12:9f:89:b3:de:c9:ee:e3:60:f9:
71:74:ad:7b:59:da:d0:19:4c:23:eb:1d:d9:47:35:
99:50:b5:7a:b4:ae:a9:53:50:17:00:34:d0:4b:34:
25:94:0f:1e:b0:31:9e:1c:f9:29:de:e9:96:75:04:
12:ec:47:61:40:c7:f7:be:47:03:24:64:ad:ca:b0:
47:7d:f2:9f:52:3d:ad:6f:e7:d6:fd:91:b0:e4:a1:
86:cf:a6:0a:f3:b7:b4:86:2e:55:04:a9:b6:cd:82:
52:de:d5:e3:1e:fb:36:94:ac:42:74:ea:a9:5f:fb:
34:b6:f0:15:ab:42:fd:98:1e:5e:cc:b4:6d:28:15:
c5:e5:37:f0:96:b2:4d:8c:02:d6:30:0c:53:e7:71:
ac:a9:2c:79:91:cd:2f:43:81:87:77:77:70:98:04:
42:ab:4b:f6:c3:49:2f:cf:c6:28:d5:ea:73:9a:df:
28:dd:30:07:93:9c:b5:20:48:0c:06:e3:d6:7b:ff:
30:29:27:b4:55:f6:45:d3:d2:82:33:17:37:6f:3c:
b1:50:1b:9b:ab:e0:ff:d4:86:bc:37:63:73:44:2a:
2f:0d:a4:63:fa:a2:ca:2c:b4:cf:82:00:4c:c4:2b:
f2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F4:36:47:AE:84:75:CC:45:9A:07:71:94:AA:D6:46:F6:85:01:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e32e81b4-c2a3-3931-ae9b-64260737fd0a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:8809:4000::/35
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:33:97:8c:5c:9a:37:19:65:46:c9:e0:94:f4:8d:a7:9f:57:
c8:06:69:fe:2e:3d:b8:3e:51:cd:e2:07:a2:7e:e9:28:36:d7:
ad:56:84:2c:09:c6:7a:32:88:b9:4c:fe:2c:af:9c:22:1c:b6:
b5:2c:82:bc:26:9a:63:aa:bf:76:20:c5:b7:2c:68:43:1d:0b:
40:68:62:be:34:4e:ab:46:2c:1d:79:d3:de:17:0c:98:ba:a8:
fa:8b:9d:b1:ed:c7:59:d2:7d:78:b8:55:48:21:bb:c4:99:42:
a3:8b:7e:dc:cc:c4:8e:04:02:35:22:8e:d6:bb:b2:6f:fc:68:
7d:0a:63:51:81:48:c4:0a:a2:92:d5:e8:ae:aa:ba:98:ee:c2:
87:d4:21:ec:6f:40:ea:55:7e:b7:79:f3:20:da:19:cf:5a:d2:
15:64:59:ee:92:f7:bf:4a:8e:d4:7e:da:3a:56:90:70:2e:cf:
09:87:14:73:6d:5e:39:7e:b9:20:7b:00:58:ae:3e:dc:28:b5:
bc:b0:74:b4:bd:4c:4c:49:43:b9:ff:4b:17:4e:8c:3b:37:3c:
49:99:86:9b:bb:1c:01:4b:d8:ca:7c:c6:cb:18:49:72:2e:fa:
f5:6b:39:d1:48:9d:eb:35:2d:21:35:3a:c4:b2:53:ef:a5:7a:
15:46:50:9e
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEgtWqPAPV8D020T7iAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI0MTIxMjAyMDAzOFoXDTI1MDMxMjAxMDAzOFowLzEtMCsGA1UEAxMk
Mzc4MWRlNDItZWY0Mi00YjUwLWE0M2MtNjY2MGIxYzdhNzQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUGZ0LUFInvUvpbzTFINNxQR7BKfibPeye7j
YPlxdK17WdrQGUwj6x3ZRzWZULV6tK6pU1AXADTQSzQllA8esDGeHPkp3umWdQQS
7EdhQMf3vkcDJGStyrBHffKfUj2tb+fW/ZGw5KGGz6YK87e0hi5VBKm2zYJS3tXj
Hvs2lKxCdOqpX/s0tvAVq0L9mB5ezLRtKBXF5TfwlrJNjALWMAxT53GsqSx5kc0v
Q4GHd3dwmARCq0v2w0kvz8Yo1epzmt8o3TAHk5y1IEgMBuPWe/8wKSe0VfZF09KC
Mxc3bzyxUBubq+D/1Ia8N2NzRCovDaRj+qLKLLTPggBMxCvyjQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFAb0NkeuhHXMRZoHcZSq1kb2hQGEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZTMyZTgxYjQtYzJhMy0z
OTMxLWFlOWItNjQyNjA3MzdmZDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYFJgCICUAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAXTOXjFyaNxllRsnglPSNp59XyAZp/i49uD5RzeIHon7pKDbXrVaE
LAnGejKIuUz+LK+cIhy2tSyCvCaaY6q/diDFtyxoQx0LQGhivjROq0YsHXnT3hcM
mLqo+oudse3HWdJ9eLhVSCG7xJlCo4t+3MzEjgQCNSKO1ruyb/xofQpjUYFIxAqi
ktXorqq6mO7Ch9Qh7G9A6lV+t3nzINoZz1rSFWRZ7pL3v0qO1H7aOlaQcC7PCYcU
c21eOX65IHsAWK4+3Ci1vLB0tL1MTElDuf9LF06MOzc8SZmGm7scAUvYynzGyxhJ
ci769Ws50Uid6zUtITU6xLJT76V6FUZQng==
-----END CERTIFICATE-----
Generated at Sat Apr 26 11:24:24 2025 by rpki-client