Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/3a301ecb-1b30-3b2d-ac4e-3c85c04dfc19.roa
File: 3a301ecb-1b30-3b2d-ac4e-3c85c04dfc19.roa (raw, json)
Hash identifier: iFX5NSiCThlLX/rAwKKhG5Y7Arttqkt1ICzjZcnNUSU=
Subject key identifier: 11:FF:68:DA:C0:68:BE:9F:73:A4:96:00:37:7E:18:EB:F3:63:66:07
Certificate issuer: /CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
Certificate serial: 010D0C9F4328584871C0776C6179238112B7B2C0
Authority key identifier: E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/3a301ecb-1b30-3b2d-ac4e-3c85c04dfc19.roa
Signing time: Sun 05 Jan 2025 14:00:52 +0000
ROA not before: Sun 05 Jan 2025 14:00:52 +0000
ROA not after: Sat 05 Apr 2025 13:00:52 +0000
asID: 7992
IP address blocks: 2602:200::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:71:c0:77:6c:61:79:23:81:12:b7:b2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
Validity
Not Before: Jan 5 14:00:52 2025 GMT
Not After : Apr 5 13:00:52 2025 GMT
Subject: CN=6dbbaf37-8f5b-4f80-960e-50ae58af7be2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bb:0c:ca:68:00:1a:50:35:08:61:8b:f6:ae:
a1:64:92:9e:6d:d4:ab:f0:68:cb:39:4b:4a:9b:cb:
ef:1a:d2:f0:3f:f1:a7:63:e6:0c:74:3d:0e:63:1d:
c3:16:b2:d5:10:1b:ef:6a:c7:d1:a8:92:75:19:f6:
6f:65:a5:fd:6d:93:dd:f4:6f:6f:e6:0f:f1:20:78:
25:41:db:84:08:f9:b4:a8:71:64:c8:0d:8b:c6:b1:
2e:15:11:76:58:95:d8:e9:63:23:fc:5b:85:1c:ff:
f7:63:5f:4e:af:84:a8:d5:7a:1a:44:1f:17:ba:89:
75:13:e9:e9:d4:77:f9:96:a0:24:90:ed:6e:ff:9c:
3d:0d:e7:29:0a:c5:11:64:95:5c:4e:6d:80:22:89:
d1:f9:ec:01:f5:fc:a7:21:0a:0d:3b:57:6b:43:25:
8c:d4:27:f0:a4:a0:a9:04:4e:40:bf:72:d9:e8:09:
54:52:1c:88:ca:db:18:6b:02:cc:63:dc:bc:bc:52:
32:fe:e5:55:9a:57:19:9c:e2:f0:c6:98:c0:0c:68:
4a:69:a5:ad:50:f6:c5:0a:6d:94:90:73:a4:88:98:
d4:13:2f:3e:46:9d:60:a4:1a:66:4a:8d:43:22:d1:
22:17:74:f2:d4:87:f5:69:17:94:07:e4:1b:92:30:
ae:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:FF:68:DA:C0:68:BE:9F:73:A4:96:00:37:7E:18:EB:F3:63:66:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/3a301ecb-1b30-3b2d-ac4e-3c85c04dfc19.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl
X509v3 Authority Key Identifier:
keyid:E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:200::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:a2:dd:67:ab:03:b7:ee:5d:eb:4c:5c:5e:53:d1:58:a2:89:
78:50:a0:d2:63:02:dd:81:ef:eb:7b:0f:09:36:58:20:65:fc:
f9:ed:37:53:f5:09:9c:bf:e3:ef:80:26:58:c1:00:f8:c1:84:
89:fd:c3:8a:e2:94:12:25:be:ed:f2:81:64:b2:1d:7f:69:dd:
bd:48:d0:1e:d7:10:aa:30:99:8d:c5:e4:e2:7d:8c:d3:c3:cc:
5e:38:69:38:af:7e:2a:7a:b0:c8:84:68:d3:fa:78:6a:50:96:
8e:35:18:05:a3:4c:82:24:cd:a8:20:cd:3b:53:d9:8e:67:72:
74:80:f5:95:b1:dd:7f:51:8d:67:5c:fe:dd:2e:51:48:71:16:
9e:7c:b4:f4:b4:7c:c8:1a:17:24:06:65:ea:83:10:0c:3c:a8:
55:da:19:53:53:7a:26:06:23:77:d6:d3:af:58:4f:a8:2a:a2:
d4:7e:10:ff:e4:11:9b:c9:75:3c:7b:98:32:b5:6c:d9:26:51:
c0:9e:2a:92:37:ab:d0:3c:fb:19:49:47:05:87:fc:23:0c:62:
f0:ff:e2:37:89:01:29:83:9a:a7:a3:bf:12:47:0e:9a:ea:0a:
10:22:30:12:15:0a:a0:e5:b4:86:ad:16:76:a9:95:ff:08:75:
06:07:f4:ed
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEhxwHdsYXkjgRK3ssAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzNmMjg0N2QtNTNhYi00YWJiLWE1ZTUtMjZiOTk4Yzdm
Zjk4MB4XDTI1MDEwNTE0MDA1MloXDTI1MDQwNTEzMDA1MlowLzEtMCsGA1UEAxMk
NmRiYmFmMzctOGY1Yi00ZjgwLTk2MGUtNTBhZTU4YWY3YmUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrsMymgAGlA1CGGL9q6hZJKebdSr8GjLOUtK
m8vvGtLwP/GnY+YMdD0OYx3DFrLVEBvvasfRqJJ1GfZvZaX9bZPd9G9v5g/xIHgl
QduECPm0qHFkyA2LxrEuFRF2WJXY6WMj/FuFHP/3Y19Or4So1XoaRB8Xuol1E+np
1Hf5lqAkkO1u/5w9DecpCsURZJVcTm2AIonR+ewB9fynIQoNO1drQyWM1CfwpKCp
BE5Av3LZ6AlUUhyIytsYawLMY9y8vFIy/uVVmlcZnOLwxpjADGhKaaWtUPbFCm2U
kHOkiJjUEy8+Rp1gpBpmSo1DItEiF3Ty1If1aReUB+QbkjCuQwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFBH/aNrAaL6fc6SWADd+GOvzY2YHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83M2Yy
ODQ3ZC01M2FiLTRhYmItYTVlNS0yNmI5OThjN2ZmOTgvM2EzMDFlY2ItMWIzMC0z
YjJkLWFjNGUtM2M4NWMwNGRmYzE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNzNmMjg0N2QtNTNhYi00YWJiLWE1
ZTUtMjZiOTk4YzdmZjk4LzczZjI4NDdkLTUzYWItNGFiYi1hNWU1LTI2Yjk5OGM3
ZmY5OC5jcmwwHwYDVR0jBBgwFoAU4z9DS4XDJg2cVrC7yD+2Teg7fcswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi83M2YyODQ3ZC01M2FiLTRhYmItYTVlNS0yNmI5
OThjN2ZmOTguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgICADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA9ot1nqwO37l3rTFxeU9FYool4UKDSYwLdge/rew8JNlggZfz57TdT
9Qmcv+PvgCZYwQD4wYSJ/cOK4pQSJb7t8oFksh1/ad29SNAe1xCqMJmNxeTifYzT
w8xeOGk4r34qerDIhGjT+nhqUJaONRgFo0yCJM2oIM07U9mOZ3J0gPWVsd1/UY1n
XP7dLlFIcRaefLT0tHzIGhckBmXqgxAMPKhV2hlTU3omBiN31tOvWE+oKqLUfhD/
5BGbyXU8e5gytWzZJlHAniqSN6vQPPsZSUcFh/wjDGLw/+I3iQEpg5qno78SRw6a
6goQIjASFQqg5bSGrRZ2qZX/CHUGB/Tt
-----END CERTIFICATE-----
Generated at Mon May 12 11:34:21 2025 by rpki-client