Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e61fabb-95c6-4ab3-a1ec-b077e850f010/244878e0-1aaa-3f0d-ae99-b7a9d9c41963.roa
File: 244878e0-1aaa-3f0d-ae99-b7a9d9c41963.roa (raw, json)
Hash identifier: g0octSG4MZ03r4PPLhU++O3/8ziWhDvRjW+HUjdCIKs=
Subject key identifier: 74:E8:17:0B:FC:E3:21:B9:0D:C2:FD:96:46:DC:67:19:71:25:EF:F2
Certificate issuer: /CN=7e61fabb-95c6-4ab3-a1ec-b077e850f010
Certificate serial: 010D0C9F432858485F9AE178AD81E864E088CD40
Authority key identifier: E8:97:9D:55:E3:53:AB:EF:00:F2:13:00:A9:2D:D2:DA:F3:14:93:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e61fabb-95c6-4ab3-a1ec-b077e850f010.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e61fabb-95c6-4ab3-a1ec-b077e850f010/244878e0-1aaa-3f0d-ae99-b7a9d9c41963.roa
Signing time: Mon 30 Dec 2024 02:00:39 +0000
ROA not before: Mon 30 Dec 2024 02:00:39 +0000
ROA not after: Sun 30 Mar 2025 01:00:39 +0000
asID: 1638
IP address blocks: 2620:114:5000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5f:9a:e1:78:ad:81:e8:64:e0:88:cd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e61fabb-95c6-4ab3-a1ec-b077e850f010
Validity
Not Before: Dec 30 02:00:39 2024 GMT
Not After : Mar 30 01:00:39 2025 GMT
Subject: CN=d5794fc4-ae02-466f-baed-b9d74790f74a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f7:0c:5e:fb:aa:cc:60:27:03:30:04:26:0e:
7c:c4:3d:ef:7c:9d:94:41:c9:42:32:6c:6d:f8:c4:
12:2c:49:a7:9a:df:e5:ba:a5:81:cb:0b:29:fe:8e:
57:32:d7:d5:54:8f:9d:80:91:4d:61:71:e8:7a:a3:
97:26:3f:66:25:91:8a:95:07:d4:bd:12:62:1f:d2:
c0:ae:a6:cc:28:9f:9c:e3:8d:ff:72:d0:3e:c9:bf:
05:bb:fb:53:8d:f8:4d:bb:a0:a7:76:b2:14:53:cf:
4b:40:29:98:9d:91:50:92:03:43:8e:e4:b5:96:9e:
8d:c5:b4:54:96:55:7c:d5:46:88:af:a6:49:7b:2d:
b0:f7:78:ff:bc:83:42:4a:00:23:ee:e7:c3:28:ba:
b3:3d:70:dd:4d:af:5a:2e:dc:3a:4c:1f:db:e8:1a:
61:ac:53:82:f7:5f:b9:82:34:13:b9:4f:2a:66:e7:
7f:5a:e6:9c:a4:d2:17:14:17:f7:60:af:80:61:4f:
10:3e:a8:f3:f2:3d:88:94:cc:08:e8:33:b4:02:ac:
3f:d4:db:b0:77:d6:e5:53:18:66:9e:54:57:a9:b0:
85:99:b7:e0:ba:27:6e:c3:c7:be:23:c4:ae:13:c4:
98:f4:54:8a:17:a3:6b:3e:13:bd:b6:57:a2:1c:04:
3b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E8:17:0B:FC:E3:21:B9:0D:C2:FD:96:46:DC:67:19:71:25:EF:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e61fabb-95c6-4ab3-a1ec-b077e850f010/244878e0-1aaa-3f0d-ae99-b7a9d9c41963.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e61fabb-95c6-4ab3-a1ec-b077e850f010/7e61fabb-95c6-4ab3-a1ec-b077e850f010.crl
X509v3 Authority Key Identifier:
keyid:E8:97:9D:55:E3:53:AB:EF:00:F2:13:00:A9:2D:D2:DA:F3:14:93:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e61fabb-95c6-4ab3-a1ec-b077e850f010.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:114:5000::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:81:36:5f:40:e6:36:58:12:0c:54:37:2a:86:8b:89:45:e1:
26:5b:3b:68:2f:e2:47:e4:a1:aa:0c:d7:be:77:d7:c1:d4:d2:
46:f7:92:9c:2c:4a:e3:8f:85:00:cb:3b:b6:24:00:3d:f4:2c:
03:84:7d:78:d3:06:04:c4:51:47:c3:eb:fe:a4:3f:ef:70:aa:
a8:eb:e0:77:7e:2a:81:7c:fd:d7:15:97:fc:7d:1a:df:b1:96:
03:cd:0c:aa:c8:c1:38:38:65:ca:36:1c:b9:14:98:c5:15:f5:
bb:4f:21:d1:bb:1d:ba:dd:f1:8a:3d:ad:f5:aa:6f:6c:1e:4a:
03:7d:d5:dd:3b:d1:3b:1d:fa:c9:63:10:72:b5:07:60:1d:6b:
93:c8:d5:ee:48:a5:36:ff:00:f6:41:e9:d7:5e:f0:0e:20:d5:
4a:42:fc:48:0a:82:b3:e8:03:89:47:12:dc:9d:7f:e6:1a:90:
ac:4e:e9:ee:31:40:d8:d0:bd:d4:94:51:ef:49:cc:cb:e1:22:
54:41:8d:07:e4:ab:b7:e4:42:51:dc:a7:f8:9c:07:62:d7:1e:
4a:0e:8f:56:e8:db:9e:92:99:13:a1:cd:94:01:df:a9:6d:67:
bb:c4:31:dc:48:ec:23:86:74:6a:5f:38:e0:fb:0c:73:c5:44:
87:79:41:f4
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEhfmuF4rYHoZOCIzUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U2MWZhYmItOTVjNi00YWIzLWExZWMtYjA3N2U4NTBm
MDEwMB4XDTI0MTIzMDAyMDAzOVoXDTI1MDMzMDAxMDAzOVowLzEtMCsGA1UEAxMk
ZDU3OTRmYzQtYWUwMi00NjZmLWJhZWQtYjlkNzQ3OTBmNzRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfcMXvuqzGAnAzAEJg58xD3vfJ2UQclCMmxt
+MQSLEmnmt/luqWBywsp/o5XMtfVVI+dgJFNYXHoeqOXJj9mJZGKlQfUvRJiH9LA
rqbMKJ+c443/ctA+yb8Fu/tTjfhNu6CndrIUU89LQCmYnZFQkgNDjuS1lp6NxbRU
llV81UaIr6ZJey2w93j/vINCSgAj7ufDKLqzPXDdTa9aLtw6TB/b6BphrFOC91+5
gjQTuU8qZud/WuacpNIXFBf3YK+AYU8QPqjz8j2IlMwI6DO0Aqw/1Nuwd9blUxhm
nlRXqbCFmbfguiduw8e+I8SuE8SY9FSKF6NrPhO9tleiHAQ7nQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFHToFwv84yG5DcL9lkbcZxlxJe/yMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83ZTYx
ZmFiYi05NWM2LTRhYjMtYTFlYy1iMDc3ZTg1MGYwMTAvMjQ0ODc4ZTAtMWFhYS0z
ZjBkLWFlOTktYjdhOWQ5YzQxOTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvN2U2MWZhYmItOTVjNi00YWIzLWEx
ZWMtYjA3N2U4NTBmMDEwLzdlNjFmYWJiLTk1YzYtNGFiMy1hMWVjLWIwNzdlODUw
ZjAxMC5jcmwwHwYDVR0jBBgwFoAU6JedVeNTq+8A8hMAqS3S2vMUk54wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi83ZTYxZmFiYi05NWM2LTRhYjMtYTFlYy1iMDc3
ZTg1MGYwMTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABFFAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAioE2X0DmNlgSDFQ3KoaLiUXhJls7aC/iR+ShqgzXvnfXwdTSRveS
nCxK44+FAMs7tiQAPfQsA4R9eNMGBMRRR8Pr/qQ/73CqqOvgd34qgXz91xWX/H0a
37GWA80MqsjBODhlyjYcuRSYxRX1u08h0bsdut3xij2t9apvbB5KA33V3TvROx36
yWMQcrUHYB1rk8jV7kilNv8A9kHp117wDiDVSkL8SAqCs+gDiUcS3J1/5hqQrE7p
7jFA2NC91JRR70nMy+EiVEGNB+Srt+RCUdyn+JwHYtceSg6PVujbnpKZE6HNlAHf
qW1nu8Qx3EjsI4Z0al844PsMc8VEh3lB9A==
-----END CERTIFICATE-----
Generated at Sun Apr 27 14:12:24 2025 by rpki-client