Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/a50faf7e-80ed-3540-8863-2e3533723c21.roa
File: a50faf7e-80ed-3540-8863-2e3533723c21.roa (raw, json)
Hash identifier: y+ehvkkIK+PHwU+XFltMS5QpZY2PuSdANxujVKuFcH0=
Subject key identifier: 61:D7:3D:3C:BC:03:46:27:DF:26:B2:D8:E4:54:6B:9F:DF:06:34:06
Certificate issuer: /CN=d0fa8e3f-67e9-4e8f-9d18-6211dd613073
Certificate serial: 010D0C9F43285847DC64A985E1B21674FF00D540
Authority key identifier: 2B:B4:63:CE:67:00:19:DA:3A:DE:BC:3B:E5:62:36:DD:BB:4D:C2:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/a50faf7e-80ed-3540-8863-2e3533723c21.roa
Signing time: Wed 13 Nov 2024 02:00:28 +0000
ROA not before: Wed 13 Nov 2024 02:00:28 +0000
ROA not after: Tue 11 Feb 2025 02:00:28 +0000
asID: 3356
IP address blocks: 2602:814:b000::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:dc:64:a9:85:e1:b2:16:74:ff:00:d5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0fa8e3f-67e9-4e8f-9d18-6211dd613073
Validity
Not Before: Nov 13 02:00:28 2024 GMT
Not After : Feb 11 02:00:28 2025 GMT
Subject: CN=6cccdd62-5327-45b6-a9aa-6484cdd489ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:da:74:61:2e:2c:6b:98:2c:f6:ec:ee:6e:e6:
6b:06:2d:3d:99:5c:66:23:88:05:bf:a2:37:c7:61:
36:00:e7:1d:80:54:68:2a:e3:e1:a8:b3:2e:55:f8:
81:35:c7:9f:96:19:59:81:3d:19:23:c8:34:f7:b4:
45:58:39:42:47:1e:81:bf:b9:00:fd:e8:15:6d:b8:
67:dc:06:a9:3c:59:c5:a9:33:73:b0:b3:f1:af:6a:
5c:56:47:50:28:7a:c0:31:bd:fc:93:eb:8d:e1:5e:
d9:1c:82:35:c7:e7:64:66:9b:8f:d3:4f:9b:aa:7b:
1f:95:dc:a5:d1:1e:64:4e:37:92:e5:e3:a1:04:3e:
31:56:5d:e6:78:62:31:80:f5:12:a4:c7:0c:f0:ec:
62:3a:a4:18:df:10:1b:d6:78:86:30:85:3f:47:2b:
61:11:f6:e5:ba:93:9c:22:16:77:fa:a6:34:b5:45:
f6:9a:26:ec:f9:86:ae:d1:92:9d:e6:3f:71:c5:40:
ca:08:92:d1:b6:6d:05:ee:73:4a:de:5f:22:3f:e0:
90:45:92:22:6d:72:9d:d7:dc:01:79:8d:79:e5:47:
ac:b0:f0:3d:a0:9d:3f:a2:19:dd:37:8d:9a:bb:92:
08:17:0a:ee:1f:af:42:49:2c:74:a2:4d:f9:7f:7d:
15:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D7:3D:3C:BC:03:46:27:DF:26:B2:D8:E4:54:6B:9F:DF:06:34:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/a50faf7e-80ed-3540-8863-2e3533723c21.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.crl
X509v3 Authority Key Identifier:
keyid:2B:B4:63:CE:67:00:19:DA:3A:DE:BC:3B:E5:62:36:DD:BB:4D:C2:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:814:b000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:e7:fd:35:91:89:7e:06:59:d4:46:42:db:ea:7f:60:c8:0a:
4e:f7:f9:a9:53:c8:f3:96:6f:48:a4:a6:2f:74:5d:69:8e:e0:
d2:14:14:6d:b0:99:b6:4e:46:f0:de:7c:df:51:70:7a:e9:c7:
a0:d2:d1:5c:a2:07:ca:ab:d3:b7:a3:79:2b:b3:1d:0b:0d:38:
e4:64:6f:f9:ab:ee:6f:49:ad:8c:f3:0b:5b:70:cf:d1:0c:ad:
c3:4c:74:5d:e3:e2:9e:e4:e5:9d:aa:2b:ff:2b:cc:f7:9b:48:
3a:c2:eb:81:39:2f:ab:2d:f1:fa:30:59:29:74:e4:54:7b:fc:
31:c4:53:35:30:c7:18:8b:5e:b3:31:49:e5:38:32:95:7f:7b:
14:6e:03:66:71:9e:51:16:13:29:55:82:8a:64:c5:4c:40:f7:
2e:fa:92:78:77:f9:69:7b:31:e9:23:db:43:1a:79:bf:fe:39:
98:71:00:c8:97:2a:c9:2f:43:b8:a8:7e:33:0d:e1:0a:f1:93:
30:7a:40:43:61:68:8e:41:7c:44:c6:ff:84:8b:9b:de:fd:ee:
ea:e3:05:63:c7:f6:76:ca:60:6b:74:29:1d:d8:f1:82:af:97:
53:ff:00:ab:77:83:60:3c:b6:4e:9d:4d:ac:84:6f:6c:a5:22:
cc:78:92:b7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfcZKmF4bIWdP8A1UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDBmYThlM2YtNjdlOS00ZThmLTlkMTgtNjIxMWRkNjEz
MDczMB4XDTI0MTExMzAyMDAyOFoXDTI1MDIxMTAyMDAyOFowLzEtMCsGA1UEAxMk
NmNjY2RkNjItNTMyNy00NWI2LWE5YWEtNjQ4NGNkZDQ4OWFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNp0YS4sa5gs9uzubuZrBi09mVxmI4gFv6I3
x2E2AOcdgFRoKuPhqLMuVfiBNceflhlZgT0ZI8g097RFWDlCRx6Bv7kA/egVbbhn
3AapPFnFqTNzsLPxr2pcVkdQKHrAMb38k+uN4V7ZHII1x+dkZpuP00+bqnsfldyl
0R5kTjeS5eOhBD4xVl3meGIxgPUSpMcM8OxiOqQY3xAb1niGMIU/RythEfblupOc
IhZ3+qY0tUX2mibs+Yau0ZKd5j9xxUDKCJLRtm0F7nNK3l8iP+CQRZIibXKd19wB
eY155UessPA9oJ0/ohndN42au5IIFwruH69CSSx0ok35f30VmQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGHXPTy8A0Yn3yay2ORUa5/fBjQGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGZh
OGUzZi02N2U5LTRlOGYtOWQxOC02MjExZGQ2MTMwNzMvYTUwZmFmN2UtODBlZC0z
NTQwLTg4NjMtMmUzNTMzNzIzYzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBmYThlM2YtNjdlOS00ZThmLTlk
MTgtNjIxMWRkNjEzMDczL2QwZmE4ZTNmLTY3ZTktNGU4Zi05ZDE4LTYyMTFkZDYx
MzA3My5jcmwwHwYDVR0jBBgwFoAUK7RjzmcAGdo63rw75WI23btNwp4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGZhOGUzZi02N2U5LTRlOGYtOWQxOC02MjEx
ZGQ2MTMwNzMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIIFLAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAG/n/TWRiX4GWdRGQtvqf2DICk73+alTyPOWb0ikpi90XWmO4NIU
FG2wmbZORvDefN9RcHrpx6DS0VyiB8qr07ejeSuzHQsNOORkb/mr7m9JrYzzC1tw
z9EMrcNMdF3j4p7k5Z2qK/8rzPebSDrC64E5L6st8fowWSl05FR7/DHEUzUwxxiL
XrMxSeU4MpV/exRuA2ZxnlEWEylVgopkxUxA9y76knh3+Wl7Mekj20Maeb/+OZhx
AMiXKskvQ7iofjMN4QrxkzB6QENhaI5BfETG/4SLm9797urjBWPH9nbKYGt0KR3Y
8YKvl1P/AKt3g2A8tk6dTayEb2ylIsx4krc=
-----END CERTIFICATE-----
Generated at Tue May 13 17:18:24 2025 by rpki-client