Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c3a9e250-d527-3018-81db-a81d4bca3b08.roa
File: c3a9e250-d527-3018-81db-a81d4bca3b08.roa (raw, json)
Hash identifier: tyQJGoG9MB8q0xgniG+B0E4iX4d6Zf3jCeqs7MiO5Uo=
Subject key identifier: 70:3F:CB:81:85:50:2D:73:B5:1A:C4:AF:48:EF:4D:1F:6A:E2:F5:14
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584800AF8E70FA171CFD70D2C900
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c3a9e250-d527-3018-81db-a81d4bca3b08.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 33363
IP address blocks: 2605:a401:803b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:8e:70:fa:17:1c:fd:70:d2:c9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=44ef8533-965b-450b-81f2-205d5acb875c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fa:5c:84:84:65:bb:ba:65:c4:c0:47:b1:fe:
1e:73:25:88:c0:46:a4:87:32:27:06:49:0a:b7:ed:
70:01:e1:12:dc:ff:80:fd:e2:16:1c:48:9f:18:8c:
ca:9a:6a:d7:ca:a4:b4:3a:ae:5f:65:eb:eb:1b:84:
67:36:86:06:58:73:5b:bf:2d:6d:8e:e4:92:9e:47:
e0:64:03:9e:d7:cf:f9:62:71:40:bf:f6:fe:38:c5:
39:e9:bc:07:c0:20:88:95:ea:61:61:39:8f:c5:73:
de:70:2b:03:19:89:17:ae:4c:bb:bc:3a:2b:e7:25:
6e:9e:5d:1f:1f:66:98:89:0f:04:ac:38:ef:e9:4b:
5e:03:c4:b9:39:ff:6e:75:97:8a:90:41:14:fe:b5:
7a:a8:07:28:b2:7e:5b:f4:5b:bd:6f:74:1a:e8:56:
e5:0c:e3:d5:e1:ec:d2:ef:d7:b1:94:6e:00:5c:77:
59:74:bb:fe:9d:13:61:25:07:18:38:02:db:44:84:
91:48:4a:04:95:04:38:47:13:82:79:19:1a:a9:a6:
12:b8:1c:c3:65:0d:79:14:b4:a4:46:d8:73:12:17:
28:62:98:a1:4e:54:13:61:39:ed:8b:08:e9:5b:e1:
6f:05:b4:bf:1b:5c:32:07:83:e4:68:e4:a2:4a:fa:
b3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:3F:CB:81:85:50:2D:73:B5:1A:C4:AF:48:EF:4D:1F:6A:E2:F5:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c3a9e250-d527-3018-81db-a81d4bca3b08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:a401:803b::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:8f:4b:cc:b9:fb:4d:28:0c:35:ce:3f:72:3d:16:42:50:81:
7d:fb:a5:38:84:62:96:25:bc:35:ae:16:02:30:85:0e:0d:70:
bd:47:04:4c:d3:d0:ef:fe:ae:43:61:5e:c8:8d:8d:1c:89:c4:
b9:41:e3:94:f3:26:ba:87:36:69:e9:f6:a9:a4:e5:a9:cf:ae:
fa:16:c7:ed:26:c0:60:71:e4:ad:3e:a1:dc:1a:93:d2:86:0c:
96:c7:1b:b8:10:75:e9:13:21:ac:1b:f6:a4:7e:6d:e5:07:2f:
7f:aa:0d:fa:b1:a1:7a:cf:f5:e5:32:74:03:23:26:6a:92:bd:
65:41:0f:24:03:2c:cd:76:ce:2d:21:7f:27:69:d6:4d:e4:61:
27:93:08:de:04:a4:36:fd:c6:60:29:cf:c0:b4:f4:f7:cb:c9:
c0:fe:2d:f1:23:85:a9:f3:cd:da:28:4a:11:9c:c8:79:19:be:
fc:12:e6:19:74:83:e7:bd:a7:1f:2c:38:ac:99:20:88:e1:17:
4e:01:fe:20:75:20:42:15:fe:0a:1f:29:41:1e:4c:24:72:85:
98:6a:b0:28:09:c4:55:61:44:71:9e:f5:af:3c:c0:ad:47:df:
cb:76:fc:c9:57:ac:d7:73:09:30:a7:db:ae:11:24:dc:0e:31:
47:f9:42:2d
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgAr45w+hcc/XDSyQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI0MTEyNjAyMDAyNloXDTI1MDIyNDAyMDAyNlowLzEtMCsGA1UEAxMk
NDRlZjg1MzMtOTY1Yi00NTBiLTgxZjItMjA1ZDVhY2I4NzVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPpchIRlu7plxMBHsf4ecyWIwEakhzInBkkK
t+1wAeES3P+A/eIWHEifGIzKmmrXyqS0Oq5fZevrG4RnNoYGWHNbvy1tjuSSnkfg
ZAOe18/5YnFAv/b+OMU56bwHwCCIlephYTmPxXPecCsDGYkXrky7vDor5yVunl0f
H2aYiQ8ErDjv6UteA8S5Of9udZeKkEEU/rV6qAcosn5b9Fu9b3Qa6FblDOPV4ezS
79exlG4AXHdZdLv+nRNhJQcYOALbRISRSEoElQQ4RxOCeRkaqaYSuBzDZQ15FLSk
RthzEhcoYpihTlQTYTntiwjpW+FvBbS/G1wyB4PkaOSiSvqz3wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHA/y4GFUC1ztRrEr0jvTR9q4vUUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYzNhOWUyNTAtZDUyNy0z
MDE4LTgxZGItYTgxZDRiY2EzYjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYA7
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHuPS8y5+00oDDXOP3I9FkJQgX37pTiEYpYlvDWuFgIwhQ4NcL1H
BEzT0O/+rkNhXsiNjRyJxLlB45TzJrqHNmnp9qmk5anPrvoWx+0mwGBx5K0+odwa
k9KGDJbHG7gQdekTIawb9qR+beUHL3+qDfqxoXrP9eUydAMjJmqSvWVBDyQDLM12
zi0hfydp1k3kYSeTCN4EpDb9xmApz8C09PfLycD+LfEjhanzzdooShGcyHkZvvwS
5hl0g+e9px8sOKyZIIjhF04B/iB1IEIV/gofKUEeTCRyhZhqsCgJxFVhRHGe9a88
wK1H38t2/MlXrNdzCTCn264RJNwOMUf5Qi0=
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:47:49 2025 by rpki-client