Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/e9645e25-dce1-330a-8418-468ee226506d.roa
File: e9645e25-dce1-330a-8418-468ee226506d.roa (raw, json)
Hash identifier: /ILPV7wukkqaVgSjRX309Eb+Zm/kZ01uxWsPLSbb8Bo=
Subject key identifier: 9D:81:C2:70:8E:C2:16:49:36:E7:23:13:73:4D:EA:96:40:04:18:A1
Certificate issuer: /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial: 010D0C9F43285848159FE4C8F7B890BFEB2C8000
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/e9645e25-dce1-330a-8418-468ee226506d.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 30133
IP address blocks: 2001:500:72::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:e4:c8:f7:b8:90:bf:eb:2c:80:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=6c4da1c2-b786-492d-ad2d-163edbc40dc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:10:91:ef:e4:03:c4:26:2e:54:59:26:c4:fa:
9a:2a:21:ea:26:e4:1e:80:44:11:a5:ce:56:81:74:
e3:20:cc:b1:77:0e:71:8b:6c:53:23:db:f7:8e:1d:
e0:67:0a:d8:b9:a4:f7:dd:10:7c:67:43:ca:d6:f1:
28:5f:3c:ab:66:23:67:24:8a:53:2e:63:b5:52:d2:
51:e9:9d:02:9a:0f:0b:6d:cb:40:f1:86:df:bd:a6:
ed:fd:7d:2b:a3:55:df:fc:3c:82:02:bb:fe:bc:e0:
26:7e:6d:c5:0e:8a:a5:b6:18:10:d6:5d:40:02:58:
67:66:fe:d0:ba:3e:c9:8b:9b:fd:31:cf:db:93:ce:
4e:a5:7e:10:d1:e4:f9:1f:9e:1d:a4:b5:5d:42:54:
c3:6f:44:c1:76:3a:ba:84:4f:2f:fb:28:9b:2e:94:
ef:55:8c:8c:c8:cd:a7:c5:4d:a7:02:93:07:b3:1b:
fa:c6:f3:9e:5e:9c:4b:ec:29:d9:37:3d:d7:dd:3d:
91:18:18:7c:08:88:6d:57:b1:14:bf:bf:83:2d:17:
26:77:6e:8b:21:45:a2:49:a9:b3:92:06:0e:08:f0:
a9:26:7b:84:1c:f4:88:8b:5b:c0:2d:b4:70:6d:e8:
46:81:39:80:d5:4b:4a:4e:44:c2:9d:dc:4c:ff:d5:
c9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:81:C2:70:8E:C2:16:49:36:E7:23:13:73:4D:EA:96:40:04:18:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/e9645e25-dce1-330a-8418-468ee226506d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
X509v3 Authority Key Identifier:
keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:72::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:81:a0:84:ad:4e:ba:1c:d1:d3:e9:dd:4e:d2:b7:b6:c7:eb:
71:51:60:22:2f:26:88:12:63:a9:21:7c:c1:80:af:8b:48:8e:
aa:8b:76:24:5a:22:90:5f:66:ed:20:ab:61:c3:a5:d2:c2:51:
c6:e6:fb:f0:10:11:56:96:cb:03:4a:33:a1:a0:f3:ca:8e:30:
3f:3d:87:6f:a9:98:af:1b:9f:b2:0b:11:cb:d4:dd:d3:8a:04:
1c:28:cf:a0:6c:be:08:6d:f9:b7:ca:be:52:e2:1f:3a:52:98:
f9:51:68:ef:ad:e6:28:eb:12:e9:44:94:64:34:c2:bb:0b:87:
ad:a2:1e:92:5a:ad:17:6f:48:e8:ad:52:dc:2a:7c:40:cd:a8:
d7:45:e8:6d:0f:0c:ec:e6:48:c3:ed:a5:6e:d3:5f:22:f3:5a:
25:93:cf:2c:07:08:df:61:83:bc:a1:5e:60:eb:32:9a:aa:0b:
32:a9:98:23:00:a3:53:7a:ae:90:37:76:fa:df:39:70:da:9a:
94:0c:ad:b9:bb:e9:f2:59:31:b9:55:d4:d3:18:1d:fb:20:7a:
67:56:27:fb:61:25:4c:5d:8e:e9:80:64:00:bb:57:87:00:c7:
50:f1:90:91:7a:0e:1b:56:f7:df:25:77:38:07:8d:4d:21:7c:
9b:48:40:5e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgVn+TI97iQv+ssgAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmQzNTZiMTUtOTJiMi00ZTcyLWI4ZDktZmE0OTA0ODBk
MTc3MB4XDTI0MTIwMzE0MDA1MloXDTI1MDMwMzE0MDA1MlowLzEtMCsGA1UEAxMk
NmM0ZGExYzItYjc4Ni00OTJkLWFkMmQtMTYzZWRiYzQwZGMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRCR7+QDxCYuVFkmxPqaKiHqJuQegEQRpc5W
gXTjIMyxdw5xi2xTI9v3jh3gZwrYuaT33RB8Z0PK1vEoXzyrZiNnJIpTLmO1UtJR
6Z0Cmg8LbctA8Ybfvabt/X0ro1Xf/DyCArv+vOAmfm3FDoqlthgQ1l1AAlhnZv7Q
uj7Ji5v9Mc/bk85OpX4Q0eT5H54dpLVdQlTDb0TBdjq6hE8v+yibLpTvVYyMyM2n
xU2nApMHsxv6xvOeXpxL7CnZNz3X3T2RGBh8CIhtV7EUv7+DLRcmd26LIUWiSamz
kgYOCPCpJnuEHPSIi1vALbRwbehGgTmA1UtKTkTCndxM/9XJ9QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJ2BwnCOwhZJNucjE3NN6pZABBihMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1
NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5MDQ4MGQxNzcvZTk2NDVlMjUtZGNlMS0z
MzBhLTg0MTgtNDY4ZWUyMjY1MDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmQzNTZiMTUtOTJiMi00ZTcyLWI4
ZDktZmE0OTA0ODBkMTc3L2ZkMzU2YjE1LTkyYjItNGU3Mi1iOGQ5LWZhNDkwNDgw
ZDE3Ny5jcmwwHwYDVR0jBBgwFoAUH2WrsjwD6KtBARGUGEBfF5fCAiUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5
MDQ4MGQxNzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABy
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFiBoIStTroc0dPp3U7St7bH63FRYCIvJogSY6khfMGAr4tIjqqL
diRaIpBfZu0gq2HDpdLCUcbm+/AQEVaWywNKM6Gg88qOMD89h2+pmK8bn7ILEcvU
3dOKBBwoz6Bsvght+bfKvlLiHzpSmPlRaO+t5ijrEulElGQ0wrsLh62iHpJarRdv
SOitUtwqfEDNqNdF6G0PDOzmSMPtpW7TXyLzWiWTzywHCN9hg7yhXmDrMpqqCzKp
mCMAo1N6rpA3dvrfOXDampQMrbm76fJZMblV1NMYHfsgemdWJ/thJUxdjumAZAC7
V4cAx1DxkJF6DhtW998ldzgHjU0hfJtIQF4=
-----END CERTIFICATE-----
Generated at Mon Apr 28 16:53:35 2025 by rpki-client