Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/7fddceb6-e20b-3524-a699-d1b6dce143f6.roa
File: 7fddceb6-e20b-3524-a699-d1b6dce143f6.roa (raw, json)
Hash identifier: 9qqDMY0j4yOcF3TO93qAd6XWtECK7Q8SFqMC0+QF57Q=
Subject key identifier: 2C:39:A4:F9:29:47:59:C6:A8:9A:E1:DC:C2:B3:9D:85:81:2B:93:77
Certificate issuer: /CN=3c1b9e2d-457a-403f-9256-27f272ed993d
Certificate serial: 010D0C9F43285848626592BE694611B5FC81AC00
Authority key identifier: EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/7fddceb6-e20b-3524-a699-d1b6dce143f6.roa
Signing time: Tue 31 Dec 2024 02:00:40 +0000
ROA not before: Tue 31 Dec 2024 02:00:40 +0000
ROA not after: Mon 31 Mar 2025 01:00:40 +0000
asID: 763
IP address blocks: 2620:1f7:c000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:62:65:92:be:69:46:11:b5:fc:81:ac:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1b9e2d-457a-403f-9256-27f272ed993d
Validity
Not Before: Dec 31 02:00:40 2024 GMT
Not After : Mar 31 01:00:40 2025 GMT
Subject: CN=7843b4b1-bf42-42da-9908-7dcfbcdb32f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f9:0a:45:6c:b5:de:2c:4a:5c:0f:3b:a2:97:
d7:d4:31:c6:9d:77:84:ab:8d:c9:6d:30:fa:b9:c3:
07:63:eb:cf:d7:40:47:80:5a:19:4a:e1:cd:bc:e2:
86:68:b4:a8:1e:b7:75:b4:fe:11:bb:50:89:44:18:
34:42:80:e5:d4:7b:f4:e6:5f:eb:2a:ef:6f:b9:7d:
e7:88:05:96:76:a2:da:05:e9:42:c7:97:14:71:7f:
6f:94:9c:30:72:74:22:80:28:4b:67:7c:49:05:63:
28:ea:4d:e5:75:79:de:db:b6:13:11:1d:86:b7:eb:
49:80:35:f6:8f:8f:69:85:1f:32:46:b3:cf:00:a4:
71:ea:c0:57:f7:2a:2e:2f:c8:50:96:37:3e:5a:88:
a7:9e:f4:da:6e:0d:64:30:10:39:cd:38:cf:1b:7b:
07:dc:b2:e4:9e:e0:42:64:16:94:7d:95:95:a8:bb:
09:3a:8f:16:07:81:04:cd:f6:7e:12:b8:5c:57:5b:
92:c9:64:f7:0c:fd:c6:82:65:06:9e:78:1f:f6:0d:
ec:97:72:57:13:63:c1:84:26:7b:25:c1:ab:94:9d:
b0:5a:8f:56:38:b5:d8:85:a9:25:fc:86:7e:2a:b3:
7a:f0:d8:89:2a:e7:9b:a5:1a:66:33:4e:1d:31:93:
2d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:39:A4:F9:29:47:59:C6:A8:9A:E1:DC:C2:B3:9D:85:81:2B:93:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/7fddceb6-e20b-3524-a699-d1b6dce143f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl
X509v3 Authority Key Identifier:
keyid:EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:1f7:c000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:02:42:73:7c:77:cf:d2:40:0a:07:cc:af:a1:4e:f2:a2:a0:
f1:ac:36:e2:a1:6b:4c:1c:c7:2d:05:d1:55:e4:d1:3b:55:39:
c3:36:ce:c6:f4:79:c5:36:0c:c6:38:77:b1:d4:1c:59:4e:ec:
13:d9:88:1f:6f:2b:79:6e:8b:e0:36:9d:ba:f1:94:81:30:d1:
3b:98:ae:f8:c0:45:9c:ce:75:aa:9b:a3:6c:0b:39:39:a2:20:
cf:b9:4f:cf:1d:57:bc:9b:9c:c0:31:c2:db:42:60:cb:9f:73:
a4:23:85:99:5f:51:b4:ca:e9:77:a4:4b:1f:e8:40:9b:f4:84:
fa:a6:91:e0:19:48:3b:1c:de:81:63:6b:aa:08:09:99:dd:0d:
dc:84:dd:be:14:fa:e4:52:4f:e1:cc:da:27:2f:a7:78:8b:37:
97:ce:14:f2:f9:43:0c:fe:2c:87:f4:e4:5f:3c:a1:b4:2d:7e:
f6:f6:f4:ab:fd:72:ac:96:4a:3a:aa:33:5e:4c:35:fd:40:29:
0a:a1:00:8f:84:45:a7:f1:bc:8e:95:38:19:be:34:36:71:f9:
8d:bf:67:4b:a7:80:84:ea:cd:29:7d:5f:16:02:24:4f:29:42:
a7:f3:9f:33:c9:ec:d5:f2:4a:51:b0:df:08:1d:f2:2f:95:8f:
45:2b:a9:ca
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhiZZK+aUYRtfyBrAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2MxYjllMmQtNDU3YS00MDNmLTkyNTYtMjdmMjcyZWQ5
OTNkMB4XDTI0MTIzMTAyMDA0MFoXDTI1MDMzMTAxMDA0MFowLzEtMCsGA1UEAxMk
Nzg0M2I0YjEtYmY0Mi00MmRhLTk5MDgtN2RjZmJjZGIzMmY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPkKRWy13ixKXA87opfX1DHGnXeEq43JbTD6
ucMHY+vP10BHgFoZSuHNvOKGaLSoHrd1tP4Ru1CJRBg0QoDl1Hv05l/rKu9vuX3n
iAWWdqLaBelCx5cUcX9vlJwwcnQigChLZ3xJBWMo6k3ldXne27YTER2Gt+tJgDX2
j49phR8yRrPPAKRx6sBX9youL8hQljc+WoinnvTabg1kMBA5zTjPG3sH3LLknuBC
ZBaUfZWVqLsJOo8WB4EEzfZ+ErhcV1uSyWT3DP3GgmUGnngf9g3sl3JXE2PBhCZ7
JcGrlJ2wWo9WOLXYhakl/IZ+KrN68NiJKuebpRpmM04dMZMtlQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCw5pPkpR1nGqJrh3MKznYWBK5N3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFi
OWUyZC00NTdhLTQwM2YtOTI1Ni0yN2YyNzJlZDk5M2QvN2ZkZGNlYjYtZTIwYi0z
NTI0LWE2OTktZDFiNmRjZTE0M2Y2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2MxYjllMmQtNDU3YS00MDNmLTky
NTYtMjdmMjcyZWQ5OTNkLzNjMWI5ZTJkLTQ1N2EtNDAzZi05MjU2LTI3ZjI3MmVk
OTkzZC5jcmwwHwYDVR0jBBgwFoAU7t8l0kJMmR/VBLPQ02SetbVqcsMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFiOWUyZC00NTdhLTQwM2YtOTI1Ni0yN2Yy
NzJlZDk5M2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAB98AA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAD4CQnN8d8/SQAoHzK+hTvKioPGsNuKha0wcxy0F0VXk0TtVOcM2
zsb0ecU2DMY4d7HUHFlO7BPZiB9vK3lui+A2nbrxlIEw0TuYrvjARZzOdaqbo2wL
OTmiIM+5T88dV7ybnMAxwttCYMufc6QjhZlfUbTK6XekSx/oQJv0hPqmkeAZSDsc
3oFja6oICZndDdyE3b4U+uRST+HM2icvp3iLN5fOFPL5Qwz+LIf05F88obQtfvb2
9Kv9cqyWSjqqM15MNf1AKQqhAI+ERafxvI6VOBm+NDZx+Y2/Z0ungITqzSl9XxYC
JE8pQqfznzPJ7NXySlGw3wgd8i+Vj0Urqco=
-----END CERTIFICATE-----
Generated at Mon Apr 28 21:27:36 2025 by rpki-client