Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8d335843-a776-4e8d-949e-8217822b7151/a35ba8c6-2504-3b06-b36b-7165028e0689.roa
File: a35ba8c6-2504-3b06-b36b-7165028e0689.roa (raw, json)
Hash identifier: r4I57rPNFR+m0kQTsnzwVBWeiUe0pE9CfXe61kwYFVs=
Subject key identifier: 21:3E:D0:33:9B:7E:6E:5A:07:6F:A5:89:9F:E7:3B:19:BA:3A:83:14
Certificate issuer: /CN=8d335843-a776-4e8d-949e-8217822b7151
Certificate serial: 010D0C9F4328584863CB0CFE0CEB0A0C5B2F2B00
Authority key identifier: F4:D1:12:A6:8C:DB:75:56:5D:AD:9A:FD:A6:92:14:D9:04:80:89:44
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8d335843-a776-4e8d-949e-8217822b7151.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8d335843-a776-4e8d-949e-8217822b7151/a35ba8c6-2504-3b06-b36b-7165028e0689.roa
Signing time: Tue 31 Dec 2024 14:00:53 +0000
ROA not before: Tue 31 Dec 2024 14:00:53 +0000
ROA not after: Mon 31 Mar 2025 13:00:53 +0000
asID: 398491
IP address blocks: 2602:fc5a::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:63:cb:0c:fe:0c:eb:0a:0c:5b:2f:2b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d335843-a776-4e8d-949e-8217822b7151
Validity
Not Before: Dec 31 14:00:53 2024 GMT
Not After : Mar 31 13:00:53 2025 GMT
Subject: CN=b7700f5c-84ce-49b6-b2f2-56bcbe0664f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:22:a8:c5:4b:5c:e2:57:b8:01:e1:da:da:db:
b0:af:7a:38:84:42:2f:19:00:1c:c0:a2:7c:7e:0d:
a6:b1:e5:ff:99:4d:ae:f4:23:61:6a:98:74:f2:d3:
05:70:d6:57:3c:e0:33:38:16:5b:44:70:ce:c5:6f:
9a:98:0d:8e:21:76:33:1a:a9:c0:28:a8:0f:f6:9b:
64:f0:92:d9:f7:c1:34:89:f7:fc:0d:ca:c4:a1:c5:
65:c4:a5:29:4f:23:87:00:c7:3f:63:9d:52:a3:b6:
9e:0b:c5:5e:48:2a:93:1f:cd:2f:83:64:81:c9:91:
5d:f7:71:b5:54:eb:14:5d:e6:2a:a4:95:5e:a5:ee:
d0:4f:dc:92:a3:8e:c5:b0:6d:4a:46:44:a7:c8:53:
1e:e6:d2:53:d7:8d:94:6d:60:0d:ec:ec:54:fc:72:
f7:8c:7a:f9:df:5c:4a:c7:01:78:f3:fa:14:31:b3:
f0:0b:f8:da:4b:92:8b:98:d5:d8:79:69:82:ab:d9:
0f:c8:ca:14:3c:18:ec:57:42:5b:58:3b:41:32:54:
79:19:39:b5:37:32:1e:ef:c0:0b:d2:e6:09:3b:04:
4b:48:fd:6c:14:36:bd:72:7b:b1:bc:91:da:12:12:
c8:94:e6:57:5e:69:78:e2:59:b6:aa:89:58:5c:55:
c8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:3E:D0:33:9B:7E:6E:5A:07:6F:A5:89:9F:E7:3B:19:BA:3A:83:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8d335843-a776-4e8d-949e-8217822b7151/a35ba8c6-2504-3b06-b36b-7165028e0689.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8d335843-a776-4e8d-949e-8217822b7151/8d335843-a776-4e8d-949e-8217822b7151.crl
X509v3 Authority Key Identifier:
keyid:F4:D1:12:A6:8C:DB:75:56:5D:AD:9A:FD:A6:92:14:D9:04:80:89:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8d335843-a776-4e8d-949e-8217822b7151.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fc5a::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:be:f1:45:dc:b7:0e:97:45:dc:b5:9a:44:f9:7e:25:6f:19:
7b:60:c8:40:6e:fa:7c:ab:a0:6f:61:f9:dc:23:cb:f4:f4:6d:
e8:12:e0:67:ac:85:2f:49:ed:e1:3a:7a:92:26:94:28:84:53:
57:b0:93:e1:22:85:1a:ea:d7:40:b1:01:69:2c:88:94:4f:f8:
d8:17:d6:a7:06:14:f4:37:3d:41:09:48:32:d9:2c:61:35:4c:
51:d5:bb:9b:9e:4c:a9:90:a3:04:9b:6d:58:00:5c:a9:fd:c2:
33:68:dd:85:7f:e1:f4:02:31:dd:3a:e8:85:f6:64:24:1e:d7:
3d:78:b3:0d:f7:6e:e9:a0:1f:07:f5:56:61:6e:9b:20:0b:20:
e0:8b:b9:ac:41:88:c3:c8:cd:02:0b:29:d8:c6:d6:0e:c5:b0:
a5:5f:25:9b:40:9d:73:ea:26:93:ee:d0:ad:c2:0f:d5:fe:e7:
e9:73:6d:7e:91:44:85:73:3b:ce:b5:cb:b3:83:87:e3:32:21:
38:ac:b3:28:ff:31:54:39:42:fc:64:12:45:dc:0d:5a:d8:54:
48:b3:d2:99:93:40:5a:b0:11:8e:b7:9f:cd:42:0b:6a:42:42:
69:ef:99:5d:2b:bc:ab:d4:fd:99:01:c1:30:8b:92:6a:21:66:
09:ed:3c:16
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEhjywz+DOsKDFsvKwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGQzMzU4NDMtYTc3Ni00ZThkLTk0OWUtODIxNzgyMmI3
MTUxMB4XDTI0MTIzMTE0MDA1M1oXDTI1MDMzMTEzMDA1M1owLzEtMCsGA1UEAxMk
Yjc3MDBmNWMtODRjZS00OWI2LWIyZjItNTZiY2JlMDY2NGY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4CKoxUtc4le4AeHa2tuwr3o4hEIvGQAcwKJ8
fg2mseX/mU2u9CNhaph08tMFcNZXPOAzOBZbRHDOxW+amA2OIXYzGqnAKKgP9ptk
8JLZ98E0iff8DcrEocVlxKUpTyOHAMc/Y51So7aeC8VeSCqTH80vg2SByZFd93G1
VOsUXeYqpJVepe7QT9ySo47FsG1KRkSnyFMe5tJT142UbWAN7OxU/HL3jHr531xK
xwF48/oUMbPwC/jaS5KLmNXYeWmCq9kPyMoUPBjsV0JbWDtBMlR5GTm1NzIe78AL
0uYJOwRLSP1sFDa9cnuxvJHaEhLIlOZXXml44lm2qolYXFXIIQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFCE+0DObfm5aB2+liZ/nOxm6OoMUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84ZDMz
NTg0My1hNzc2LTRlOGQtOTQ5ZS04MjE3ODIyYjcxNTEvYTM1YmE4YzYtMjUwNC0z
YjA2LWIzNmItNzE2NTAyOGUwNjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGQzMzU4NDMtYTc3Ni00ZThkLTk0
OWUtODIxNzgyMmI3MTUxLzhkMzM1ODQzLWE3NzYtNGU4ZC05NDllLTgyMTc4MjJi
NzE1MS5jcmwwHwYDVR0jBBgwFoAU9NESpozbdVZdrZr9ppIU2QSAiUQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84ZDMzNTg0My1hNzc2LTRlOGQtOTQ5ZS04MjE3
ODIyYjcxNTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL8WgAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAfb7xRdy3DpdF3LWaRPl+JW8Ze2DIQG76fKugb2H53CPL9PRt6BLg
Z6yFL0nt4Tp6kiaUKIRTV7CT4SKFGurXQLEBaSyIlE/42BfWpwYU9Dc9QQlIMtks
YTVMUdW7m55MqZCjBJttWABcqf3CM2jdhX/h9AIx3TrohfZkJB7XPXizDfdu6aAf
B/VWYW6bIAsg4Iu5rEGIw8jNAgsp2MbWDsWwpV8lm0Cdc+omk+7QrcIP1f7n6XNt
fpFEhXM7zrXLs4OH4zIhOKyzKP8xVDlC/GQSRdwNWthUSLPSmZNAWrARjrefzUIL
akJCae+ZXSu8q9T9mQHBMIuSaiFmCe08Fg==
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:19:43 2025 by rpki-client