Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0cf53e58-6557-450f-832c-9baa5c99cca4/36b03146-dd73-3248-be37-0da714d40fd5.roa
File: 36b03146-dd73-3248-be37-0da714d40fd5.roa (raw, json)
Hash identifier: 7UoKyqemaIOfUYUEN8RjUHIDF19I1iONO2gME3TuxNY=
Subject key identifier: 30:16:1B:2D:17:D7:BB:81:C7:B1:27:65:81:4B:F6:D8:62:D3:B3:EA
Certificate issuer: /CN=0cf53e58-6557-450f-832c-9baa5c99cca4
Certificate serial: 010D0C9F4328584832F03325F1FFDABCB9D51E00
Authority key identifier: 9D:12:7B:B3:E3:C3:F4:64:BC:E1:32:60:ED:35:87:5D:E7:FA:47:59
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0cf53e58-6557-450f-832c-9baa5c99cca4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0cf53e58-6557-450f-832c-9baa5c99cca4/36b03146-dd73-3248-be37-0da714d40fd5.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 16509
IP address blocks: 2607:f250:e000::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:33:25:f1:ff:da:bc:b9:d5:1e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cf53e58-6557-450f-832c-9baa5c99cca4
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=0bcf33dd-c617-47ef-88c7-3abeeee58b92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:fa:e7:40:b2:4f:eb:34:34:f7:2c:22:ff:ae:
3c:5f:67:6a:8b:25:d5:98:c7:da:71:5d:31:98:77:
64:dd:96:fe:a6:2d:b8:00:19:6a:8b:4c:d2:63:59:
9d:96:33:7c:24:b2:8c:fd:29:ba:09:f0:e2:06:d4:
34:fa:ca:f4:7f:3b:3a:d9:43:ba:db:16:6f:44:80:
d1:f1:e6:c6:25:83:9e:e8:00:b1:4b:99:f5:ee:eb:
6f:af:71:a3:60:79:b5:17:ec:c8:8c:63:30:ba:6f:
71:6c:56:23:af:1d:33:55:48:c9:80:c0:e6:43:4a:
1f:86:a7:23:ae:a5:3c:23:e8:c2:ce:b6:16:f1:bb:
29:40:b0:f1:3e:03:2f:c5:2d:a9:c8:e3:6c:b6:15:
65:e2:0f:92:a3:84:9e:b8:6b:d9:81:ba:2b:94:0c:
75:53:c2:ba:22:e3:c8:ab:97:be:22:1f:a7:25:56:
fd:4d:b1:cd:4e:34:5d:ff:ec:9e:aa:5f:83:0c:3d:
e6:03:60:c3:97:78:f6:a6:cb:de:f9:56:b2:6f:79:
97:f2:34:cd:4a:a1:69:e9:61:e7:ba:76:47:ce:88:
c7:90:7d:9d:30:e4:bf:ad:04:e1:22:cc:46:cc:e4:
66:fe:f2:f7:fe:c9:1b:78:19:70:fd:e4:5f:82:31:
e2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:16:1B:2D:17:D7:BB:81:C7:B1:27:65:81:4B:F6:D8:62:D3:B3:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0cf53e58-6557-450f-832c-9baa5c99cca4/36b03146-dd73-3248-be37-0da714d40fd5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0cf53e58-6557-450f-832c-9baa5c99cca4/0cf53e58-6557-450f-832c-9baa5c99cca4.crl
X509v3 Authority Key Identifier:
keyid:9D:12:7B:B3:E3:C3:F4:64:BC:E1:32:60:ED:35:87:5D:E7:FA:47:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0cf53e58-6557-450f-832c-9baa5c99cca4.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:f250:e000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:52:c9:ff:cd:d0:e7:e6:23:b1:4d:91:9b:09:3f:8f:ca:0e:
70:bc:53:6b:97:b5:f4:79:6f:26:7e:8f:6a:ef:db:38:6c:f2:
23:8f:49:27:e3:9e:6a:42:e5:ce:bc:b1:32:5b:e6:28:f1:d4:
ce:4f:cf:13:df:b4:79:9f:dd:2b:15:07:99:02:7c:66:70:1e:
7c:94:6c:83:78:4d:83:57:a3:c7:f4:13:96:23:c5:f8:de:30:
f1:fd:90:14:1a:fa:5c:22:8d:8a:a4:a8:f4:b8:9c:8c:0e:12:
2a:ce:72:2d:59:da:4e:4a:e9:36:76:d3:33:00:1b:d7:cd:56:
ac:12:85:29:7f:26:e7:7a:c0:29:a1:d4:22:be:5d:fa:a5:31:
07:8a:a7:42:08:7a:0f:a1:42:89:3c:6e:e8:2a:dd:05:43:70:
30:16:cb:95:2e:4c:65:aa:a6:de:93:10:d8:75:13:d0:57:4e:
11:3c:92:d7:1d:57:67:93:9d:1e:6b:8e:88:61:2e:f8:94:25:
67:be:c1:47:e6:b9:a2:e7:3c:04:25:3c:fe:ba:f1:e3:7a:41:
7b:fb:d3:43:15:96:28:ea:d7:86:13:1b:d0:e0:18:51:7b:dc:
f6:55:13:d5:8b:cd:35:5a:40:d7:9e:16:5b:e1:15:cd:62:32:
04:8d:2e:8d
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgy8DMl8f/avLnVHgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGNmNTNlNTgtNjU1Ny00NTBmLTgzMmMtOWJhYTVjOTlj
Y2E0MB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk
MGJjZjMzZGQtYzYxNy00N2VmLTg4YzctM2FiZWVlZTU4YjkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvrnQLJP6zQ09ywi/648X2dqiyXVmMfacV0x
mHdk3Zb+pi24ABlqi0zSY1mdljN8JLKM/Sm6CfDiBtQ0+sr0fzs62UO62xZvRIDR
8ebGJYOe6ACxS5n17utvr3GjYHm1F+zIjGMwum9xbFYjrx0zVUjJgMDmQ0ofhqcj
rqU8I+jCzrYW8bspQLDxPgMvxS2pyONsthVl4g+So4SeuGvZgborlAx1U8K6IuPI
q5e+Ih+nJVb9TbHNTjRd/+yeql+DDD3mA2DDl3j2psve+Vayb3mX8jTNSqFp6WHn
unZHzojHkH2dMOS/rQThIsxGzORm/vL3/skbeBlw/eRfgjHiWwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDAWGy0X17uBx7EnZYFL9thi07PqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wY2Y1
M2U1OC02NTU3LTQ1MGYtODMyYy05YmFhNWM5OWNjYTQvMzZiMDMxNDYtZGQ3My0z
MjQ4LWJlMzctMGRhNzE0ZDQwZmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGNmNTNlNTgtNjU1Ny00NTBmLTgz
MmMtOWJhYTVjOTljY2E0LzBjZjUzZTU4LTY1NTctNDUwZi04MzJjLTliYWE1Yzk5
Y2NhNC5jcmwwHwYDVR0jBBgwFoAUnRJ7s+PD9GS84TJg7TWHXef6R1kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8wY2Y1M2U1OC02NTU3LTQ1MGYtODMyYy05YmFh
NWM5OWNjYTQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgfyUOAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGNSyf/N0OfmI7FNkZsJP4/KDnC8U2uXtfR5byZ+j2rv2zhs8iOP
SSfjnmpC5c68sTJb5ijx1M5PzxPftHmf3SsVB5kCfGZwHnyUbIN4TYNXo8f0E5Yj
xfjeMPH9kBQa+lwijYqkqPS4nIwOEirOci1Z2k5K6TZ20zMAG9fNVqwShSl/Jud6
wCmh1CK+XfqlMQeKp0IIeg+hQok8bugq3QVDcDAWy5UuTGWqpt6TENh1E9BXThE8
ktcdV2eTnR5rjohhLviUJWe+wUfmuaLnPAQlPP668eN6QXv700MVlijq14YTG9Dg
GFF73PZVE9WLzTVaQNeeFlvhFc1iMgSNLo0=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:44:10 2025 by rpki-client