Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5372cff9-908a-394e-bcd5-28c0573274b7.roa
File: 5372cff9-908a-394e-bcd5-28c0573274b7.roa (raw, json)
Hash identifier: rcsdy8LbWFEiEtScqmDQOEesYqCglpadU+Tn98gjP8Q=
Subject key identifier: D6:F1:19:0D:C9:7D:C4:27:D6:CF:CE:67:67:00:C6:73:AE:F2:93:1D
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858488AE0AF6B0C918DE690AEB320
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5372cff9-908a-394e-bcd5-28c0573274b7.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 20940
IP address blocks: 2600:1402:800::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:af:6b:0c:91:8d:e6:90:ae:b3:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=cfb33b80-ed83-4e8e-9b38-7c6a37981b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:fb:db:84:a7:82:ee:57:66:79:8d:0e:f3:29:
51:15:d3:43:1c:94:68:66:c0:cc:db:42:16:a5:91:
d7:c2:0c:90:0a:ec:ca:e2:88:96:0c:a4:40:46:aa:
56:1e:71:98:4f:28:02:5e:9f:5b:97:74:0c:61:ed:
18:e9:db:a6:3c:97:54:02:d3:39:be:4f:65:3c:c7:
9b:47:c1:55:7a:85:6e:5c:93:64:bb:bb:f8:36:dd:
2f:e6:44:38:32:6c:a2:ab:28:90:47:be:b3:fa:e6:
99:50:bf:c3:4b:27:ac:fb:ab:fa:b1:2b:ca:98:c4:
15:42:f2:2d:0d:f9:69:84:b9:42:13:ce:fc:c0:c5:
7e:30:07:d7:9d:49:a3:f5:58:e9:26:6c:b2:98:40:
68:07:25:fa:3a:08:d5:0d:a7:df:1b:c5:be:52:b4:
ee:43:00:81:28:0e:c1:00:ab:b8:4c:54:55:68:6d:
f2:ca:3f:79:c1:17:38:7a:c4:e4:54:f6:e2:e1:5a:
d4:47:15:c4:66:6e:d1:18:15:b5:95:72:82:4e:fd:
60:ba:91:3d:6c:92:18:f9:ce:a0:1e:08:a2:9e:ec:
bc:66:25:e2:51:a7:b8:45:14:ab:0c:43:be:cb:3b:
b7:ea:a1:66:16:48:78:e4:c5:d4:00:27:db:c0:be:
a6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F1:19:0D:C9:7D:C4:27:D6:CF:CE:67:67:00:C6:73:AE:F2:93:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5372cff9-908a-394e-bcd5-28c0573274b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1402:800::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:36:63:ba:05:78:b3:2c:a4:f7:40:02:90:92:b5:20:8e:d7:
af:05:c5:13:5a:8b:9e:f9:7a:a2:7d:d6:94:ff:36:1f:8b:8d:
bd:8c:d5:80:df:05:c6:50:de:d8:2d:d0:e9:6a:fe:c9:38:84:
66:e2:67:61:a6:65:1b:b1:dc:15:5b:50:1b:34:1a:38:b2:e5:
15:a8:bb:17:33:8b:5f:0e:6f:49:88:e5:15:74:e1:1c:03:25:
5c:ac:a1:c9:0e:fa:67:3f:d5:4a:ae:e3:e9:ab:0b:ef:63:9b:
30:7f:57:a3:d9:77:a8:1f:ce:cf:b4:94:f3:0e:5f:c0:6e:00:
8a:78:5f:78:4b:3e:f0:1c:9e:27:46:20:fd:a1:f4:6a:5c:5b:
c0:70:23:fb:78:16:4e:f6:f7:e8:68:dc:b6:41:5a:60:7a:0e:
f1:63:18:70:5d:18:7c:15:8b:f2:16:fd:ff:83:bc:3b:3a:69:
cb:08:33:56:a0:cd:35:e4:74:15:ea:39:4d:47:77:39:a5:d8:
2a:da:8d:63:02:70:d4:f7:ae:85:fc:3d:d4:de:59:64:bb:b0:
f2:22:55:a9:86:ed:c0:37:14:2f:8a:ce:3a:08:09:db:06:75:
2b:bb:82:56:29:32:27:49:a5:7c:06:b7:a5:19:7e:5b:e0:c0:
09:7d:3b:af
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiK4K9rDJGN5pCusyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDExNDE0MDA1MVoXDTI1MDQxNDEzMDA1MVowLzEtMCsGA1UEAxMk
Y2ZiMzNiODAtZWQ4My00ZThlLTliMzgtN2M2YTM3OTgxYjc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifvbhKeC7ldmeY0O8ylRFdNDHJRoZsDM20IW
pZHXwgyQCuzK4oiWDKRARqpWHnGYTygCXp9bl3QMYe0Y6dumPJdUAtM5vk9lPMeb
R8FVeoVuXJNku7v4Nt0v5kQ4MmyiqyiQR76z+uaZUL/DSyes+6v6sSvKmMQVQvIt
DflphLlCE878wMV+MAfXnUmj9VjpJmyymEBoByX6OgjVDaffG8W+UrTuQwCBKA7B
AKu4TFRVaG3yyj95wRc4esTkVPbi4VrURxXEZm7RGBW1lXKCTv1gupE9bJIY+c6g
Hgiinuy8ZiXiUae4RRSrDEO+yzu36qFmFkh45MXUACfbwL6maQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNbxGQ3JfcQn1s/OZ2cAxnOu8pMdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTM3MmNmZjktOTA4YS0z
OTRlLWJjZDUtMjhjMDU3MzI3NGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUAggA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIs2Y7oFeLMspPdAApCStSCO168FxRNai575eqJ91pT/Nh+Ljb2M
1YDfBcZQ3tgt0Olq/sk4hGbiZ2GmZRux3BVbUBs0Gjiy5RWouxczi18Ob0mI5RV0
4RwDJVysockO+mc/1Uqu4+mrC+9jmzB/V6PZd6gfzs+0lPMOX8BuAIp4X3hLPvAc
nidGIP2h9GpcW8BwI/t4Fk729+ho3LZBWmB6DvFjGHBdGHwVi/IW/f+DvDs6acsI
M1agzTXkdBXqOU1Hdzml2CrajWMCcNT3roX8PdTeWWS7sPIiVamG7cA3FC+KzjoI
CdsGdSu7glYpMidJpXwGt6UZflvgwAl9O68=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:37:34 2025 by rpki-client