Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ba59b760-0142-3f51-af33-d337e00ea9a6.roa
File: ba59b760-0142-3f51-af33-d337e00ea9a6.roa (raw, json)
Hash identifier: JGOLOe0K9OH8FfB6TtDKi2rK0dTINaFRYmPfvfnWVcM=
Subject key identifier: EF:F1:18:E3:25:AE:D5:97:4E:DF:DA:48:F2:51:6F:25:1E:B2:E4:51
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858481F652801B2547492FFD94600
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ba59b760-0142-3f51-af33-d337e00ea9a6.roa
Signing time: Sat 07 Dec 2024 02:00:39 +0000
ROA not before: Sat 07 Dec 2024 02:00:39 +0000
ROA not after: Fri 07 Mar 2025 02:00:39 +0000
asID: 12222
IP address blocks: 2001:4878:a038::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1f:65:28:01:b2:54:74:92:ff:d9:46:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 7 02:00:39 2024 GMT
Not After : Mar 7 02:00:39 2025 GMT
Subject: CN=46f96b81-c0b8-4d1b-b314-2ea87908c8bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b9:52:91:28:e5:f1:a0:2e:5e:8d:77:77:a4:
59:93:45:73:27:96:6d:24:c7:42:a2:e8:91:09:4d:
74:64:8a:a3:70:3f:e5:74:0c:a2:af:ad:3d:6d:67:
b2:71:99:62:eb:1c:e0:5e:c7:ce:5a:0e:cc:a4:45:
68:32:f5:30:0b:0c:a2:38:3d:a2:d0:e7:46:ae:7d:
c7:32:6e:5a:64:c6:ca:15:3d:0a:da:a4:72:91:20:
ab:12:ac:d1:58:21:7e:39:66:32:42:86:b6:05:d3:
6f:97:7a:b7:97:8e:4c:06:e0:e7:6e:79:97:91:df:
0e:03:20:25:81:7e:7e:af:72:bc:bc:0b:86:a5:d8:
6a:92:d3:6e:f0:8a:18:2b:2a:27:b4:82:51:6c:73:
a4:19:4c:05:4b:25:7f:7c:93:d8:af:00:02:39:cf:
16:de:f8:10:4b:4d:ec:66:17:dc:de:ce:7b:99:27:
c9:ae:c4:b2:cb:2a:97:78:ce:86:85:b8:17:69:8d:
1d:02:d2:c3:c2:99:71:59:c5:3a:8f:25:cf:51:66:
c7:85:e2:99:df:2a:ed:9a:24:b6:48:3c:fe:e5:73:
82:1a:ff:15:fb:05:5c:06:e1:de:ac:cd:db:c9:6a:
66:70:d8:36:06:0c:4a:bc:7f:f6:bf:d1:38:f4:81:
62:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F1:18:E3:25:AE:D5:97:4E:DF:DA:48:F2:51:6F:25:1E:B2:E4:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ba59b760-0142-3f51-af33-d337e00ea9a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4878:a038::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:96:d1:80:66:ff:63:bf:92:49:bd:77:31:05:db:12:e5:24:
33:e9:5e:33:2b:cd:dd:28:48:a5:cc:55:48:74:78:ff:0d:f0:
8f:82:d5:20:e8:af:41:18:30:90:39:c5:03:4d:7a:d2:37:bc:
5b:dd:ef:e2:8e:94:ad:9e:a8:58:d3:ff:d0:b8:9e:1a:7e:d0:
49:72:bc:ed:e3:48:b4:c8:81:cd:40:0f:d3:cf:cd:0d:97:e2:
48:b5:a7:8f:11:41:17:a1:df:9b:db:84:93:cd:70:e5:4b:ed:
8f:13:5f:8a:38:92:76:dc:07:f6:9b:d8:56:b8:36:0d:26:da:
ad:07:96:2b:ed:4b:2a:cb:31:3c:b6:dd:bd:21:c1:44:90:03:
ef:c2:9f:9b:92:fc:4f:cc:ba:f4:66:d5:69:dd:66:c9:c0:61:
09:d3:a2:d5:91:0a:8c:ce:3d:e2:94:ea:0d:0e:02:aa:66:31:
84:6f:b8:ca:01:29:dd:99:cf:14:97:fd:fc:7a:da:52:08:bc:
d7:5e:0d:1c:74:5d:7d:c8:8b:c0:c6:f5:4c:d7:07:9d:2f:9e:
2b:7e:07:c8:b9:54:09:79:f8:26:38:90:3e:02:47:b2:d5:fa:
06:f6:46:b8:cc:4a:fe:0a:f0:8c:fb:91:33:fc:0f:f7:82:94:
fa:6b:a9:b5
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgfZSgBslR0kv/ZRgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIwNzAyMDAzOVoXDTI1MDMwNzAyMDAzOVowLzEtMCsGA1UEAxMk
NDZmOTZiODEtYzBiOC00ZDFiLWIzMTQtMmVhODc5MDhjOGJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLlSkSjl8aAuXo13d6RZk0VzJ5ZtJMdCouiR
CU10ZIqjcD/ldAyir609bWeycZli6xzgXsfOWg7MpEVoMvUwCwyiOD2i0OdGrn3H
Mm5aZMbKFT0K2qRykSCrEqzRWCF+OWYyQoa2BdNvl3q3l45MBuDnbnmXkd8OAyAl
gX5+r3K8vAuGpdhqktNu8IoYKyontIJRbHOkGUwFSyV/fJPYrwACOc8W3vgQS03s
Zhfc3s57mSfJrsSyyyqXeM6GhbgXaY0dAtLDwplxWcU6jyXPUWbHheKZ3yrtmiS2
SDz+5XOCGv8V+wVcBuHerM3byWpmcNg2BgxKvH/2v9E49IFiXQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFO/xGOMlrtWXTt/aSPJRbyUesuRRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmE1OWI3NjAtMDE0Mi0z
ZjUxLWFmMzMtZDMzN2UwMGVhOWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeKA4
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEOW0YBm/2O/kkm9dzEF2xLlJDPpXjMrzd0oSKXMVUh0eP8N8I+C
1SDor0EYMJA5xQNNetI3vFvd7+KOlK2eqFjT/9C4nhp+0ElyvO3jSLTIgc1AD9PP
zQ2X4ki1p48RQReh35vbhJPNcOVL7Y8TX4o4knbcB/ab2Fa4Ng0m2q0HlivtSyrL
MTy23b0hwUSQA+/Cn5uS/E/MuvRm1WndZsnAYQnTotWRCozOPeKU6g0OAqpmMYRv
uMoBKd2ZzxSX/fx62lIIvNdeDRx0XX3Ii8DG9UzXB50vnit+B8i5VAl5+CY4kD4C
R7LV+gb2RrjMSv4K8Iz7kTP8D/eClPprqbU=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:44:12 2025 by rpki-client