Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c7e585e0-7f8e-3303-bd06-d9c41c61c420.roa
File: c7e585e0-7f8e-3303-bd06-d9c41c61c420.roa (raw, json)
Hash identifier: dgiszZ6f9xC0v8B28o5NZXnIsDFJ/Ietoc0FS/d4Wxg=
Subject key identifier: 5A:2A:17:3A:D8:78:2A:50:84:AD:29:41:B0:05:6E:71:AA:B3:7A:0B
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858481C9A98A64C02BA932EF2EB80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c7e585e0-7f8e-3303-bd06-d9c41c61c420.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 35994
IP address blocks: 2600:141b:9800::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:98:a6:4c:02:ba:93:2e:f2:eb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=9f5b582b-bbb8-48fd-8e16-16c031d330a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8a:b2:b4:ba:d6:db:4f:cb:6e:00:28:02:6e:
b9:3d:d5:f1:ef:4c:36:42:f0:db:ad:37:d9:c2:b7:
c2:c8:34:58:6c:45:d3:a2:05:84:71:9c:be:3e:d8:
8d:dc:45:42:6f:4a:97:78:26:08:a0:81:53:58:d1:
5d:9d:7e:f6:ce:f0:77:d4:c0:61:ca:0e:1a:86:6d:
54:91:e7:d6:ac:a3:7b:15:58:87:cf:03:aa:64:ca:
0c:4a:7d:68:f2:70:5f:fd:32:80:6f:52:a7:41:b1:
cd:ef:02:92:18:9b:31:31:12:e4:33:99:6f:71:00:
f3:c7:78:03:87:e3:f8:c9:6e:e7:4d:96:12:2a:88:
7c:1f:3f:30:e1:b2:03:50:84:a6:ab:02:cb:06:77:
3f:0a:f3:ec:cb:e8:b2:10:c4:ec:9e:60:11:25:4e:
c3:10:d4:8b:55:d4:93:33:d9:59:e9:7b:a7:c5:6e:
78:16:b6:96:c0:f7:6a:a8:da:55:f9:7d:bb:90:d8:
52:f7:22:09:d1:83:18:b3:bb:74:1b:5e:d9:19:30:
0d:93:0a:dd:d9:bc:d4:bf:16:1f:bc:e1:c5:ad:d6:
57:76:28:3a:b5:d8:cf:89:1b:90:84:ef:82:9f:90:
ca:38:c1:4b:18:be:84:71:27:c8:50:57:10:df:13:
82:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2A:17:3A:D8:78:2A:50:84:AD:29:41:B0:05:6E:71:AA:B3:7A:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c7e585e0-7f8e-3303-bd06-d9c41c61c420.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:141b:9800::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:ed:ef:fb:3f:0e:7b:55:ef:49:a7:5c:ee:1b:d3:b7:8b:fe:
b5:50:55:57:35:4b:0c:d9:4a:86:b8:ec:e6:3f:34:88:8d:aa:
94:ad:ea:0c:ee:db:d8:c0:04:dd:2f:74:1d:d3:dd:d7:6a:cd:
af:37:a0:c1:ce:ad:ef:cd:59:b6:4a:45:36:5a:e1:1e:07:db:
b8:38:5f:52:22:f2:76:bc:3e:2b:fd:d7:61:b8:47:0b:66:89:
92:15:78:1e:9b:53:c4:8e:27:19:62:c3:93:a8:a2:85:f9:23:
35:f7:ac:f5:56:17:c4:9a:c9:a7:5b:01:10:33:0b:7a:f2:0a:
0a:ce:ee:61:98:8e:e7:5c:84:0d:f9:5a:53:ac:0c:7c:fa:9a:
40:b1:7a:fb:29:46:07:57:55:2b:1e:db:fc:a1:88:bb:f6:05:
09:59:21:72:4b:93:77:18:b0:63:da:30:a1:6e:07:d4:58:4e:
e8:e4:cd:76:9c:e4:23:75:29:a9:7f:a5:4c:6e:d7:b4:44:62:
b7:10:b7:9c:59:85:70:f7:66:e6:b5:d0:1f:7c:5f:0e:41:59:
0a:81:7a:64:6a:ed:9f:53:30:14:c9:c1:58:dc:8f:40:0e:ce:
6f:ec:d5:db:d7:08:64:aa:91:02:b0:e8:f8:06:1a:23:18:bd:
6b:0e:76:8c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgcmpimTAK6ky7y64AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIwNjAyMDAzOVoXDTI1MDMwNjAyMDAzOVowLzEtMCsGA1UEAxMk
OWY1YjU4MmItYmJiOC00OGZkLThlMTYtMTZjMDMxZDMzMGE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYqytLrW20/LbgAoAm65PdXx70w2QvDbrTfZ
wrfCyDRYbEXTogWEcZy+PtiN3EVCb0qXeCYIoIFTWNFdnX72zvB31MBhyg4ahm1U
kefWrKN7FViHzwOqZMoMSn1o8nBf/TKAb1KnQbHN7wKSGJsxMRLkM5lvcQDzx3gD
h+P4yW7nTZYSKoh8Hz8w4bIDUISmqwLLBnc/CvPsy+iyEMTsnmARJU7DENSLVdST
M9lZ6XunxW54FraWwPdqqNpV+X27kNhS9yIJ0YMYs7t0G17ZGTANkwrd2bzUvxYf
vOHFrdZXdig6tdjPiRuQhO+Cn5DKOMFLGL6EcSfIUFcQ3xOC9wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFoqFzrYeCpQhK0pQbAFbnGqs3oLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzdlNTg1ZTAtN2Y4ZS0z
MzAzLWJkMDYtZDljNDFjNjFjNDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUG5gA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFnt7/s/DntV70mnXO4b07eL/rVQVVc1SwzZSoa47OY/NIiNqpSt
6gzu29jABN0vdB3T3ddqza83oMHOre/NWbZKRTZa4R4H27g4X1Ii8na8Piv912G4
RwtmiZIVeB6bU8SOJxliw5OoooX5IzX3rPVWF8SayadbARAzC3ryCgrO7mGYjudc
hA35WlOsDHz6mkCxevspRgdXVSse2/yhiLv2BQlZIXJLk3cYsGPaMKFuB9RYTujk
zXac5CN1Kal/pUxu17REYrcQt5xZhXD3Zua10B98Xw5BWQqBemRq7Z9TMBTJwVjc
j0AOzm/s1dvXCGSqkQKw6PgGGiMYvWsOdow=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:34:03 2025 by rpki-client