Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/058e8951-6243-3e09-9ea4-9c5f828671a1.roa
File: 058e8951-6243-3e09-9ea4-9c5f828671a1.roa (raw, json)
Hash identifier: Y0nW/84K0hOHQeZVuj6L1FZo3m6IwXggj46IBmlrHGk=
Subject key identifier: 5D:7F:D1:A1:9B:97:E3:36:0F:2F:60:95:B0:96:87:B6:52:B9:75:1E
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E62B6CB8BFD778ED4E677080
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/058e8951-6243-3e09-9ea4-9c5f828671a1.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 15169
IP address blocks: 2001:4860:4820::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:6c:b8:bf:d7:78:ed:4e:67:70:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=dcdd7f82-0f94-42b3-af30-022e9496f1a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:43:8b:2b:05:4a:52:0d:34:2e:90:33:bf:c9:
51:8b:92:23:fd:63:62:e7:4c:42:a7:f2:7c:90:07:
48:a3:a2:f9:7e:6d:61:50:3f:37:bd:25:5b:51:ae:
d8:14:25:4a:57:5e:69:e8:f3:00:73:bc:79:9a:aa:
8c:74:25:56:4d:1d:e5:41:cf:fb:f6:7d:49:42:bc:
a5:b9:03:b7:8d:07:e1:62:05:db:9b:dd:d5:c2:81:
ad:de:26:03:96:5c:c2:dc:af:f4:5f:65:dc:74:a3:
11:76:2b:fc:9b:3d:27:35:89:bc:2a:36:9f:0b:30:
51:41:73:0d:55:a0:cd:1b:15:f2:63:15:c9:22:5a:
c2:37:a5:bd:26:e9:c0:0f:50:d9:42:ec:79:62:44:
97:86:91:61:3b:d1:84:1a:ca:f7:1a:8b:90:fa:cf:
f5:13:dc:97:2b:d2:05:bb:69:07:b1:3e:cf:fa:16:
a5:ce:4a:c4:11:68:cc:e4:20:a5:a7:a3:74:5e:c0:
25:fd:4a:2c:c5:9a:9e:af:42:57:ab:f2:5d:fb:0b:
22:e5:b5:c3:66:95:68:88:77:0d:fb:29:bc:96:c3:
28:c2:0b:03:38:f5:e1:ac:ae:c9:66:48:fb:fa:7b:
ce:b3:29:fe:e3:af:08:06:12:26:68:df:42:31:e9:
c4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:7F:D1:A1:9B:97:E3:36:0F:2F:60:95:B0:96:87:B6:52:B9:75:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/058e8951-6243-3e09-9ea4-9c5f828671a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4860:4820::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:09:12:a2:32:6e:83:fe:44:42:af:38:65:55:02:b9:06:88:
83:76:e6:46:c1:02:43:d4:e0:44:29:59:80:4a:7a:d3:27:fc:
28:3c:97:53:75:a9:ca:9e:7b:19:1f:fa:38:b8:2c:c2:73:c2:
97:b8:75:16:fe:f0:f0:4f:8f:3f:a2:7d:72:2a:78:f3:a8:f5:
63:8f:8a:51:2b:77:4e:b6:35:68:c0:1a:58:93:e5:08:2d:fc:
dd:d3:c4:fd:6a:d8:85:0c:00:fd:bc:37:56:5b:f8:85:e0:ce:
de:38:f5:2e:8a:d2:50:39:12:75:d3:83:8f:a6:41:4a:73:aa:
84:3a:06:05:bc:fd:c2:ca:ba:39:71:b8:62:c5:3a:19:96:c3:
d0:22:34:60:de:07:bf:49:01:f9:77:b4:eb:f5:f6:88:1f:f8:
69:db:e0:b8:a1:09:29:73:08:f0:d5:64:ab:ee:1c:c6:cb:a5:
0d:c7:62:d8:97:e6:1b:7c:45:ba:39:15:a8:bf:f9:5c:33:aa:
ad:5a:6b:42:14:e5:52:a7:1d:37:c6:f9:ad:cc:86:a6:98:eb:
54:a7:a6:51:1b:11:93:2a:0c:af:27:81:ff:09:e8:08:32:21:
97:8a:ee:34:c7:5a:cf:80:cc:4c:46:79:31:3d:c5:7b:3c:d2:
cc:3c:ba:3a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfmK2y4v9d47U5ncIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
ZGNkZDdmODItMGY5NC00MmIzLWFmMzAtMDIyZTk0OTZmMWE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEOLKwVKUg00LpAzv8lRi5Ij/WNi50xCp/J8
kAdIo6L5fm1hUD83vSVbUa7YFCVKV15p6PMAc7x5mqqMdCVWTR3lQc/79n1JQryl
uQO3jQfhYgXbm93VwoGt3iYDllzC3K/0X2XcdKMRdiv8mz0nNYm8KjafCzBRQXMN
VaDNGxXyYxXJIlrCN6W9JunAD1DZQux5YkSXhpFhO9GEGsr3GouQ+s/1E9yXK9IF
u2kHsT7P+halzkrEEWjM5CClp6N0XsAl/UosxZqer0JXq/Jd+wsi5bXDZpVoiHcN
+ym8lsMowgsDOPXhrK7JZkj7+nvOsyn+468IBhImaN9CMenEIQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFF1/0aGbl+M2Dy9glbCWh7ZSuXUeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDU4ZTg5NTEtNjI0My0z
ZTA5LTllYTQtOWM1ZjgyODY3MWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIYEgg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFgJEqIyboP+REKvOGVVArkGiIN25kbBAkPU4EQpWYBKetMn/Cg8
l1N1qcqeexkf+ji4LMJzwpe4dRb+8PBPjz+ifXIqePOo9WOPilErd062NWjAGliT
5Qgt/N3TxP1q2IUMAP28N1Zb+IXgzt449S6K0lA5EnXTg4+mQUpzqoQ6BgW8/cLK
ujlxuGLFOhmWw9AiNGDeB79JAfl3tOv19ogf+Gnb4LihCSlzCPDVZKvuHMbLpQ3H
YtiX5ht8Rbo5Fai/+Vwzqq1aa0IU5VKnHTfG+a3MhqaY61SnplEbEZMqDK8ngf8J
6AgyIZeK7jTHWs+AzExGeTE9xXs80sw8ujo=
-----END CERTIFICATE-----
Generated at Fri May 9 19:28:29 2025 by rpki-client