Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2985ed9e-6a26-3c06-9051-3bb4f6140077.roa
File: 2985ed9e-6a26-3c06-9051-3bb4f6140077.roa (raw, json)
Hash identifier: R0/AdYMl0uQp8+Qx+eDuCC3shUcYDFAi14WXNwKsXkE=
Subject key identifier: 45:C0:71:74:5E:FB:BB:3C:C7:12:2B:A9:BA:68:74:A8:51:B4:66:BB
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB4F534489A069EC285100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2985ed9e-6a26-3c06-9051-3bb4f6140077.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:1003:a011::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:4f:53:44:89:a0:69:ec:28:51:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=d10ddc79-a055-4de6-867a-263e5708a481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4a:44:d8:23:17:59:66:87:ed:1d:b3:74:22:
99:93:f4:0c:35:46:fe:fa:47:a1:79:84:66:94:0b:
39:6a:18:4b:1c:5c:37:77:15:0a:73:a1:1c:df:47:
fe:2d:21:36:75:97:7e:12:77:e7:ea:f1:e7:71:7a:
79:e4:9e:ab:da:9b:71:bd:bc:37:63:6a:f4:5d:57:
14:18:d2:49:cc:ed:07:2f:17:ff:b1:70:79:ac:fe:
34:98:40:af:ad:36:b0:ce:79:b7:95:41:50:0d:44:
bb:64:34:52:37:c7:b4:84:d1:59:bd:29:ac:ad:74:
21:44:b4:1b:09:aa:06:89:4a:d2:9e:4c:b3:43:58:
1a:d4:27:78:f7:cb:88:da:2b:10:03:c6:b7:58:ac:
36:3c:ea:72:29:3a:fd:67:26:a3:5c:d6:f3:bc:55:
3d:c0:b0:f5:65:be:05:b6:9d:c2:39:cb:9b:f7:18:
e8:5b:c3:b2:04:12:a1:9f:48:91:f0:dc:82:11:23:
93:39:dc:86:e9:e0:ed:18:89:dd:d8:02:18:03:f2:
bd:89:cf:3a:b0:a8:2b:05:de:00:a0:d4:67:78:3d:
fb:0f:a9:23:93:11:80:2e:53:ef:1e:71:b8:fd:a9:
42:d9:0e:af:e2:a0:30:c0:32:ce:2c:de:b4:23:22:
cf:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C0:71:74:5E:FB:BB:3C:C7:12:2B:A9:BA:68:74:A8:51:B4:66:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2985ed9e-6a26-3c06-9051-3bb4f6140077.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1003:a011::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:08:76:77:3d:5f:cf:d6:80:64:3d:db:be:68:ea:9c:1e:17:
54:8a:e0:8b:bf:fc:e0:b4:13:58:29:e9:2c:0c:b5:b8:c9:87:
83:5c:4c:66:61:2f:93:8c:c8:c1:75:a2:a1:a1:ca:41:23:2e:
c1:c0:16:7d:b7:2b:c2:b9:b7:7c:e6:98:3f:02:df:23:6d:7e:
da:03:56:a7:8d:0e:33:cc:a3:17:e4:f0:c0:f0:ab:31:3d:40:
f4:e1:04:76:8c:f3:55:0b:f2:d1:02:fe:27:c2:9a:6b:23:72:
89:d4:d3:a7:ce:36:69:00:a6:b6:62:dc:29:f0:e8:fd:3e:25:
1c:2f:bc:4e:64:9b:8b:ab:19:35:91:03:87:fe:75:0c:e6:7e:
4a:01:c5:db:4b:de:86:7b:ab:9f:45:b7:72:b7:da:30:d8:f4:
65:2b:d5:b8:91:c7:f7:16:55:c2:7c:0d:b1:44:7b:c1:3d:55:
46:b3:bb:a3:78:02:4a:cf:e1:f2:0e:23:43:37:d1:8d:5b:9b:
78:2c:5e:12:af:9b:8f:86:bd:d3:7e:7c:e6:14:32:4c:2b:ca:
8f:44:69:e7:cf:e0:2d:a0:59:56:75:1e:ea:6e:ee:42:c8:3b:
07:58:5f:e7:e4:14:eb:57:6f:55:fc:d3:73:f4:e9:34:d4:75:
63:30:68:76
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEh8609TRImgaewoUQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDEwOTE0MDA1MloXDTI1MDQwOTEzMDA1MlowLzEtMCsGA1UEAxMk
ZDEwZGRjNzktYTA1NS00ZGU2LTg2N2EtMjYzZTU3MDhhNDgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEpE2CMXWWaH7R2zdCKZk/QMNUb++keheYRm
lAs5ahhLHFw3dxUKc6Ec30f+LSE2dZd+Enfn6vHncXp55J6r2ptxvbw3Y2r0XVcU
GNJJzO0HLxf/sXB5rP40mECvrTawznm3lUFQDUS7ZDRSN8e0hNFZvSmsrXQhRLQb
CaoGiUrSnkyzQ1ga1Cd498uI2isQA8a3WKw2POpyKTr9ZyajXNbzvFU9wLD1Zb4F
tp3COcub9xjoW8OyBBKhn0iR8NyCESOTOdyG6eDtGInd2AIYA/K9ic86sKgrBd4A
oNRneD37D6kjkxGALlPvHnG4/alC2Q6v4qAwwDLOLN60IyLPwQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEXAcXRe+7s8xxIrqbpodKhRtGa7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjk4NWVkOWUtNmEyNi0z
YzA2LTkwNTEtM2JiNGY2MTQwMDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQA6AR
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIYIdnc9X8/WgGQ9275o6pweF1SK4Iu//OC0E1gp6SwMtbjJh4Nc
TGZhL5OMyMF1oqGhykEjLsHAFn23K8K5t3zmmD8C3yNtftoDVqeNDjPMoxfk8MDw
qzE9QPThBHaM81UL8tEC/ifCmmsjconU06fONmkAprZi3Cnw6P0+JRwvvE5km4ur
GTWRA4f+dQzmfkoBxdtL3oZ7q59Ft3K32jDY9GUr1biRx/cWVcJ8DbFEe8E9VUaz
u6N4AkrP4fIOI0M30Y1bm3gsXhKvm4+GvdN+fOYUMkwryo9EaefP4C2gWVZ1Hupu
7kLIOwdYX+fkFOtXb1X803P06TTUdWMwaHY=
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:23:27 2025 by rpki-client