Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/641014f3-1cde-3abf-a0fd-2296e158a65c.roa
File: 641014f3-1cde-3abf-a0fd-2296e158a65c.roa (raw, json)
Hash identifier: bu0P1sDUpFPv50uQEwngSrYkKjocoMDlfHLWSdhDLKg=
Subject key identifier: 8A:5F:88:2A:BB:91:0B:CC:72:DA:42:51:47:1E:8F:67:AE:62:B0:AD
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584869607E6F1E44CF9587C05A40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/641014f3-1cde-3abf-a0fd-2296e158a65c.roa
Signing time: Thu 02 Jan 2025 14:00:52 +0000
ROA not before: Thu 02 Jan 2025 14:00:52 +0000
ROA not after: Wed 02 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:1011:f000::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:60:7e:6f:1e:44:cf:95:87:c0:5a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 2 14:00:52 2025 GMT
Not After : Apr 2 13:00:52 2025 GMT
Subject: CN=fa90333b-c000-4552-9965-fce198f61192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:82:d1:e9:1b:ab:b5:07:2f:c5:9a:c1:ed:fe:
94:59:62:a8:8a:09:30:7b:e7:66:9f:1c:ef:69:0a:
bf:0c:b8:69:ad:40:e4:2c:80:bd:cc:ea:67:93:53:
22:d3:68:03:bf:57:0e:39:16:fb:4a:cc:b6:e1:c6:
00:d4:57:64:c0:e5:b8:49:a3:be:70:fb:f3:e8:d2:
32:66:1d:e4:1d:fc:2b:2f:69:51:30:b4:28:13:c1:
a1:70:5c:68:34:21:b6:b2:50:64:f7:aa:2b:17:90:
79:35:aa:18:2b:af:98:59:04:c6:4b:11:2b:af:7f:
7b:98:2c:cc:31:c0:e2:98:37:d2:9e:fb:0c:c8:61:
f0:bd:91:39:b9:38:f5:a0:5f:37:9d:d2:fe:37:bf:
c2:ac:bd:e5:d5:a8:93:02:d5:7d:ce:88:59:e0:9f:
c4:17:65:fe:fe:6c:52:4e:ae:f9:6b:e5:65:e6:1c:
48:06:18:a8:f0:a1:b8:8d:cf:90:a1:e2:b5:d5:7e:
ed:8d:36:ac:81:91:14:e3:02:28:21:e8:a5:d9:4c:
cb:5b:90:61:3b:ba:31:2c:f5:f7:57:10:a8:8c:b9:
58:ba:24:01:7e:bb:d6:de:43:9f:b3:52:f3:33:c1:
a1:a0:97:00:d6:cb:94:12:45:c3:e1:99:6e:4c:04:
11:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:5F:88:2A:BB:91:0B:CC:72:DA:42:51:47:1E:8F:67:AE:62:B0:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/641014f3-1cde-3abf-a0fd-2296e158a65c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1011:f000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:36:46:b0:6f:5d:bb:0a:32:79:df:1b:81:80:4a:a4:76:55:
4e:92:2f:e2:b4:ad:ad:01:f7:fb:59:97:d2:e9:ea:94:8c:35:
65:08:a5:8e:bd:a6:ec:6f:9f:b5:b7:74:e2:5e:d6:86:34:cc:
ae:50:9a:d7:8f:3d:9d:76:f0:fb:66:81:df:7c:96:39:ca:e3:
f9:dd:73:89:1f:6c:aa:45:93:2c:1f:26:b3:2a:b6:d9:2c:aa:
34:f6:65:17:d3:37:b9:49:e1:58:db:fe:97:87:34:e9:8c:0e:
da:95:e1:05:3e:7f:d9:6a:f7:d7:f7:a8:6d:d6:38:f6:2f:3d:
c9:b0:0b:0e:64:64:81:e8:9c:f0:09:21:90:7f:12:e8:89:bc:
6f:29:fe:63:be:80:14:bf:d5:3b:a6:ba:e2:d0:b3:8b:c5:c8:
fe:a7:09:66:b7:20:92:dd:6b:57:e5:4d:be:51:95:ce:d7:d6:
70:fe:0d:64:8e:c1:f5:bb:2c:65:f1:b7:69:b1:6e:4f:25:3f:
7d:d9:8a:81:3e:49:23:81:ef:12:a5:8e:97:98:8f:1b:9f:99:
81:61:0a:7d:42:fa:4e:d4:dd:e2:e0:9e:30:42:82:d5:8d:59:
d2:7b:5a:54:51:25:c7:15:21:4f:d2:f8:80:67:63:ee:d6:3f:
b9:af:ff:5d
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhpYH5vHkTPlYfAWkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDEwMjE0MDA1MloXDTI1MDQwMjEzMDA1MlowLzEtMCsGA1UEAxMk
ZmE5MDMzM2ItYzAwMC00NTUyLTk5NjUtZmNlMTk4ZjYxMTkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYLR6RurtQcvxZrB7f6UWWKoigkwe+dmnxzv
aQq/DLhprUDkLIC9zOpnk1Mi02gDv1cOORb7Ssy24cYA1FdkwOW4SaO+cPvz6NIy
Zh3kHfwrL2lRMLQoE8GhcFxoNCG2slBk96orF5B5NaoYK6+YWQTGSxErr397mCzM
McDimDfSnvsMyGHwvZE5uTj1oF83ndL+N7/CrL3l1aiTAtV9zohZ4J/EF2X+/mxS
Tq75a+Vl5hxIBhio8KG4jc+QoeK11X7tjTasgZEU4wIoIeil2UzLW5BhO7oxLPX3
VxCojLlYuiQBfrvW3kOfs1LzM8GhoJcA1suUEkXD4ZluTAQRMQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIpfiCq7kQvMctpCUUcej2euYrCtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNjQxMDE0ZjMtMWNkZS0z
YWJmLWEwZmQtMjI5NmUxNThhNjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQEfAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGk2RrBvXbsKMnnfG4GASqR2VU6SL+K0ra0B9/tZl9Lp6pSMNWUI
pY69puxvn7W3dOJe1oY0zK5QmtePPZ128Ptmgd98ljnK4/ndc4kfbKpFkywfJrMq
ttksqjT2ZRfTN7lJ4Vjb/peHNOmMDtqV4QU+f9lq99f3qG3WOPYvPcmwCw5kZIHo
nPAJIZB/EuiJvG8p/mO+gBS/1TumuuLQs4vFyP6nCWa3IJLda1flTb5Rlc7X1nD+
DWSOwfW7LGXxt2mxbk8lP33ZioE+SSOB7xKljpeYjxufmYFhCn1C+k7U3eLgnjBC
gtWNWdJ7WlRRJccVIU/S+IBnY+7WP7mv/10=
-----END CERTIFICATE-----
Generated at Fri Apr 25 20:15:01 2025 by rpki-client