Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/6e92f77b-e528-38fe-a618-5f254f2bcc7a.roa
File: 6e92f77b-e528-38fe-a618-5f254f2bcc7a.roa (raw, json)
Hash identifier: BIX6LRcPtiPNyUZ1kceK/pNyXbVvKqDmuFS+MIC4j6E=
Subject key identifier: E8:9C:52:0A:91:04:0E:19:84:0B:D7:EB:77:54:B5:04:DA:0D:BD:34
Certificate issuer: /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
Certificate serial: 010D0C9F432858481C9A8B6F8FE47A5D9D425E00
Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/6e92f77b-e528-38fe-a618-5f254f2bcc7a.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 25623
IP address blocks: 2001:4830:2070::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:8b:6f:8f:e4:7a:5d:9d:42:5e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=f525b933-8fd2-4bc9-bd76-3a18e9a79308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1d:ce:8f:77:28:34:61:c5:66:25:bf:80:05:
b9:02:58:2a:63:a7:11:0d:db:4b:a7:7d:b9:f1:7a:
89:13:44:5e:5a:5b:fa:39:18:22:41:a7:c3:0f:38:
21:0c:26:e0:41:58:7f:4a:20:b0:52:bf:3a:4f:a2:
25:64:b2:b5:d1:8c:2a:b8:e7:f2:b6:6a:27:00:3b:
5c:e7:99:d5:b7:ec:f8:1a:4e:be:b4:f0:22:65:bf:
fa:8d:67:e5:a5:a3:b9:f6:cf:41:3e:7d:da:dc:d2:
f7:9b:0e:09:d7:0c:2c:da:f8:da:1b:02:a6:6d:e2:
2b:63:0a:1c:de:8a:9a:b9:a1:7d:78:c9:26:56:1e:
cb:b6:9c:e6:46:38:a7:f7:d5:eb:2f:51:69:3c:75:
0e:98:9f:c5:09:4f:6f:29:2f:fa:9f:d8:85:77:00:
a6:24:ac:d2:a7:3d:cf:f2:82:92:7f:0a:f7:47:61:
2a:70:9a:e1:74:24:1e:55:21:ab:05:ed:e9:93:04:
9c:96:c4:8d:b3:0e:fd:fb:2b:53:a9:2f:ee:bb:07:
3e:d8:9e:eb:c6:75:b4:19:1c:61:0a:d1:8d:c6:56:
9d:b6:0c:3b:e7:f0:d4:db:26:54:fe:dd:ea:1c:8c:
f2:e8:b0:f8:63:e6:1f:b7:ec:d7:9c:69:64:ea:38:
82:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9C:52:0A:91:04:0E:19:84:0B:D7:EB:77:54:B5:04:DA:0D:BD:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/6e92f77b-e528-38fe-a618-5f254f2bcc7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl
X509v3 Authority Key Identifier:
keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4830:2070::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:71:bb:db:4d:8e:9d:af:51:dc:ed:dc:79:23:fb:b3:fc:ed:
e6:22:c7:1c:bd:e5:65:f1:d8:dd:8c:99:e2:66:06:e1:42:3e:
e3:0e:72:f3:9b:ca:cb:64:15:10:c9:62:5b:c9:83:93:34:53:
9e:e9:ad:6d:91:2f:33:c1:a2:4d:b8:a7:20:3f:57:e1:7b:46:
46:ea:87:6d:a3:73:77:0c:12:b5:bc:9a:ff:6e:ab:c3:30:3a:
4f:fa:05:6a:b8:6c:b7:da:d4:50:9f:e4:f3:b3:0c:bb:0d:69:
2e:32:11:14:8a:a9:b6:22:25:90:e6:bc:1c:fc:27:34:f6:cb:
81:03:b3:cf:ec:4c:bf:28:02:64:0e:eb:43:5e:fe:7f:53:54:
d5:00:60:82:c7:59:dc:ee:30:63:c6:99:c2:f5:49:d2:c6:3b:
7e:a2:eb:d6:49:0a:30:33:98:4b:32:97:00:ac:c6:e0:01:92:
9c:dd:ba:d7:93:ac:e1:86:5b:d9:72:35:61:0d:7d:a7:70:73:
49:6b:1f:63:7b:d1:53:d4:f3:63:c2:97:64:d3:92:19:fc:ee:
7b:05:b8:70:ac:19:8a:f2:07:69:97:bc:26:4e:49:ad:42:97:
16:8f:78:d3:db:3d:0b:5c:fe:8a:31:08:dc:fe:0e:ed:e1:5c:
6c:3f:f2:d7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgcmotvj+R6XZ1CXgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWJkNjA5ZjktNDg4Zi00Y2NiLWI1NjItZjgyZWRkODE5
MWRkMB4XDTI0MTIwNjAyMDAzOVoXDTI1MDMwNjAyMDAzOVowLzEtMCsGA1UEAxMk
ZjUyNWI5MzMtOGZkMi00YmM5LWJkNzYtM2ExOGU5YTc5MzA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2B3Oj3coNGHFZiW/gAW5AlgqY6cRDdtLp325
8XqJE0ReWlv6ORgiQafDDzghDCbgQVh/SiCwUr86T6IlZLK10YwquOfytmonADtc
55nVt+z4Gk6+tPAiZb/6jWflpaO59s9BPn3a3NL3mw4J1wws2vjaGwKmbeIrYwoc
3oqauaF9eMkmVh7LtpzmRjin99XrL1FpPHUOmJ/FCU9vKS/6n9iFdwCmJKzSpz3P
8oKSfwr3R2EqcJrhdCQeVSGrBe3pkwSclsSNsw79+ytTqS/uuwc+2J7rxnW0GRxh
CtGNxladtgw75/DU2yZU/t3qHIzy6LD4Y+Yft+zXnGlk6jiCfQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOicUgqRBA4ZhAvX63dUtQTaDb00MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2
MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJlZGQ4MTkxZGQvNmU5MmY3N2ItZTUyOC0z
OGZlLWE2MTgtNWYyNTRmMmJjYzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZWJkNjA5ZjktNDg4Zi00Y2NiLWI1
NjItZjgyZWRkODE5MWRkL2ViZDYwOWY5LTQ4OGYtNGNjYi1iNTYyLWY4MmVkZDgx
OTFkZC5jcmwwHwYDVR0jBBgwFoAU/wob5oxF01YqMPBDjcIXckTApZQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJl
ZGQ4MTkxZGQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIMCBw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADpxu9tNjp2vUdzt3Hkj+7P87eYixxy95WXx2N2MmeJmBuFCPuMO
cvObystkFRDJYlvJg5M0U57prW2RLzPBok24pyA/V+F7Rkbqh22jc3cMErW8mv9u
q8MwOk/6BWq4bLfa1FCf5POzDLsNaS4yERSKqbYiJZDmvBz8JzT2y4EDs8/sTL8o
AmQO60Ne/n9TVNUAYILHWdzuMGPGmcL1SdLGO36i69ZJCjAzmEsylwCsxuABkpzd
uteTrOGGW9lyNWENfadwc0lrH2N70VPU82PCl2TTkhn87nsFuHCsGYryB2mXvCZO
Sa1ClxaPeNPbPQtc/ooxCNz+Du3hXGw/8tc=
-----END CERTIFICATE-----
Generated at Sun Apr 27 23:48:27 2025 by rpki-client