Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/609125ed-e585-3015-abe8-fd5aca64650c.roa
File: 609125ed-e585-3015-abe8-fd5aca64650c.roa (raw, json)
Hash identifier: 6MYWrYWiws2llb96PumvifN8pBzm+wtXeDFcC8L98k8=
Subject key identifier: B3:00:A9:2E:76:74:BB:33:CC:43:42:8F:2B:21:A9:1F:64:39:B8:E9
Certificate issuer: /CN=2046a800-c379-4c3b-b702-fb1712b4c5c9
Certificate serial: 010D0C9F4328584902EC15E21F6525CCBBEEFE80
Authority key identifier: 1B:7C:FA:4A:E5:64:A0:93:02:4D:1E:9F:44:C2:64:A1:D8:FA:6F:A5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/609125ed-e585-3015-abe8-fd5aca64650c.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 16509
IP address blocks: 2620:113:80a0::/45 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:15:e2:1f:65:25:cc:bb:ee:fe:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2046a800-c379-4c3b-b702-fb1712b4c5c9
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=1341e12c-2075-4ba1-8452-32016f4f7c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:60:d2:30:7c:48:3b:8f:3b:c0:d7:e7:b4:de:
be:3b:f4:33:22:49:5d:ba:64:a2:f2:06:da:dc:1f:
57:b5:6a:36:6c:79:6e:b5:da:33:ae:7f:c6:32:75:
5a:99:b9:58:48:a0:14:81:08:ff:d3:f6:d9:3c:b1:
e1:b3:89:67:a6:1c:8f:04:be:ca:5f:84:2e:7c:8c:
48:3a:b1:39:e9:95:b8:4a:92:cc:74:e0:55:77:bd:
c5:52:f8:1b:12:ca:6b:fc:2c:6b:63:40:b2:1b:cb:
e4:e1:01:61:a7:4e:a7:8c:d3:89:9f:83:6a:f6:ca:
bc:dd:b1:f7:55:e4:6d:ef:2f:3c:67:d6:ee:19:29:
b0:ff:d7:5b:49:6a:0f:8d:6c:e1:7b:e8:11:35:a0:
e9:72:9f:f7:b9:e5:b3:4e:aa:36:f8:e5:2a:1c:9f:
10:06:15:d1:73:4a:9e:27:c9:59:3e:1e:cd:ee:a6:
e4:8c:bf:e5:ef:67:ed:f1:a7:53:f9:da:63:a8:e4:
a0:54:87:b1:a3:9d:01:a6:dc:6b:28:1f:e3:d6:6b:
91:12:84:bb:79:ea:67:97:35:8b:25:79:46:d5:7c:
97:4e:ae:a0:f7:43:d1:71:54:fc:98:81:f1:4f:3c:
a6:59:ae:85:68:2e:20:ae:95:d6:bc:ec:a2:bf:85:
a9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:00:A9:2E:76:74:BB:33:CC:43:42:8F:2B:21:A9:1F:64:39:B8:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/609125ed-e585-3015-abe8-fd5aca64650c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/2046a800-c379-4c3b-b702-fb1712b4c5c9.crl
X509v3 Authority Key Identifier:
keyid:1B:7C:FA:4A:E5:64:A0:93:02:4D:1E:9F:44:C2:64:A1:D8:FA:6F:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:113:80a0::/45
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:c1:46:1b:60:3c:d5:6d:ce:ab:e2:11:0a:b6:97:fa:6d:6b:
d3:a7:8f:56:e6:4d:fd:fd:44:55:52:eb:29:f2:22:cc:35:60:
2b:26:1f:b8:30:d4:24:74:ae:7f:20:5b:4f:1d:21:e9:cc:48:
2b:6d:94:4c:7c:c6:f1:44:09:25:2b:31:ec:34:19:4d:4f:9e:
3a:38:33:f8:2d:75:1e:72:2b:03:9f:b5:d2:74:82:7b:12:e0:
9d:84:0b:b4:6d:e3:dd:62:bc:2b:e4:86:bd:0f:92:1d:3a:35:
15:d3:d2:84:45:8a:ec:fe:ca:b7:de:3f:2d:00:94:d3:78:3a:
86:25:87:f7:05:a3:78:c1:97:5d:8a:f3:42:e2:1c:3e:f5:6e:
ac:d8:b7:09:db:b5:75:5f:58:09:cd:a9:06:c5:da:c9:7b:25:
1b:4a:3b:cc:43:a4:63:de:e8:55:f2:a5:0f:81:08:a4:a4:a8:
3d:08:8a:7a:08:d6:bf:e2:d8:d4:e1:55:26:e4:47:5e:2e:01:
9b:ed:e0:b5:92:2a:f0:90:99:c3:41:f7:57:3d:50:93:0d:59:
b8:94:a1:da:0d:e2:5b:ba:a9:b6:fa:ab:37:c8:1a:eb:40:72:
e1:d5:27:eb:82:e6:97:6f:97:ff:86:ee:98:0d:e2:19:89:87:
ab:ff:c9:20
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkC7BXiH2UlzLvu/oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjA0NmE4MDAtYzM3OS00YzNiLWI3MDItZmIxNzEyYjRj
NWM5MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk
MTM0MWUxMmMtMjA3NS00YmExLTg0NTItMzIwMTZmNGY3YzBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmDSMHxIO487wNfntN6+O/QzIkldumSi8gba
3B9XtWo2bHlutdozrn/GMnVamblYSKAUgQj/0/bZPLHhs4lnphyPBL7KX4QufIxI
OrE56ZW4SpLMdOBVd73FUvgbEspr/CxrY0CyG8vk4QFhp06njNOJn4Nq9sq83bH3
VeRt7y88Z9buGSmw/9dbSWoPjWzhe+gRNaDpcp/3ueWzTqo2+OUqHJ8QBhXRc0qe
J8lZPh7N7qbkjL/l72ft8adT+dpjqOSgVIexo50BptxrKB/j1muREoS7eepnlzWL
JXlG1XyXTq6g90PRcVT8mIHxTzymWa6FaC4grpXWvOyiv4WppwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLMAqS52dLszzENCjyshqR9kObjpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMDQ2
YTgwMC1jMzc5LTRjM2ItYjcwMi1mYjE3MTJiNGM1YzkvNjA5MTI1ZWQtZTU4NS0z
MDE1LWFiZTgtZmQ1YWNhNjQ2NTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjA0NmE4MDAtYzM3OS00YzNiLWI3
MDItZmIxNzEyYjRjNWM5LzIwNDZhODAwLWMzNzktNGMzYi1iNzAyLWZiMTcxMmI0
YzVjOS5jcmwwHwYDVR0jBBgwFoAUG3z6SuVkoJMCTR6fRMJkodj6b6UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8yMDQ2YTgwMC1jMzc5LTRjM2ItYjcwMi1mYjE3
MTJiNGM1YzkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJiABE4Cg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIjBRhtgPNVtzqviEQq2l/pta9Onj1bmTf39RFVS6ynyIsw1YCsm
H7gw1CR0rn8gW08dIenMSCttlEx8xvFECSUrMew0GU1Pnjo4M/gtdR5yKwOftdJ0
gnsS4J2EC7Rt491ivCvkhr0Pkh06NRXT0oRFiuz+yrfePy0AlNN4OoYlh/cFo3jB
l12K80LiHD71bqzYtwnbtXVfWAnNqQbF2sl7JRtKO8xDpGPe6FXypQ+BCKSkqD0I
inoI1r/i2NThVSbkR14uAZvt4LWSKvCQmcNB91c9UJMNWbiUodoN4lu6qbb6qzfI
GutAcuHVJ+uC5pdvl/+G7pgN4hmJh6v/ySA=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:19:52 2025 by rpki-client