Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a50e1963-2c42-33f7-add8-f5ca8ea4735c.roa
File: a50e1963-2c42-33f7-add8-f5ca8ea4735c.roa (raw, json)
Hash identifier: RarCmTkYFFZ51qkseYmEee6AGo+55InPlcTtbJ/jMp8=
Subject key identifier: AB:18:30:CE:DC:F0:16:29:E2:D4:DA:51:16:BA:18:21:02:8C:47:89
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C5783B9FABAD4C6353B87B00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a50e1963-2c42-33f7-add8-f5ca8ea4735c.roa
Signing time: Tue 04 Feb 2025 13:43:23 +0000
ROA not before: Tue 04 Feb 2025 13:43:23 +0000
ROA not after: Mon 05 May 2025 12:43:23 +0000
asID: 30036
IP address blocks: 2604:2d80:9e80::/41 maxlen: 41
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:78:3b:9f:ab:ad:4c:63:53:b8:7b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 13:43:23 2025 GMT
Not After : May 5 12:43:23 2025 GMT
Subject: CN=cf4c52f3-4564-45f4-a99d-60871976a984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6a:74:1a:9e:59:bf:63:ef:41:54:e9:1e:39:
bb:23:da:82:0f:8f:11:94:d8:3b:20:97:15:2b:cd:
f1:e2:87:53:0b:33:28:38:17:69:63:fa:72:c4:51:
ec:e7:fd:b4:77:21:bf:7d:75:a9:5d:33:2b:dd:f5:
ae:4a:9c:86:7b:f8:2b:7b:38:7f:67:2d:b9:28:69:
4b:4e:dc:65:c5:18:7b:0e:b2:22:b7:47:1c:5f:fd:
87:d0:01:04:31:e7:5e:ef:54:a9:16:2f:83:8c:6b:
99:69:17:05:93:a6:ad:f7:6a:cb:80:64:b1:cf:a8:
cb:ee:f7:6b:09:c1:b8:46:d9:52:be:d5:5c:8d:e8:
87:0f:17:99:2b:a6:d6:53:1c:50:ff:38:77:83:b7:
50:19:b4:42:86:31:05:68:6c:ad:3f:79:ff:94:29:
1a:b2:30:5a:de:18:21:de:d3:35:5d:96:c3:e0:10:
ad:d8:b0:36:97:51:82:1a:62:d0:1c:1f:79:94:49:
b3:8d:56:ec:8b:36:a3:e0:73:4c:0d:e5:51:c6:49:
d3:b3:32:16:4b:7e:e9:dc:7a:cc:1a:ff:f1:f8:df:
a4:4d:17:cc:18:60:c9:0b:c9:14:02:42:9a:28:c3:
81:a1:0b:41:36:ea:42:7a:e0:7c:48:41:04:66:ab:
99:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:18:30:CE:DC:F0:16:29:E2:D4:DA:51:16:BA:18:21:02:8C:47:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a50e1963-2c42-33f7-add8-f5ca8ea4735c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d80:9e80::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:15:55:6d:0a:90:e4:a4:06:13:2c:e6:63:4b:20:a0:2e:e0:
5e:ba:a6:3f:5b:5d:9e:73:7c:6f:5b:f3:13:bb:6b:79:f5:04:
70:a7:75:5e:c6:c5:fa:66:fa:63:36:66:f5:04:8c:08:f2:22:
b1:5f:e9:cb:47:f0:cc:6c:0e:aa:b5:66:58:0c:3b:0e:93:21:
d8:64:23:4c:29:64:72:ea:f9:c0:20:73:18:e1:f5:be:20:56:
82:d7:67:d0:fd:1d:25:8b:e1:af:5c:c3:56:06:b7:b9:7d:16:
25:33:7f:de:be:3d:dd:2d:de:5d:eb:3f:1a:77:aa:a4:6e:2b:
48:17:bb:bf:8e:c8:f7:b3:3c:e9:5c:da:e9:db:87:eb:26:8c:
c3:71:2f:ff:62:42:a6:e7:7a:22:8a:54:84:2b:86:91:bd:54:
fd:e3:35:c2:39:86:3d:a9:d8:c0:f5:bf:75:45:3d:48:6b:be:
ee:ab:51:51:e7:93:8f:a6:32:32:0e:7d:09:2e:8b:96:79:f7:
fc:d4:7b:35:66:42:84:ca:a2:28:84:f8:d4:96:53:b4:70:a7:
06:ed:78:f2:ad:99:ec:52:bf:1b:c3:94:6b:b5:2a:24:01:4b:
8c:ba:c6:da:20:21:30:86:9f:7e:99:3a:96:b2:92:de:32:0f:
47:f6:af:f1
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjFeDufq61MY1O4ewAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDIwNDEzNDMyM1oXDTI1MDUwNTEyNDMyM1owLzEtMCsGA1UEAxMk
Y2Y0YzUyZjMtNDU2NC00NWY0LWE5OWQtNjA4NzE5NzZhOTg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWp0Gp5Zv2PvQVTpHjm7I9qCD48RlNg7IJcV
K83x4odTCzMoOBdpY/pyxFHs5/20dyG/fXWpXTMr3fWuSpyGe/grezh/Zy25KGlL
TtxlxRh7DrIit0ccX/2H0AEEMede71SpFi+DjGuZaRcFk6at92rLgGSxz6jL7vdr
CcG4RtlSvtVcjeiHDxeZK6bWUxxQ/zh3g7dQGbRChjEFaGytP3n/lCkasjBa3hgh
3tM1XZbD4BCt2LA2l1GCGmLQHB95lEmzjVbsizaj4HNMDeVRxknTszIWS37p3HrM
Gv/x+N+kTRfMGGDJC8kUAkKaKMOBoQtBNupCeuB8SEEEZquZOQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKsYMM7c8BYp4tTaURa6GCECjEeJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTUwZTE5NjMtMmM0Mi0z
M2Y3LWFkZDgtZjVjYThlYTQ3MzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgJ6A
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACwVVW0KkOSkBhMs5mNLIKAu4F66pj9bXZ5zfG9b8xO7a3n1BHCn
dV7Gxfpm+mM2ZvUEjAjyIrFf6ctH8MxsDqq1ZlgMOw6TIdhkI0wpZHLq+cAgcxjh
9b4gVoLXZ9D9HSWL4a9cw1YGt7l9FiUzf96+Pd0t3l3rPxp3qqRuK0gXu7+OyPez
POlc2unbh+smjMNxL/9iQqbneiKKVIQrhpG9VP3jNcI5hj2p2MD1v3VFPUhrvu6r
UVHnk4+mMjIOfQkui5Z59/zUezVmQoTKoiiE+NSWU7RwpwbtePKtmexSvxvDlGu1
KiQBS4y6xtogITCGn36ZOpaykt4yD0f2r/E=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:50:17 2025 by rpki-client