Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7a70899-c509-3f29-b09c-39704a6a7bb2.roa
File: b7a70899-c509-3f29-b09c-39704a6a7bb2.roa (raw, json)
Hash identifier: T5HCHoMEu5r832yrVfg/K8dGiajOCWLWEXDzmFNNFO4=
Subject key identifier: 07:0F:22:94:D9:BE:37:A5:4E:B6:B2:C9:97:D9:E9:71:51:FB:2C:79
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F7784936A8FCA2B9EDC480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7a70899-c509-3f29-b09c-39704a6a7bb2.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33668
IP address blocks: 2603:2406::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f7:78:49:36:a8:fc:a2:b9:ed:c4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=2ee574eb-280b-46d9-8fe6-165052ef32d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:50:60:52:32:20:57:d0:a3:79:06:78:35:72:
af:37:26:31:b9:e9:31:2b:1a:83:ad:a1:cd:05:2a:
36:bd:49:c2:55:91:c6:fd:89:e1:23:26:40:16:75:
b7:f3:7c:23:b1:7a:1f:65:87:5d:db:0d:1e:77:45:
ac:43:c9:d5:bb:69:59:b8:fc:31:29:13:1c:07:78:
ee:d6:3f:24:27:05:a5:42:a5:19:9d:75:2a:e2:a6:
3a:ee:ef:cc:5c:ce:c0:68:fc:24:79:aa:c5:c4:e9:
3c:37:f1:c2:a2:14:e9:0c:79:26:34:49:f9:ed:72:
ba:65:0d:c2:9b:c4:ab:5c:3d:fc:84:af:0f:2e:2e:
ef:72:a7:a9:22:7c:fb:52:2a:b1:15:9f:b8:0d:69:
e6:bf:3f:09:72:59:b5:43:9e:30:2e:8e:46:29:56:
a0:34:04:48:21:a7:c3:65:59:53:dd:ba:46:a8:8d:
a2:00:3c:86:84:82:b1:2c:77:c4:ff:30:a2:31:d3:
14:67:5a:36:d9:1d:72:bf:01:9c:cb:c2:58:af:7a:
ac:85:70:c1:9b:1a:c1:35:8c:59:a3:b5:9d:28:ef:
e8:c0:d3:52:a6:b8:e4:cd:8c:5a:8d:5d:d7:25:6a:
76:c9:4d:21:37:40:35:4c:6d:43:35:28:b7:33:5e:
c5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:0F:22:94:D9:BE:37:A5:4E:B6:B2:C9:97:D9:E9:71:51:FB:2C:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7a70899-c509-3f29-b09c-39704a6a7bb2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:2406::/34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:8e:d9:a4:a8:c7:19:04:e5:29:bd:12:70:0e:fb:77:e1:9b:
22:50:12:2a:f7:6e:1a:65:9e:e6:c6:eb:cd:2b:14:25:1b:4a:
aa:98:cc:d8:54:6d:34:94:f9:7f:c9:91:df:69:e4:fe:7d:58:
18:56:f0:ed:b1:df:46:4f:9b:d5:33:0a:ba:ea:8b:91:f5:06:
ca:95:a1:bb:83:1e:66:75:14:99:25:8e:6f:a5:b0:a9:d5:50:
24:b1:a2:f2:d6:73:2d:37:9c:db:e8:dd:df:59:83:fb:bc:f7:
c5:c0:24:19:65:02:a7:10:0c:7b:15:48:86:63:0b:39:c3:aa:
27:31:2d:67:c0:82:de:de:7e:e0:4d:ef:31:67:73:6a:8b:34:
64:ef:37:31:e5:cd:79:85:db:b5:32:a7:c0:f9:d9:5a:0a:eb:
83:65:bc:f7:08:84:6f:73:aa:a3:39:8c:16:0c:53:d2:df:4f:
f0:dd:01:2c:09:b5:0c:b7:e9:cb:9f:f0:83:63:86:54:59:f8:
13:f7:ee:64:81:ca:ec:8d:9d:b2:de:4b:93:8e:8a:33:2f:13:
c8:b1:90:36:88:fe:6e:c9:34:52:83:2d:97:1f:26:d1:16:9c:
ff:42:4c:05:c7:f9:40:4e:55:f4:de:68:37:4d:1a:58:f0:3d:
f1:d6:33:12
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEj093hJNqj8orntxIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
MmVlNTc0ZWItMjgwYi00NmQ5LThmZTYtMTY1MDUyZWYzMmQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllBgUjIgV9CjeQZ4NXKvNyYxuekxKxqDraHN
BSo2vUnCVZHG/YnhIyZAFnW383wjsXofZYdd2w0ed0WsQ8nVu2lZuPwxKRMcB3ju
1j8kJwWlQqUZnXUq4qY67u/MXM7AaPwkearFxOk8N/HCohTpDHkmNEn57XK6ZQ3C
m8SrXD38hK8PLi7vcqepInz7UiqxFZ+4DWnmvz8Jclm1Q54wLo5GKVagNARIIafD
ZVlT3bpGqI2iADyGhIKxLHfE/zCiMdMUZ1o22R1yvwGcy8JYr3qshXDBmxrBNYxZ
o7WdKO/owNNSprjkzYxajV3XJWp2yU0hN0A1TG1DNSi3M17FxwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFAcPIpTZvjelTrayyZfZ6XFR+yx5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjdhNzA4OTktYzUwOS0z
ZjI5LWIwOWMtMzk3MDRhNmE3YmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgMkBgAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAXI7ZpKjHGQTlKb0ScA77d+GbIlASKvduGmWe5sbrzSsUJRtKqpjM
2FRtNJT5f8mR32nk/n1YGFbw7bHfRk+b1TMKuuqLkfUGypWhu4MeZnUUmSWOb6Ww
qdVQJLGi8tZzLTec2+jd31mD+7z3xcAkGWUCpxAMexVIhmMLOcOqJzEtZ8CC3t5+
4E3vMWdzaos0ZO83MeXNeYXbtTKnwPnZWgrrg2W89wiEb3OqozmMFgxT0t9P8N0B
LAm1DLfpy5/wg2OGVFn4E/fuZIHK7I2dst5Lk46KMy8TyLGQNoj+bsk0UoMtlx8m
0Rac/0JMBcf5QE5V9N5oN00aWPA98dYzEg==
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:12:37 2025 by rpki-client