Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/b95371c1-c1d8-3e6d-802e-5783e35d6b9f.roa
File: b95371c1-c1d8-3e6d-802e-5783e35d6b9f.roa (raw, json)
Hash identifier: a75Co52LzZlXpNalwejD9VTsJHA3F+OGKhd7cEaWr6Q=
Subject key identifier: D3:EF:E4:73:0E:3E:60:95:A1:20:63:C2:6B:4E:ED:94:7A:22:54:2E
Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial: 010D0C9F43285848E9CBE75166593BC97AFA9C80
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/b95371c1-c1d8-3e6d-802e-5783e35d6b9f.roa
Signing time: Mon 17 Feb 2025 14:00:52 +0000
ROA not before: Mon 17 Feb 2025 14:00:52 +0000
ROA not after: Sun 18 May 2025 13:00:52 +0000
asID: 62651
IP address blocks: 2604:fc80:2400::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e9:cb:e7:51:66:59:3b:c9:7a:fa:9c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Validity
Not Before: Feb 17 14:00:52 2025 GMT
Not After : May 18 13:00:52 2025 GMT
Subject: CN=09ac10d9-81ae-451c-8c7b-68519de9b0a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:dc:ed:dc:cd:3e:82:cf:77:b9:fa:5b:8f:4c:
5b:33:67:98:75:ef:f0:79:e3:4a:da:bc:7b:8a:16:
c5:df:a7:20:e1:44:12:e1:a7:24:32:59:73:45:5f:
26:da:dc:d2:93:82:42:41:f3:1e:9d:18:0e:44:a3:
cf:48:74:20:c8:fa:56:55:3f:f2:ac:e0:5e:b2:ee:
14:13:3b:57:37:88:5d:a8:6f:11:ac:a9:ee:0e:a0:
fc:6d:d0:26:57:94:ab:72:72:a7:5d:11:06:70:31:
34:1f:5d:6e:c6:0d:11:b8:5c:c1:95:e2:7c:87:f4:
62:12:51:ff:be:13:b4:b4:55:64:8b:28:fa:a0:c1:
9a:d6:5c:59:61:ea:57:92:58:a0:07:9c:15:f1:b9:
70:2c:b0:e6:e0:f5:c9:8a:10:3d:92:98:1a:91:f9:
4b:29:82:ad:67:65:ed:15:8f:45:b3:c1:f3:2c:93:
a8:73:9f:c0:2c:f9:49:d9:37:0e:9e:f9:c3:23:08:
d9:17:27:c0:7a:e2:57:c8:cb:52:96:42:ab:6f:6a:
2f:b2:82:5e:32:12:ba:01:12:bf:e2:e0:c9:e2:29:
31:5c:c0:a9:98:e1:85:d8:d5:58:75:7d:0e:9b:6b:
3e:f2:55:e6:ec:90:db:52:df:b8:3e:36:a2:93:b2:
39:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:EF:E4:73:0E:3E:60:95:A1:20:63:C2:6B:4E:ED:94:7A:22:54:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/b95371c1-c1d8-3e6d-802e-5783e35d6b9f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
X509v3 Authority Key Identifier:
keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:fc80:2400::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:6f:02:22:01:9a:2e:ee:2b:7e:4e:a9:86:39:47:dd:b8:8e:
3f:86:4e:39:22:32:dd:44:97:8b:49:e4:95:3d:b0:0e:d3:81:
15:f5:7e:de:d3:38:5a:33:01:30:bc:5b:d0:5b:fc:a7:a4:e0:
0b:b8:ad:de:8e:1c:dc:59:db:46:98:06:da:da:c9:a5:53:dd:
06:1c:7c:22:68:b2:29:17:42:59:c7:92:c1:0e:64:5f:b5:0e:
d6:d0:68:e0:9b:db:46:dc:ef:5e:b4:32:92:e8:9b:e8:69:23:
52:ab:ca:32:5a:b8:6f:a5:61:2c:c2:f5:f9:61:b0:d1:73:92:
9a:1a:4e:24:03:f5:0e:72:b0:46:ba:13:57:e8:e3:2d:be:61:
6f:b0:e4:f6:0e:f0:8e:f7:ba:96:70:3e:5b:bb:94:44:8d:63:
43:46:87:12:ed:ef:f3:96:16:08:9b:7b:91:2b:03:91:75:43:
28:d5:d9:8d:dd:03:c1:a1:be:0b:a5:63:b8:d9:b9:70:f1:4b:
20:dc:78:ee:17:4b:03:13:f8:62:85:48:78:12:22:61:fd:51:
b2:9c:7e:b0:91:e0:67:b9:94:35:6d:66:97:92:1b:5d:cd:2c:
4e:1f:96:73:99:5c:0a:32:38:b7:01:2a:7d:8b:5c:b6:af:f6:
6e:d5:c0:7d
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjpy+dRZlk7yXr6nIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz
NmJhMB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk
MDlhYzEwZDktODFhZS00NTFjLThjN2ItNjg1MTlkZTliMGE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdzt3M0+gs93ufpbj0xbM2eYde/weeNK2rx7
ihbF36cg4UQS4ackMllzRV8m2tzSk4JCQfMenRgORKPPSHQgyPpWVT/yrOBesu4U
EztXN4hdqG8RrKnuDqD8bdAmV5SrcnKnXREGcDE0H11uxg0RuFzBleJ8h/RiElH/
vhO0tFVkiyj6oMGa1lxZYepXkligB5wV8blwLLDm4PXJihA9kpgakflLKYKtZ2Xt
FY9Fs8HzLJOoc5/ALPlJ2TcOnvnDIwjZFyfAeuJXyMtSlkKrb2ovsoJeMhK6ARK/
4uDJ4ikxXMCpmOGF2NVYdX0Om2s+8lXm7JDbUt+4Pjaik7I5IwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFNPv5HMOPmCVoSBjwmtO7ZR6IlQuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy
NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvYjk1MzcxYzEtYzFkOC0z
ZTZkLTgwMmUtNTc4M2UzNWQ2YjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj
MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl
MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3
OGU4ZTM2YmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgT8gCQw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAXm8CIgGaLu4rfk6phjlH3biOP4ZOOSIy3USXi0nklT2wDtOBFfV+
3tM4WjMBMLxb0Fv8p6TgC7it3o4c3FnbRpgG2trJpVPdBhx8ImiyKRdCWceSwQ5k
X7UO1tBo4JvbRtzvXrQykuib6GkjUqvKMlq4b6VhLML1+WGw0XOSmhpOJAP1DnKw
RroTV+jjLb5hb7Dk9g7wjve6lnA+W7uURI1jQ0aHEu3v85YWCJt7kSsDkXVDKNXZ
jd0DwaG+C6VjuNm5cPFLINx47hdLAxP4YoVIeBIiYf1Rspx+sJHgZ7mUNW1ml5Ib
Xc0sTh+Wc5lcCjI4twEqfYtctq/2btXAfQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:41:50 2025 by rpki-client