Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/c0be9fe9-34d0-3224-9175-766e7ab4174b.roa
File: c0be9fe9-34d0-3224-9175-766e7ab4174b.roa (raw, json)
Hash identifier: xhsCI7lI1GOP4r9MiEQy82ZDIcp2wonVxzu5J5wzf8Q=
Subject key identifier: 14:1C:F0:25:50:4C:8E:6D:51:1E:F1:05:9C:3B:87:E7:3B:84:6C:AF
Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial: 010D0C9F432858490CB1661A3E6AB0BE6DECC350
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/c0be9fe9-34d0-3224-9175-766e7ab4174b.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 54203
IP address blocks: 2604:fc80:4400::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:66:1a:3e:6a:b0:be:6d:ec:c3:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=37fd3372-1ca1-4786-a920-49215132d953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:81:03:d9:59:89:14:71:f2:0c:d0:80:4a:97:
6f:cd:f2:5c:c4:93:5d:d8:2b:4d:40:bc:af:7f:8f:
80:49:7c:9b:39:d9:2f:30:4e:5e:58:8d:3c:2d:80:
bc:b2:75:af:3d:05:30:03:b6:21:ee:0e:7b:5b:03:
12:6b:f1:b1:d8:15:b5:fb:03:7d:f6:f1:20:0b:dd:
37:0a:7c:92:52:fa:cc:b4:f4:05:44:50:20:c1:59:
3b:bb:20:ef:fe:3e:70:5c:b2:2c:17:cb:72:71:50:
6a:86:f4:e4:57:c7:53:49:d5:cf:8b:2e:4a:1e:65:
8f:e6:cc:37:06:76:67:11:14:f0:5a:80:70:5d:62:
2c:21:af:62:65:05:32:2a:46:8e:e5:c0:ce:9a:1b:
4f:51:5f:06:8f:a5:79:34:8e:05:09:5e:bb:7c:43:
f2:0a:c4:89:d8:5a:81:b2:b2:00:e7:12:79:2a:8e:
7e:77:cf:d0:f9:7a:b7:35:e6:93:88:a6:ec:47:df:
84:3a:73:ac:76:16:d5:0d:4d:be:b2:99:eb:47:e4:
d9:66:6c:81:32:a0:90:db:e3:61:ee:ad:be:23:09:
fa:38:9a:86:72:68:8a:55:91:96:9d:63:5b:b0:f3:
45:df:b3:05:df:6f:70:9c:ce:07:cf:7a:71:c5:99:
30:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:1C:F0:25:50:4C:8E:6D:51:1E:F1:05:9C:3B:87:E7:3B:84:6C:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/c0be9fe9-34d0-3224-9175-766e7ab4174b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
X509v3 Authority Key Identifier:
keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:fc80:4400::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:11:68:88:9b:a1:b8:66:6a:72:62:39:54:0d:88:63:3c:4e:
72:b8:5b:63:f7:6b:27:98:06:57:c5:44:ca:d5:f9:af:a9:38:
9f:66:e1:07:17:68:77:c0:d8:4b:31:97:4d:a6:bc:0f:58:e3:
5f:5b:01:23:8d:85:e1:f9:90:d3:54:b5:c7:e4:15:1a:65:31:
ca:93:9e:ee:bc:2f:b7:6f:fc:25:7c:17:cb:99:be:ee:1a:eb:
85:38:96:12:85:ba:1f:29:b6:96:51:f0:e8:15:25:59:3f:ca:
74:99:be:f0:07:5b:3f:f7:05:1e:18:af:92:64:66:17:98:ec:
7d:f8:b1:39:03:01:2d:b4:62:62:4f:16:f6:25:34:63:b6:11:
76:50:fd:6e:89:6b:3e:ba:c5:f4:ba:f0:fa:cc:d0:7c:70:fa:
44:1b:f6:b7:6e:a5:31:df:7c:35:3b:f1:18:21:73:a2:da:b8:
00:bb:87:d4:a2:f3:5e:6d:b6:4d:5e:be:9c:61:30:03:29:8c:
bb:a5:95:39:84:4b:73:20:c5:47:0d:57:0c:7c:2f:d7:a1:31:
00:a8:53:f0:d8:e6:45:41:17:95:5e:1c:92:f3:47:61:26:11:
15:c0:a0:5c:98:8b:a4:2b:39:ad:d0:36:63:65:e8:a3:c7:1f:
0f:7b:e8:87
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkMsWYaPmqwvm3sw1AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz
NmJhMB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk
MzdmZDMzNzItMWNhMS00Nzg2LWE5MjAtNDkyMTUxMzJkOTUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYED2VmJFHHyDNCASpdvzfJcxJNd2CtNQLyv
f4+ASXybOdkvME5eWI08LYC8snWvPQUwA7Yh7g57WwMSa/Gx2BW1+wN99vEgC903
CnySUvrMtPQFRFAgwVk7uyDv/j5wXLIsF8tycVBqhvTkV8dTSdXPiy5KHmWP5sw3
BnZnERTwWoBwXWIsIa9iZQUyKkaO5cDOmhtPUV8Gj6V5NI4FCV67fEPyCsSJ2FqB
srIA5xJ5Ko5+d8/Q+Xq3NeaTiKbsR9+EOnOsdhbVDU2+spnrR+TZZmyBMqCQ2+Nh
7q2+Iwn6OJqGcmiKVZGWnWNbsPNF37MF329wnM4Hz3pxxZkwUwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFBQc8CVQTI5tUR7xBZw7h+c7hGyvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy
NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvYzBiZTlmZTktMzRkMC0z
MjI0LTkxNzUtNzY2ZTdhYjQxNzRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj
MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl
MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3
OGU4ZTM2YmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgT8gEQw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAgBFoiJuhuGZqcmI5VA2IYzxOcrhbY/drJ5gGV8VEytX5r6k4n2bh
Bxdod8DYSzGXTaa8D1jjX1sBI42F4fmQ01S1x+QVGmUxypOe7rwvt2/8JXwXy5m+
7hrrhTiWEoW6Hym2llHw6BUlWT/KdJm+8AdbP/cFHhivkmRmF5jsffixOQMBLbRi
Yk8W9iU0Y7YRdlD9bolrPrrF9Lrw+szQfHD6RBv2t26lMd98NTvxGCFzotq4ALuH
1KLzXm22TV6+nGEwAymMu6WVOYRLcyDFRw1XDHwv16ExAKhT8NjmRUEXlV4ckvNH
YSYRFcCgXJiLpCs5rdA2Y2Xoo8cfD3vohw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:07:33 2025 by rpki-client