Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f2e5d719-b11f-3e63-ad51-8123166538ef.roa
File: f2e5d719-b11f-3e63-ad51-8123166538ef.roa (raw, json)
Hash identifier: SJrzIWnvOXjXnXGpYcEsXd7XcvJ03zKIwWmGwW9IJ4M=
Subject key identifier: 5A:A5:62:53:B9:8E:E4:EA:1D:C2:38:9A:9C:9C:36:47:A0:BF:F7:97
Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial: 010D0C9F43285848A830B00246209A94BAD98700
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f2e5d719-b11f-3e63-ad51-8123166538ef.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 209181
IP address blocks: 2607:740:21::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:b0:02:46:20:9a:94:ba:d9:87:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=358f56fb-e9f9-4298-84f7-674623f071f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:de:db:2f:81:50:e7:d6:e4:51:d6:2c:0e:4b:
dc:ca:7c:ae:02:62:8e:1d:73:ac:50:f1:c9:21:f2:
2e:fb:b0:f6:a0:58:6b:bd:02:72:e7:21:8f:e4:25:
ee:97:ca:f1:ae:a5:76:11:1f:86:6b:a4:56:1b:02:
45:77:2d:a6:94:a3:51:b2:92:08:c4:d6:d5:9d:5b:
e4:f4:74:04:94:37:96:ac:68:29:d0:e7:ad:9f:68:
3c:5e:0c:04:e4:54:3c:4e:f7:b7:ca:c4:69:39:7a:
21:ea:77:a8:a7:73:5f:30:9d:96:92:d6:56:1e:ec:
90:ab:40:7f:e7:2a:50:fc:fb:ed:c6:d5:81:e0:08:
a3:ae:c8:df:c9:5b:17:28:a9:93:65:ae:71:a1:b9:
aa:a1:3d:28:2e:cb:52:44:30:d6:d5:a2:c1:77:61:
6e:ab:7b:62:97:a6:9d:78:44:6c:73:a8:7e:16:88:
22:80:29:60:6c:25:38:b3:7e:b0:dc:86:43:a9:2c:
19:8e:d8:87:f4:1d:db:b7:9d:ae:a8:20:dd:7f:fa:
d9:38:2a:a8:de:21:79:4e:f2:f4:14:e4:34:33:b4:
ae:2e:a3:10:16:6a:01:ce:62:84:34:c7:7a:41:de:
05:dd:c5:f8:ec:e4:c1:f3:77:1a:d1:8b:52:2c:2d:
49:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A5:62:53:B9:8E:E4:EA:1D:C2:38:9A:9C:9C:36:47:A0:BF:F7:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f2e5d719-b11f-3e63-ad51-8123166538ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
X509v3 Authority Key Identifier:
keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:740:21::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:f7:59:d5:18:8b:ed:f0:d7:fe:ef:f4:94:fc:d6:c3:62:3c:
e7:b1:0e:dd:c6:24:94:fd:30:e4:d6:34:96:e1:e9:c4:67:d7:
77:4f:8c:73:d2:07:0a:70:7c:4e:f7:85:9e:b7:d0:14:72:52:
19:23:73:a2:13:74:f4:30:71:6a:0f:24:1f:a3:de:d8:0c:03:
52:db:04:de:72:1f:88:01:7e:8f:d9:c4:6c:79:1e:29:b7:2b:
21:14:be:59:ae:10:58:9d:a2:6e:27:06:21:33:35:54:f2:1f:
47:5e:ad:85:c0:51:a9:f6:84:7d:0e:fc:68:62:df:b1:93:d4:
12:da:d7:9e:4a:ec:77:f9:65:cb:ea:df:a0:60:a7:44:61:88:
60:a3:94:58:6b:3b:40:31:9d:a5:6e:78:83:36:61:84:8d:92:
8d:86:38:d3:cb:4e:74:f2:26:23:65:d4:a3:62:4a:cd:be:b3:
52:24:32:0e:63:6a:8f:ca:cc:cc:03:96:bc:79:29:cc:52:77:
60:06:57:3c:8d:10:75:9f:b3:68:40:26:c1:a0:c2:7a:71:dc:
c9:23:91:79:14:34:7e:09:dc:b2:8d:5c:ca:e0:88:1f:12:7e:
17:f6:ab:66:65:24:81:76:52:ed:9a:4f:3a:f6:20:ff:f9:0b:
60:ad:2e:ed
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEioMLACRiCalLrZhwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3
ZDNkMB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk
MzU4ZjU2ZmItZTlmOS00Mjk4LTg0ZjctNjc0NjIzZjA3MWYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmt7bL4FQ59bkUdYsDkvcynyuAmKOHXOsUPHJ
IfIu+7D2oFhrvQJy5yGP5CXul8rxrqV2ER+Ga6RWGwJFdy2mlKNRspIIxNbVnVvk
9HQElDeWrGgp0Oetn2g8XgwE5FQ8Tve3ysRpOXoh6neop3NfMJ2WktZWHuyQq0B/
5ypQ/PvtxtWB4AijrsjfyVsXKKmTZa5xobmqoT0oLstSRDDW1aLBd2Fuq3til6ad
eERsc6h+FogigClgbCU4s36w3IZDqSwZjtiH9B3bt52uqCDdf/rZOCqo3iF5TvL0
FOQ0M7SuLqMQFmoBzmKENMd6Qd4F3cX47OTB83ca0YtSLC1JJQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFqlYlO5juTqHcI4mpycNkegv/eXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5
OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvZjJlNWQ3MTktYjExZi0z
ZTYzLWFkNTEtODEyMzE2NjUzOGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4
NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz
N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5
NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAAh
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEL3WdUYi+3w1/7v9JT81sNiPOexDt3GJJT9MOTWNJbh6cRn13dP
jHPSBwpwfE73hZ630BRyUhkjc6ITdPQwcWoPJB+j3tgMA1LbBN5yH4gBfo/ZxGx5
Him3KyEUvlmuEFidom4nBiEzNVTyH0derYXAUan2hH0O/Ghi37GT1BLa155K7Hf5
Zcvq36Bgp0RhiGCjlFhrO0AxnaVueIM2YYSNko2GONPLTnTyJiNl1KNiSs2+s1Ik
Mg5jao/KzMwDlrx5KcxSd2AGVzyNEHWfs2hAJsGgwnpx3MkjkXkUNH4J3LKNXMrg
iB8Sfhf2q2ZlJIF2Uu2aTzr2IP/5C2CtLu0=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:39:35 2025 by rpki-client