Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8f6e2d30-eab4-3cdd-9de9-abf8c836565e.roa
File: 8f6e2d30-eab4-3cdd-9de9-abf8c836565e.roa (raw, json)
Hash identifier: TI4yXIgtYZmQbsg6SCZ9hkpSPbWOq8p7COMx6aM84AY=
Subject key identifier: C7:02:87:7E:26:20:AE:18:07:C1:3B:C6:A6:7B:CA:93:DB:E3:FD:3E
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584905B6B93022E680C7EBC2F800
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8f6e2d30-eab4-3cdd-9de9-abf8c836565e.roa
Signing time: Thu 27 Feb 2025 14:00:51 +0000
ROA not before: Thu 27 Feb 2025 14:00:51 +0000
ROA not after: Wed 28 May 2025 13:00:51 +0000
asID: 7029
IP address blocks: 2604:cb00:3b00::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:05:b6:b9:30:22:e6:80:c7:eb:c2:f8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 27 14:00:51 2025 GMT
Not After : May 28 13:00:51 2025 GMT
Subject: CN=bb770784-9e4b-4b0d-83c4-625d48bbe607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:95:f5:98:ef:9f:2f:7e:66:66:fe:9f:6e:35:
42:f1:bb:cc:4d:a0:bc:5b:69:72:a8:e8:83:f4:1c:
f5:48:0d:6b:71:60:53:0b:b9:f0:48:ff:ab:d6:c5:
4a:86:6a:c4:c0:9b:37:fa:34:ff:31:fc:31:b7:78:
0d:ef:35:ef:3f:22:14:e0:2b:c2:f3:cc:d2:bf:ae:
b4:2c:34:0f:89:b4:a4:b0:9b:e7:29:2a:b1:9c:e8:
c1:a8:e1:fd:8f:6c:83:3a:5f:77:79:1f:c6:f2:d4:
23:a4:47:8c:7c:42:48:33:ae:7a:ca:cc:e7:84:49:
6c:fe:d2:d4:61:73:e6:68:d6:02:0c:14:12:2d:85:
5e:e1:64:8d:f1:2e:31:47:20:c2:fa:53:ce:db:f3:
93:43:05:3a:eb:a5:cd:78:45:14:46:34:81:f5:8e:
31:a6:75:32:12:ea:38:57:3e:96:da:37:96:75:30:
41:06:46:ae:6c:e0:a5:33:08:58:34:95:21:ce:78:
7f:f7:f4:6d:4c:57:30:d2:78:c4:c0:82:f8:c7:67:
74:62:fe:0f:be:86:ad:c4:c2:69:43:dc:27:28:86:
54:7d:ed:52:17:d2:fa:86:66:5a:78:10:e2:a4:a8:
93:55:7c:46:88:ba:5a:77:48:83:c2:23:15:03:54:
22:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:02:87:7E:26:20:AE:18:07:C1:3B:C6:A6:7B:CA:93:DB:E3:FD:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8f6e2d30-eab4-3cdd-9de9-abf8c836565e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:cb00:3b00::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:b1:71:7d:ba:b9:cb:f3:2a:e6:c1:d2:db:f7:83:c3:fe:76:
67:66:25:64:30:b6:82:80:80:5b:96:38:dc:d8:cb:5b:38:f7:
e1:87:65:4c:b0:e8:fa:02:af:9e:bf:4e:16:2e:39:e4:bf:20:
8f:a3:8e:af:c5:35:41:1d:a7:36:15:42:46:10:a4:29:9a:73:
94:7d:57:c5:a5:4d:85:96:9c:97:54:34:43:9a:af:7e:6a:dd:
b4:0f:0f:45:ae:28:e3:22:92:77:d1:6c:f8:f3:68:95:72:7d:
53:23:3c:5c:37:bd:c0:17:a2:58:fb:b7:19:98:59:a5:7b:9e:
4f:79:96:5c:7a:5c:f1:00:44:20:b3:d0:d4:90:95:a3:d3:b0:
81:74:0f:86:73:23:fe:ae:c0:85:1f:c8:a5:dc:6e:bd:4d:7f:
24:f1:c1:c1:0a:f4:17:94:b6:70:95:11:9a:a6:6b:d1:4b:66:
7a:f4:6c:91:62:3a:2c:94:07:d1:50:b3:ba:4b:5e:2a:e8:f1:
73:b8:e2:94:6d:c4:c3:ae:0f:60:56:eb:3a:9a:a7:e8:69:43:
4e:d9:21:5e:bd:a2:ce:63:b6:34:17:24:0d:53:a6:8f:34:f0:
06:ee:e2:2d:50:e2:0f:aa:bc:b5:bf:a7:17:7a:2e:8a:79:03:
85:24:ab:42
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkFtrkwIuaAx+vC+AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk
YmI3NzA3ODQtOWU0Yi00YjBkLTgzYzQtNjI1ZDQ4YmJlNjA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpX1mO+fL35mZv6fbjVC8bvMTaC8W2lyqOiD
9Bz1SA1rcWBTC7nwSP+r1sVKhmrEwJs3+jT/Mfwxt3gN7zXvPyIU4CvC88zSv660
LDQPibSksJvnKSqxnOjBqOH9j2yDOl93eR/G8tQjpEeMfEJIM656ysznhEls/tLU
YXPmaNYCDBQSLYVe4WSN8S4xRyDC+lPO2/OTQwU666XNeEUURjSB9Y4xpnUyEuo4
Vz6W2jeWdTBBBkaubOClMwhYNJUhznh/9/RtTFcw0njEwIL4x2d0Yv4PvoatxMJp
Q9wnKIZUfe1SF9L6hmZaeBDipKiTVXxGiLpad0iDwiMVA1QiQwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFMcCh34mIK4YB8E7xqZ7ypPb4/0+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGY2ZTJkMzAtZWFiNC0z
Y2RkLTlkZTktYWJmOGM4MzY1NjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLADsw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAbbFxfbq5y/Mq5sHS2/eDw/52Z2YlZDC2goCAW5Y43NjLWzj34Ydl
TLDo+gKvnr9OFi455L8gj6OOr8U1QR2nNhVCRhCkKZpzlH1XxaVNhZacl1Q0Q5qv
fmrdtA8PRa4o4yKSd9Fs+PNolXJ9UyM8XDe9wBeiWPu3GZhZpXueT3mWXHpc8QBE
ILPQ1JCVo9OwgXQPhnMj/q7AhR/IpdxuvU1/JPHBwQr0F5S2cJURmqZr0UtmevRs
kWI6LJQH0VCzukteKujxc7jilG3Ew64PYFbrOpqn6GlDTtkhXr2izmO2NBckDVOm
jzTwBu7iLVDiD6q8tb+nF3ouinkDhSSrQg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:32:53 2025 by rpki-client