Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bb5b9fde-d72c-3590-a8ef-03d822de30d7.roa
File: bb5b9fde-d72c-3590-a8ef-03d822de30d7.roa (raw, json)
Hash identifier: sG5mnvHghFF57QbgoYhUtVeReLSKYxZfq58dcNSWtR8=
Subject key identifier: 4E:37:73:71:EB:6F:CF:A0:5B:F0:29:AC:F1:02:13:D1:FD:79:3E:45
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583DA149CEA5F6DCD08B1F0B4580
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bb5b9fde-d72c-3590-a8ef-03d822de30d7.roa
Signing time: Tue 19 Apr 2022 04:00:00 +0000
ROA not before: Tue 19 Apr 2022 04:00:00 +0000
ROA not after: Tue 11 Apr 2028 04:00:00 +0000
asID: 7029
IP address blocks: 2604:cb00:3300::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:a1:49:ce:a5:f6:dc:d0:8b:1f:0b:45:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Apr 19 04:00:00 2022 GMT
Not After : Apr 11 04:00:00 2028 GMT
Subject: CN=601f9010-051e-48ed-b323-dcc105f8050b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:82:a9:66:7e:ac:d2:56:e7:0b:8f:eb:00:4a:
b7:1b:cf:bc:bd:c3:a8:00:32:50:0a:9a:fd:87:2b:
66:f1:73:10:e9:26:9b:c8:0e:b9:af:b3:56:65:f4:
92:e3:46:ba:f7:fa:10:9e:48:95:76:1d:6d:ef:16:
72:d5:8c:e7:84:cd:9c:07:39:2a:e0:4d:9b:2e:a1:
c6:c4:b0:29:9a:70:82:7c:87:99:dd:10:c2:b5:dd:
da:15:76:12:73:f5:1d:32:55:ee:a1:00:ba:7f:af:
e5:12:a8:ba:8c:72:57:39:fb:54:9d:b3:e9:31:40:
20:1f:86:19:8b:4a:ab:b4:70:fc:68:64:3a:c3:23:
66:b7:82:ee:d8:9a:a1:58:84:08:63:78:59:ed:47:
30:e7:eb:76:33:4d:bf:b3:47:c8:8e:c5:4f:e9:ef:
44:27:cd:07:e6:83:2f:7f:9f:66:63:77:e2:4f:a1:
29:ab:eb:47:c5:7a:6b:8b:f9:71:0d:82:30:22:aa:
4f:a1:30:54:87:42:36:f6:03:73:da:c4:0e:b7:73:
0c:a8:df:de:e4:05:5a:30:0b:a3:db:f7:63:de:d8:
ae:49:79:4a:e6:f4:2b:66:cc:89:cd:d0:b2:6b:5c:
74:cb:e8:08:50:83:93:f8:d1:58:6f:68:b6:82:b8:
93:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:37:73:71:EB:6F:CF:A0:5B:F0:29:AC:F1:02:13:D1:FD:79:3E:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bb5b9fde-d72c-3590-a8ef-03d822de30d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:cb00:3300::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:97:db:f9:b4:a9:1e:34:bf:6c:f5:2c:79:ed:d3:50:cc:a9:
16:f2:3d:d7:1b:83:1b:8b:09:36:5d:24:1c:45:94:07:ae:51:
53:fc:b3:28:40:f8:b8:ad:b6:77:51:c2:2f:01:2f:5c:39:d0:
6b:f8:21:92:3f:af:25:5e:49:90:b0:0d:37:c7:11:ee:27:8d:
c0:66:17:38:d3:33:b5:36:46:bd:22:4d:17:c7:f1:9d:2c:f1:
98:a3:74:3b:1f:b8:30:07:c0:11:a6:45:97:7f:0a:0e:62:f9:
7c:23:ae:38:f5:b1:78:14:eb:d0:87:b2:67:65:e0:e4:ca:8e:
02:5d:41:61:51:b7:d6:18:2d:07:d2:67:57:f7:c7:db:f7:cb:
ad:48:a4:60:af:28:1a:71:cc:46:ed:65:60:38:af:57:1f:2d:
49:f8:13:7b:78:e7:d7:f0:85:25:09:8e:86:50:cc:fb:55:96:
cd:0b:ca:a6:39:a4:11:e0:24:e5:b7:3d:84:93:3e:2a:a6:46:
ab:a5:f6:68:0c:49:2c:eb:8c:7e:e8:de:ed:9a:9b:b6:66:57:
bb:6d:60:2d:68:47:5a:e3:aa:78:00:7c:93:56:c4:13:67:f1:
cf:97:68:9c:b2:bd:b3:7a:79:67:e1:ff:82:25:60:b6:0b:42:
d5:76:a1:e2
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWD2hSc6l9tzQix8LRYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTIyMDQxOTA0MDAwMFoXDTI4MDQxMTA0MDAwMFowLzEtMCsGA1UEAxMk
NjAxZjkwMTAtMDUxZS00OGVkLWIzMjMtZGNjMTA1ZjgwNTBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIKpZn6s0lbnC4/rAEq3G8+8vcOoADJQCpr9
hytm8XMQ6SabyA65r7NWZfSS40a69/oQnkiVdh1t7xZy1YznhM2cBzkq4E2bLqHG
xLApmnCCfIeZ3RDCtd3aFXYSc/UdMlXuoQC6f6/lEqi6jHJXOftUnbPpMUAgH4YZ
i0qrtHD8aGQ6wyNmt4Lu2JqhWIQIY3hZ7Ucw5+t2M02/s0fIjsVP6e9EJ80H5oMv
f59mY3fiT6Epq+tHxXpri/lxDYIwIqpPoTBUh0I29gNz2sQOt3MMqN/e5AVaMAuj
2/dj3tiuSXlK5vQrZsyJzdCya1x0y+gIUIOT+NFYb2i2griT/QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFE43c3Hrb8+gW/AprPECE9H9eT5FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmI1YjlmZGUtZDcyYy0z
NTkwLWE4ZWYtMDNkODIyZGUzMGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLADMw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAIJfb+bSpHjS/bPUsee3TUMypFvI91xuDG4sJNl0kHEWUB65RU/yz
KED4uK22d1HCLwEvXDnQa/ghkj+vJV5JkLANN8cR7ieNwGYXONMztTZGvSJNF8fx
nSzxmKN0Ox+4MAfAEaZFl38KDmL5fCOuOPWxeBTr0IeyZ2Xg5MqOAl1BYVG31hgt
B9JnV/fH2/fLrUikYK8oGnHMRu1lYDivVx8tSfgTe3jn1/CFJQmOhlDM+1WWzQvK
pjmkEeAk5bc9hJM+KqZGq6X2aAxJLOuMfuje7ZqbtmZXu21gLWhHWuOqeAB8k1bE
E2fxz5donLK9s3p5Z+H/giVgtgtC1Xah4g==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:01:24 2025 by rpki-client