Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/3a41c66c-7e29-38fb-9f24-8df2f5fd953f.roa
File: 3a41c66c-7e29-38fb-9f24-8df2f5fd953f.roa (raw, json)
Hash identifier: 7SDNmDIGq3sIxjbGc56Z52gIZd6A3jEDfOxBRhhdjJ8=
Subject key identifier: FD:E9:9C:25:F6:35:6E:10:4B:E7:62:A9:F9:D1:CF:BD:19:19:1E:3D
Certificate issuer: /CN=8322c61d-99cf-48fc-b867-b2c2cce4d324
Certificate serial: 010D0C9F432858494E2EAA7726F28CBC5ECBF300
Authority key identifier: 23:EC:CD:25:07:2E:B6:D8:45:A9:F0:04:86:BA:91:6D:90:8F:B8:FA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/3a41c66c-7e29-38fb-9f24-8df2f5fd953f.roa
Signing time: Tue 25 Mar 2025 13:00:51 +0000
ROA not before: Tue 25 Mar 2025 13:00:51 +0000
ROA not after: Mon 23 Jun 2025 13:00:51 +0000
asID: 40382
IP address blocks: 2606:e540::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4e:2e:aa:77:26:f2:8c:bc:5e:cb:f3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8322c61d-99cf-48fc-b867-b2c2cce4d324
Validity
Not Before: Mar 25 13:00:51 2025 GMT
Not After : Jun 23 13:00:51 2025 GMT
Subject: CN=068820d0-725c-4e95-ac90-4ab88fe90095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1c:9b:88:6c:20:d3:77:31:d0:37:de:c1:fe:
8a:ad:1b:a1:dc:dc:d9:b9:26:80:df:31:7d:74:63:
9a:78:0e:c5:5b:8c:2f:eb:df:ea:7e:4d:01:5a:12:
d0:53:bf:7f:2f:ff:bc:23:93:b6:66:8e:3a:89:ec:
ab:eb:16:bd:93:68:0f:c0:a0:fa:a4:71:dc:d3:4c:
d2:09:c7:46:cb:0f:63:41:6c:38:65:b8:62:89:d6:
43:ce:cf:3d:c2:4c:11:ab:1c:5d:8f:8d:4a:80:d2:
cb:2a:ef:cf:fa:2f:1b:50:45:89:0c:85:10:bf:30:
14:ff:c4:93:ca:59:07:87:18:b6:46:fe:71:1a:65:
6e:73:81:57:5d:50:b1:c5:12:0d:e6:d0:4d:13:59:
bf:6d:0a:d7:dd:c2:fe:d4:84:32:80:ab:d2:f4:1e:
3b:dc:31:c9:28:0e:2a:45:d3:6c:fb:c2:3a:ab:97:
a3:10:68:5b:c8:bb:e2:a2:9b:83:a5:1b:37:77:18:
37:5d:e0:58:0d:dd:81:f4:85:d1:2b:7b:41:4e:dc:
40:80:cd:85:ae:64:7a:31:a3:69:d0:bc:a7:25:73:
31:e6:ec:e8:49:9d:c7:03:a1:8d:d9:4d:3c:0c:b7:
5d:f5:e4:7c:49:24:4f:7f:45:b6:ab:bf:8e:63:61:
82:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E9:9C:25:F6:35:6E:10:4B:E7:62:A9:F9:D1:CF:BD:19:19:1E:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/3a41c66c-7e29-38fb-9f24-8df2f5fd953f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.crl
X509v3 Authority Key Identifier:
keyid:23:EC:CD:25:07:2E:B6:D8:45:A9:F0:04:86:BA:91:6D:90:8F:B8:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:e540::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:bd:88:4a:68:15:c6:b8:51:9f:73:31:b0:03:c8:11:ba:16:
27:c3:25:22:e8:7b:ef:4c:cc:06:7c:be:ed:9a:29:1f:f7:92:
87:51:06:8b:af:16:16:6d:55:c5:aa:91:05:16:22:0e:3c:55:
27:b9:cc:87:e7:5a:10:13:8d:35:d3:33:5c:e5:b9:67:dd:b5:
20:6d:92:57:1e:bc:cb:5a:1d:a7:fd:ab:9e:9c:98:26:0e:c2:
a1:38:a9:a0:f9:9a:7b:9e:ef:39:24:c5:51:52:17:e3:49:69:
7d:4e:e3:85:9c:ef:60:d7:c5:6c:43:8d:44:36:ee:19:6f:5b:
0e:0b:03:48:21:73:16:ef:35:73:70:1d:7b:0b:a9:fc:32:e4:
43:1c:b6:b3:bc:aa:00:c6:7a:3f:99:87:46:44:e0:bd:2e:5b:
df:69:b8:e0:10:dd:32:f4:0f:38:d0:80:00:e5:ae:0f:ac:84:
5c:1f:8b:a9:07:e4:5e:a3:38:4a:4a:28:5e:bc:d1:0b:4e:e0:
70:53:da:01:0c:05:0e:eb:2b:88:2a:03:7c:fa:67:75:9e:9d:
e0:3e:b8:8b:fb:b3:a6:84:04:9c:01:b6:e9:e2:8b:72:44:a0:
8b:7b:2a:32:64:44:02:10:60:be:ca:ad:84:94:1e:71:01:5b:
5d:b7:e1:98
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElOLqp3JvKMvF7L8wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMyMmM2MWQtOTljZi00OGZjLWI4NjctYjJjMmNjZTRk
MzI0MB4XDTI1MDMyNTEzMDA1MVoXDTI1MDYyMzEzMDA1MVowLzEtMCsGA1UEAxMk
MDY4ODIwZDAtNzI1Yy00ZTk1LWFjOTAtNGFiODhmZTkwMDk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRybiGwg03cx0Dfewf6KrRuh3NzZuSaA3zF9
dGOaeA7FW4wv69/qfk0BWhLQU79/L/+8I5O2Zo46ieyr6xa9k2gPwKD6pHHc00zS
CcdGyw9jQWw4ZbhiidZDzs89wkwRqxxdj41KgNLLKu/P+i8bUEWJDIUQvzAU/8ST
ylkHhxi2Rv5xGmVuc4FXXVCxxRIN5tBNE1m/bQrX3cL+1IQygKvS9B473DHJKA4q
RdNs+8I6q5ejEGhbyLviopuDpRs3dxg3XeBYDd2B9IXRK3tBTtxAgM2FrmR6MaNp
0LynJXMx5uzoSZ3HA6GN2U08DLdd9eR8SSRPf0W2q7+OY2GCHwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFP3pnCX2NW4QS+diqfnRz70ZGR49MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MzIy
YzYxZC05OWNmLTQ4ZmMtYjg2Ny1iMmMyY2NlNGQzMjQvM2E0MWM2NmMtN2UyOS0z
OGZiLTlmMjQtOGRmMmY1ZmQ5NTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODMyMmM2MWQtOTljZi00OGZjLWI4
NjctYjJjMmNjZTRkMzI0LzgzMjJjNjFkLTk5Y2YtNDhmYy1iODY3LWIyYzJjY2U0
ZDMyNC5jcmwwHwYDVR0jBBgwFoAUI+zNJQcutthFqfAEhrqRbZCPuPowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy84MzIyYzYxZC05OWNmLTQ4ZmMtYjg2Ny1iMmMy
Y2NlNGQzMjQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgblQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBqvYhKaBXGuFGfczGwA8gRuhYnwyUi6HvvTMwGfL7tmikf95KHUQaL
rxYWbVXFqpEFFiIOPFUnucyH51oQE4010zNc5bln3bUgbZJXHrzLWh2n/auenJgm
DsKhOKmg+Zp7nu85JMVRUhfjSWl9TuOFnO9g18VsQ41ENu4Zb1sOCwNIIXMW7zVz
cB17C6n8MuRDHLazvKoAxno/mYdGROC9LlvfabjgEN0y9A840IAA5a4PrIRcH4up
B+ReozhKSihevNELTuBwU9oBDAUO6yuIKgN8+md1np3gPriL+7OmhAScAbbp4oty
RKCLeyoyZEQCEGC+yq2ElB5xAVtdt+GY
-----END CERTIFICATE-----
Generated at Wed Apr 9 03:53:20 2025 by rpki-client