Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/eb4b0ded-fc85-3b37-851c-99a7409aacee.roa
File: eb4b0ded-fc85-3b37-851c-99a7409aacee.roa (raw, json)
Hash identifier: vbrFmEqAlLuIJAZ0P077i5W4HQPdn2aWPreYOohtZD4=
Subject key identifier: 15:53:8F:A7:7E:AF:C8:FB:48:A6:4B:78:B7:4A:8C:89:A2:24:91:52
Certificate issuer: /CN=3a3095c5-fb6a-4400-bb74-b55eff2073bc
Certificate serial: 010D0C9F43285848EFC6A4D2555AAFCD4E8E3910
Authority key identifier: 10:A0:E1:F5:16:FB:75:75:1F:9D:D3:8F:00:2D:CE:15:BE:77:4E:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/eb4b0ded-fc85-3b37-851c-99a7409aacee.roa
Signing time: Wed 19 Feb 2025 17:25:20 +0000
ROA not before: Wed 19 Feb 2025 17:25:20 +0000
ROA not after: Tue 20 May 2025 16:25:20 +0000
asID: 399970
IP address blocks: 2602:fc3b:700::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:c6:a4:d2:55:5a:af:cd:4e:8e:39:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3095c5-fb6a-4400-bb74-b55eff2073bc
Validity
Not Before: Feb 19 17:25:20 2025 GMT
Not After : May 20 16:25:20 2025 GMT
Subject: CN=45b660d9-647a-4ae0-a884-5fefed36f149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:82:e0:ef:3b:a7:48:76:74:8c:f6:3d:a0:f4:
c9:a5:e3:ec:b0:97:d0:47:d4:9a:5b:5a:ed:30:27:
97:1b:ee:81:dd:8e:11:a5:87:50:e6:0b:77:8f:ce:
e7:6e:07:5b:f0:d4:31:5b:cd:bc:30:aa:a4:e3:50:
6a:d6:4e:2b:d0:5f:98:e7:50:6f:ac:cf:dd:24:5a:
d2:ee:85:5e:20:b9:36:58:6e:22:c7:23:86:b2:1d:
13:54:11:29:94:d4:ca:13:7f:c4:b4:bd:c5:50:4e:
7c:92:2f:36:af:b9:5e:f4:a8:fe:8c:5e:48:44:c5:
3f:03:8a:1c:c0:d4:56:bb:4b:e3:52:b0:97:8e:c8:
7f:24:61:a1:85:fb:cb:db:62:60:6b:95:c7:fc:4d:
1f:4a:ce:36:fe:82:e7:e8:b8:ec:9a:b3:cd:75:79:
38:86:1c:be:1e:32:e0:4b:8a:e0:00:5f:ba:3b:52:
68:2b:b8:1d:5c:9c:6a:45:a9:a5:d5:bb:9a:cd:fc:
94:26:72:4e:70:21:b1:9d:51:a2:fb:3e:02:7d:55:
78:a6:6a:b1:fa:62:ed:78:00:14:10:b1:d0:1f:57:
be:0d:9e:d4:6e:1a:ff:c4:7f:16:7b:ef:ac:ff:90:
20:36:b8:ec:50:04:3b:a8:1f:40:c2:f8:0e:c5:63:
0e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:53:8F:A7:7E:AF:C8:FB:48:A6:4B:78:B7:4A:8C:89:A2:24:91:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/eb4b0ded-fc85-3b37-851c-99a7409aacee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/3a3095c5-fb6a-4400-bb74-b55eff2073bc.crl
X509v3 Authority Key Identifier:
keyid:10:A0:E1:F5:16:FB:75:75:1F:9D:D3:8F:00:2D:CE:15:BE:77:4E:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fc3b:700::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:9c:54:64:84:5a:d8:cd:13:c2:c9:e6:6b:a3:31:6b:84:a9:
4d:19:15:1e:34:a8:19:78:d9:a2:ab:e7:64:ae:dc:3e:ea:f3:
d6:bd:d6:61:8f:3a:e7:5a:f4:22:c6:da:ab:bd:80:73:da:5b:
12:d1:02:63:4c:17:e9:49:e7:0a:c7:bf:3a:fd:15:fb:b5:3d:
a7:01:f8:92:73:3e:98:48:11:f2:f9:fb:c3:93:cd:62:26:e3:
22:4a:91:6c:ee:5a:c3:7d:28:29:59:f2:83:39:3f:9b:b1:92:
3d:e8:04:f1:a2:b5:5c:ca:8f:f1:1b:95:c6:69:e9:20:f5:0b:
fc:45:a0:ba:90:80:bf:e3:0c:2f:e9:3a:e6:cb:23:f0:88:72:
52:84:98:d9:8e:64:be:cb:ed:31:0d:9c:d9:db:e0:cf:82:db:
5c:64:34:4f:7a:9a:28:f1:bb:7b:55:4e:c9:1b:a2:13:83:2e:
56:68:46:3c:67:30:8c:c6:86:06:12:24:85:b7:74:c5:0c:f1:
a4:10:51:9a:0e:b0:1a:ee:66:32:34:4f:9e:c3:77:75:0a:cf:
10:a6:6e:09:96:bd:ab:36:59:8f:c8:83:1a:d3:14:b5:3c:76:
c2:54:8f:c0:e6:89:d9:0a:6b:dd:31:bd:43:b6:5b:26:28:5c:
a1:5a:5c:0f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjvxqTSVVqvzU6OORAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2EzMDk1YzUtZmI2YS00NDAwLWJiNzQtYjU1ZWZmMjA3
M2JjMB4XDTI1MDIxOTE3MjUyMFoXDTI1MDUyMDE2MjUyMFowLzEtMCsGA1UEAxMk
NDViNjYwZDktNjQ3YS00YWUwLWE4ODQtNWZlZmVkMzZmMTQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYLg7zunSHZ0jPY9oPTJpePssJfQR9SaW1rt
MCeXG+6B3Y4RpYdQ5gt3j87nbgdb8NQxW828MKqk41Bq1k4r0F+Y51BvrM/dJFrS
7oVeILk2WG4ixyOGsh0TVBEplNTKE3/EtL3FUE58ki82r7le9Kj+jF5IRMU/A4oc
wNRWu0vjUrCXjsh/JGGhhfvL22Jga5XH/E0fSs42/oLn6LjsmrPNdXk4hhy+HjLg
S4rgAF+6O1JoK7gdXJxqRaml1buazfyUJnJOcCGxnVGi+z4CfVV4pmqx+mLteAAU
ELHQH1e+DZ7Ubhr/xH8We++s/5AgNrjsUAQ7qB9AwvgOxWMOAwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBVTj6d+r8j7SKZLeLdKjImiJJFSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zYTMw
OTVjNS1mYjZhLTQ0MDAtYmI3NC1iNTVlZmYyMDczYmMvZWI0YjBkZWQtZmM4NS0z
YjM3LTg1MWMtOTlhNzQwOWFhY2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2EzMDk1YzUtZmI2YS00NDAwLWJi
NzQtYjU1ZWZmMjA3M2JjLzNhMzA5NWM1LWZiNmEtNDQwMC1iYjc0LWI1NWVmZjIw
NzNiYy5jcmwwHwYDVR0jBBgwFoAUEKDh9Rb7dXUfndOPAC3OFb53TqIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8zYTMwOTVjNS1mYjZhLTQ0MDAtYmI3NC1iNTVl
ZmYyMDczYmMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8OwcA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAE6cVGSEWtjNE8LJ5mujMWuEqU0ZFR40qBl42aKr52Su3D7q89a9
1mGPOuda9CLG2qu9gHPaWxLRAmNMF+lJ5wrHvzr9Ffu1PacB+JJzPphIEfL5+8OT
zWIm4yJKkWzuWsN9KClZ8oM5P5uxkj3oBPGitVzKj/EblcZp6SD1C/xFoLqQgL/j
DC/pOubLI/CIclKEmNmOZL7L7TENnNnb4M+C21xkNE96mijxu3tVTskbohODLlZo
RjxnMIzGhgYSJIW3dMUM8aQQUZoOsBruZjI0T57Dd3UKzxCmbgmWvas2WY/IgxrT
FLU8dsJUj8DmidkKa90xvUO2WyYoXKFaXA8=
-----END CERTIFICATE-----
Generated at Wed Apr 9 01:47:58 2025 by rpki-client