Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/4f3b1d14-8545-3d03-9ee0-abc2049c0162.roa
File: 4f3b1d14-8545-3d03-9ee0-abc2049c0162.roa (raw, json)
Hash identifier: kZRgc9SxGQdnCMG7V6hUqS6hVGi1TsLtQFyvR+rfRKI=
Subject key identifier: DD:0D:25:3B:35:74:7B:D8:41:02:88:EB:BB:65:9B:B0:72:99:E3:46
Certificate issuer: /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial: 010D0C9F432858494B64189C057451EF9D108400
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/4f3b1d14-8545-3d03-9ee0-abc2049c0162.roa
Signing time: Mon 24 Mar 2025 13:00:53 +0000
ROA not before: Mon 24 Mar 2025 13:00:53 +0000
ROA not after: Sun 22 Jun 2025 13:00:53 +0000
asID: 394285
IP address blocks: 2606:a100:5000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:64:18:9c:05:74:51:ef:9d:10:84:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Validity
Not Before: Mar 24 13:00:53 2025 GMT
Not After : Jun 22 13:00:53 2025 GMT
Subject: CN=1c37d46a-6896-4c65-b047-be26596de4ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:05:8a:d9:ba:ba:35:c0:13:ef:ac:b2:dd:90:
26:70:93:e7:04:14:52:30:d6:1d:a9:1d:6c:b6:61:
fb:70:23:07:d1:9c:5e:ad:a4:20:6f:7b:41:b0:24:
88:73:6d:04:e1:09:a7:e5:26:f3:bc:67:d0:76:cd:
c5:a8:26:c1:47:f9:be:46:44:66:af:27:9b:c5:51:
42:c7:31:bf:56:f1:56:da:7a:be:ee:a9:26:5d:13:
7a:af:c8:56:ef:3f:71:0a:fb:d1:52:ee:8f:51:79:
ad:ea:c9:d3:6f:94:78:98:26:24:02:25:8a:f3:f6:
a0:53:f8:a2:d6:7c:d9:5e:4e:a9:ab:7d:b9:59:f4:
7e:64:b4:68:19:04:93:89:a2:5d:ad:59:f6:17:92:
35:d9:1c:92:67:3e:c8:d5:50:b2:1c:de:65:5b:45:
86:0d:46:82:0b:69:bf:b9:17:31:04:c6:9d:1f:94:
a8:42:a0:4d:34:92:af:ae:76:95:0d:0f:f2:50:8b:
0b:de:f4:ac:b5:7e:35:3e:1a:8d:ee:34:88:a8:92:
9f:88:cd:3e:57:83:6e:b3:1d:ef:91:dd:b2:5a:4a:
0c:1b:63:3f:d4:31:29:99:33:e0:e7:e1:ef:e7:a3:
67:37:98:ac:f8:f5:8b:49:fd:8a:2d:74:30:4d:d3:
9d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:0D:25:3B:35:74:7B:D8:41:02:88:EB:BB:65:9B:B0:72:99:E3:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/4f3b1d14-8545-3d03-9ee0-abc2049c0162.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
X509v3 Authority Key Identifier:
keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:a100:5000::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:9d:4c:78:82:e9:9a:9e:16:dd:ac:1a:c7:cf:a8:c0:ad:27:
16:6a:e4:a4:c6:09:5b:f7:bd:66:aa:8e:51:5b:4e:cd:34:16:
60:2d:6a:d2:81:73:e4:0c:c9:d0:54:76:90:a5:06:5b:88:d7:
10:19:68:13:11:2c:d7:a9:46:93:d1:0a:9f:1c:2e:98:43:76:
41:59:55:fc:af:4c:fe:9d:d9:d8:99:67:dd:af:35:d0:fa:ee:
7f:cb:f8:02:9f:e5:96:dd:10:82:13:90:84:8e:7e:ad:b0:65:
0a:8e:61:7a:c9:0b:f4:64:2b:b7:d7:4f:0c:f4:5f:78:db:5b:
0c:5d:98:6d:ce:a6:20:14:8e:73:bc:66:9a:b9:14:3c:05:ab:
bf:1c:b3:53:d4:c1:7c:9c:c7:b5:de:5f:4a:df:69:77:94:59:
23:16:00:09:aa:45:75:00:1e:db:ee:84:b0:b0:86:92:9b:6c:
d1:66:6d:76:fc:19:a1:b8:cf:de:c4:dd:2c:fa:c4:21:09:1b:
82:0e:06:ae:c6:51:78:c0:80:ef:13:78:00:c0:14:a0:62:ff:
f2:c4:40:82:a7:0a:30:af:b3:a6:98:81:9f:d3:77:6b:cf:7f:
98:88:a0:8a:d3:ea:76:9a:53:2b:d6:83:b4:fc:a0:ed:9d:fa:
88:bd:aa:32
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWElLZBicBXRR750QhAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2VmZDc1MjktMzhiMS00NzJjLTlkNWItZDg3MzgyZDA4
OGEwMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk
MWMzN2Q0NmEtNjg5Ni00YzY1LWIwNDctYmUyNjU5NmRlNGNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAWK2bq6NcAT76yy3ZAmcJPnBBRSMNYdqR1s
tmH7cCMH0ZxeraQgb3tBsCSIc20E4Qmn5SbzvGfQds3FqCbBR/m+RkRmryebxVFC
xzG/VvFW2nq+7qkmXRN6r8hW7z9xCvvRUu6PUXmt6snTb5R4mCYkAiWK8/agU/ii
1nzZXk6pq325WfR+ZLRoGQSTiaJdrVn2F5I12RySZz7I1VCyHN5lW0WGDUaCC2m/
uRcxBMadH5SoQqBNNJKvrnaVDQ/yUIsL3vSstX41PhqN7jSIqJKfiM0+V4Nusx3v
kd2yWkoMG2M/1DEpmTPg5+Hv56NnN5is+PWLSf2KLXQwTdOdGQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFN0NJTs1dHvYQQKI67tlm7BymeNGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZk
NzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODczODJkMDg4YTAvNGYzYjFkMTQtODU0NS0z
ZDAzLTllZTAtYWJjMjA0OWMwMTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2VmZDc1MjktMzhiMS00NzJjLTlk
NWItZDg3MzgyZDA4OGEwLzNlZmQ3NTI5LTM4YjEtNDcyYy05ZDViLWQ4NzM4MmQw
ODhhMC5jcmwwHwYDVR0jBBgwFoAUW4MicpSIqXhZmzrb3eBIKYdqlAcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZkNzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODcz
ODJkMDg4YTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgahAFAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEARp1MeILpmp4W3awax8+owK0nFmrkpMYJW/e9ZqqOUVtOzTQWYC1q
0oFz5AzJ0FR2kKUGW4jXEBloExEs16lGk9EKnxwumEN2QVlV/K9M/p3Z2Jln3a81
0Pruf8v4Ap/llt0QghOQhI5+rbBlCo5heskL9GQrt9dPDPRfeNtbDF2Ybc6mIBSO
c7xmmrkUPAWrvxyzU9TBfJzHtd5fSt9pd5RZIxYACapFdQAe2+6EsLCGkpts0WZt
dvwZobjP3sTdLPrEIQkbgg4GrsZReMCA7xN4AMAUoGL/8sRAgqcKMK+zppiBn9N3
a89/mIigitPqdppTK9aDtPyg7Z36iL2qMg==
-----END CERTIFICATE-----
Generated at Sun Apr 6 22:40:21 2025 by rpki-client