Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/f0875c5d-ee9e-3f7e-8a41-81f8031211db.roa
File: f0875c5d-ee9e-3f7e-8a41-81f8031211db.roa (raw, json)
Hash identifier: eeZoVN7TUezMbDout5zbcfYq8t/OHEJZgSjla7SYO0s=
Subject key identifier: 88:CA:68:14:E7:1E:22:F9:3E:C9:E3:BB:F1:39:36:D8:98:D1:95:DF
Certificate issuer: /CN=9f983207-8073-42af-88ee-df4902c8adaf
Certificate serial: 010D0C9F4328584845158FC80C5EE6CDAA83E080
Authority key identifier: C3:2C:B9:FB:7A:22:7F:4A:05:1E:4A:99:A8:FB:6E:8D:68:59:CA:A1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/f0875c5d-ee9e-3f7e-8a41-81f8031211db.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 801
IP address blocks: 2602:fa2e:8a1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:8f:c8:0c:5e:e6:cd:aa:83:e0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f983207-8073-42af-88ee-df4902c8adaf
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=c87fe134-0ff9-4859-a3c1-30c13e08d34a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:19:79:cc:16:a3:5a:a0:b6:69:af:e0:97:cc:
29:9b:ea:d0:e3:ae:13:97:b2:d5:7a:d4:3e:03:3d:
b5:d7:83:69:a4:4c:9f:15:d9:3a:39:78:34:ed:1a:
b0:0f:60:e0:60:c1:05:b2:b8:76:16:7d:d6:45:f1:
45:8a:b8:07:da:4f:51:d7:da:e6:c0:56:7e:03:1d:
5d:4a:83:c0:4c:5b:68:35:70:07:7e:fd:ce:6d:86:
cb:f6:d1:22:97:3b:c7:e0:74:80:05:c9:a5:90:56:
8e:8d:31:e0:af:cf:9f:2b:09:a2:83:26:50:c7:54:
29:b8:58:01:44:00:72:e9:73:e9:7e:89:4e:6d:3f:
53:6c:7f:45:7e:94:fe:7a:32:b8:fa:3a:fa:ea:94:
23:d2:67:39:f9:c4:53:61:4a:e4:8e:ac:03:4c:7e:
d4:61:1b:ae:24:bf:a0:7f:e2:bf:1d:24:6a:10:b3:
43:b9:cb:6b:0f:f5:fa:9f:64:52:4b:65:a2:e4:cf:
9e:ec:f8:c6:af:f1:26:c8:98:20:1f:2c:11:d3:94:
c2:ff:4f:cb:b8:a8:f9:67:cc:97:18:2f:73:62:ac:
99:87:23:77:da:18:f3:6b:d5:9e:76:4c:1a:0b:ad:
79:63:3f:07:f5:b6:23:a2:13:71:2d:9a:7a:09:d6:
3f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:CA:68:14:E7:1E:22:F9:3E:C9:E3:BB:F1:39:36:D8:98:D1:95:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/f0875c5d-ee9e-3f7e-8a41-81f8031211db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/9f983207-8073-42af-88ee-df4902c8adaf.crl
X509v3 Authority Key Identifier:
keyid:C3:2C:B9:FB:7A:22:7F:4A:05:1E:4A:99:A8:FB:6E:8D:68:59:CA:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fa2e:8a1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c4:cb:b8:97:b6:24:a2:0e:b5:05:84:05:e6:64:48:4e:fc:88:
8b:7f:cc:2c:27:d9:b2:ff:28:c2:47:d7:51:bc:dd:46:f5:41:
45:ed:fe:5b:9f:ba:ba:16:8c:47:71:b8:27:62:0d:27:11:d3:
cb:bf:89:aa:80:28:4f:11:0e:bf:19:d9:1a:9b:1b:17:55:98:
77:a4:0f:f1:ee:ee:43:0a:f7:d2:37:28:18:bf:42:67:d0:18:
e8:52:46:5c:97:6b:db:96:7b:d4:21:1f:9b:5d:90:bd:f9:3a:
0f:6f:86:69:60:4e:86:98:bf:ca:17:8b:00:c6:30:87:53:39:
8e:b9:b0:db:d5:80:ad:87:84:13:3f:8c:72:50:42:39:95:11:
7b:a0:65:99:88:6b:40:e6:37:5b:f1:eb:ae:23:e8:3b:d8:1a:
e8:cc:9e:db:fe:6c:f8:81:df:23:02:59:a7:85:b2:ea:ae:b6:
b6:7b:18:9f:ad:ff:d0:d6:9b:38:01:ba:c0:aa:6e:d6:d6:68:
7f:b2:55:3c:01:8d:6a:14:02:ed:63:cd:92:48:43:80:9f:27:
43:df:29:08:cb:8b:a3:bb:01:01:e1:eb:32:3d:b5:5c:41:a4:
73:00:1b:79:57:b9:db:92:33:29:a1:c9:51:b1:a9:3e:18:2a:
be:ed:f1:b0
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhFFY/IDF7mzaqD4IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWY5ODMyMDctODA3My00MmFmLTg4ZWUtZGY0OTAyYzhh
ZGFmMB4XDTI0MTIyMDE0MDA1MVoXDTI1MDMyMDEzMDA1MVowLzEtMCsGA1UEAxMk
Yzg3ZmUxMzQtMGZmOS00ODU5LWEzYzEtMzBjMTNlMDhkMzRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRl5zBajWqC2aa/gl8wpm+rQ464Tl7LVetQ+
Az2114NppEyfFdk6OXg07RqwD2DgYMEFsrh2Fn3WRfFFirgH2k9R19rmwFZ+Ax1d
SoPATFtoNXAHfv3ObYbL9tEilzvH4HSABcmlkFaOjTHgr8+fKwmigyZQx1QpuFgB
RABy6XPpfolObT9TbH9FfpT+ejK4+jr66pQj0mc5+cRTYUrkjqwDTH7UYRuuJL+g
f+K/HSRqELNDuctrD/X6n2RSS2Wi5M+e7PjGr/EmyJggHywR05TC/0/LuKj5Z8yX
GC9zYqyZhyN32hjza9WedkwaC615Yz8H9bYjohNxLZp6CdY/1QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIjKaBTnHiL5Psnju/E5NtiY0ZXfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85Zjk4
MzIwNy04MDczLTQyYWYtODhlZS1kZjQ5MDJjOGFkYWYvZjA4NzVjNWQtZWU5ZS0z
ZjdlLThhNDEtODFmODAzMTIxMWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWY5ODMyMDctODA3My00MmFmLTg4
ZWUtZGY0OTAyYzhhZGFmLzlmOTgzMjA3LTgwNzMtNDJhZi04OGVlLWRmNDkwMmM4
YWRhZi5jcmwwHwYDVR0jBBgwFoAUwyy5+3oif0oFHkqZqPtujWhZyqEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85Zjk4MzIwNy04MDczLTQyYWYtODhlZS1kZjQ5
MDJjOGFkYWYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6Lgih
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAMTLuJe2JKIOtQWEBeZkSE78iIt/zCwn2bL/KMJH11G83Ub1QUXt
/lufuroWjEdxuCdiDScR08u/iaqAKE8RDr8Z2RqbGxdVmHekD/Hu7kMK99I3KBi/
QmfQGOhSRlyXa9uWe9QhH5tdkL35Og9vhmlgToaYv8oXiwDGMIdTOY65sNvVgK2H
hBM/jHJQQjmVEXugZZmIa0DmN1vx664j6DvYGujMntv+bPiB3yMCWaeFsuqutrZ7
GJ+t/9DWmzgBusCqbtbWaH+yVTwBjWoUAu1jzZJIQ4CfJ0PfKQjLi6O7AQHh6zI9
tVxBpHMAG3lXuduSMymhyVGxqT4YKr7t8bA=
-----END CERTIFICATE-----
Generated at Tue Apr 8 18:18:32 2025 by rpki-client