Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bae7ed2b-d42a-42fa-947d-f719eddc984a/7ff71d96-a125-37c4-b7c3-cf5b3b7092d1.roa
File: 7ff71d96-a125-37c4-b7c3-cf5b3b7092d1.roa (raw, json)
Hash identifier: PoGJIO0A/tC79HwzXWJA2yCA2DDnvbg8FY4aefk0SyI=
Subject key identifier: F2:F9:37:FA:57:D4:9E:51:30:11:72:DE:40:DC:02:5A:D5:1B:00:99
Certificate issuer: /CN=bae7ed2b-d42a-42fa-947d-f719eddc984a
Certificate serial: 010D0C9F43285848A1361C0B2BB162986302C4E0
Authority key identifier: 88:44:B3:56:01:51:95:24:A9:70:95:2B:95:87:67:9B:64:DD:DB:3A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bae7ed2b-d42a-42fa-947d-f719eddc984a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bae7ed2b-d42a-42fa-947d-f719eddc984a/7ff71d96-a125-37c4-b7c3-cf5b3b7092d1.roa
Signing time: Wed 22 Jan 2025 14:00:52 +0000
ROA not before: Wed 22 Jan 2025 14:00:52 +0000
ROA not after: Tue 22 Apr 2025 13:00:52 +0000
asID: 397423
IP address blocks: 2602:2c8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:36:1c:0b:2b:b1:62:98:63:02:c4:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bae7ed2b-d42a-42fa-947d-f719eddc984a
Validity
Not Before: Jan 22 14:00:52 2025 GMT
Not After : Apr 22 13:00:52 2025 GMT
Subject: CN=c47b16dd-353f-4951-8b95-993e2108d767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7c:3e:d7:f3:0b:b2:9d:9a:27:a8:52:75:0c:
bb:b5:02:1c:9b:fc:f9:de:bd:9b:b0:8e:4d:9c:e6:
5a:bf:fb:94:c8:8f:8e:50:d1:3f:b3:f0:c5:a3:36:
70:62:1a:0e:a8:76:c1:e3:91:39:9f:5a:fb:a2:e9:
aa:49:19:dd:06:85:aa:bd:e6:b1:f7:51:6d:c8:8a:
34:e0:c6:29:cc:2c:e1:f2:a3:3e:1d:ab:2f:46:a9:
6e:b1:f4:6a:9e:84:9d:0c:de:5c:8e:94:34:a4:0f:
2f:e6:8e:b7:b9:84:0c:6f:1c:7b:c5:b0:73:f3:9c:
8d:11:48:50:ff:43:a0:5a:93:7e:78:60:9a:47:c7:
d4:e5:1b:e5:bd:96:b9:3e:1c:97:14:51:f6:72:64:
69:40:3e:9a:6d:09:7a:8d:3e:32:37:40:68:fb:a7:
3d:cf:53:03:8c:27:12:76:5e:db:f1:0f:48:10:9f:
95:0f:72:40:bd:06:4a:99:3e:72:63:b2:f4:8e:7f:
92:1a:99:52:d0:90:3f:9c:c9:be:0a:08:18:df:c6:
2c:ee:c2:b5:36:41:9e:44:bd:96:1c:58:28:fb:04:
d4:6c:07:cf:41:da:66:92:f4:14:f7:0c:98:36:2a:
f6:28:06:04:ad:c0:0d:49:c2:c2:8c:f1:96:75:0b:
76:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F9:37:FA:57:D4:9E:51:30:11:72:DE:40:DC:02:5A:D5:1B:00:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bae7ed2b-d42a-42fa-947d-f719eddc984a/7ff71d96-a125-37c4-b7c3-cf5b3b7092d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bae7ed2b-d42a-42fa-947d-f719eddc984a/bae7ed2b-d42a-42fa-947d-f719eddc984a.crl
X509v3 Authority Key Identifier:
keyid:88:44:B3:56:01:51:95:24:A9:70:95:2B:95:87:67:9B:64:DD:DB:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bae7ed2b-d42a-42fa-947d-f719eddc984a.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:2c8::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:25:66:c3:05:28:cc:a2:e0:9e:7e:e6:fd:d9:79:d3:1e:3b:
81:ef:34:0d:59:9b:68:e3:ce:c8:30:d1:74:1e:0b:f5:8e:68:
b2:2e:13:b8:57:c7:cd:02:29:a0:8e:7e:9c:83:9d:6e:9a:b7:
9f:d8:a0:76:0d:c0:45:8c:ac:bb:ce:e3:e0:38:1e:83:b2:ee:
62:c5:e1:94:26:0b:f4:68:5b:8c:f3:0d:5e:49:b2:4e:ba:cb:
65:d2:1f:57:80:52:d6:eb:6c:67:15:b7:9a:7b:10:36:d9:d3:
95:c8:35:68:8b:5a:c0:19:6c:0c:9c:5c:5f:a5:fc:92:b4:00:
17:1b:5a:e4:0e:60:1f:1f:46:2d:be:72:21:14:a4:6f:29:d4:
c5:2c:37:49:cb:09:02:94:5c:fb:f4:5d:b2:fe:8d:fe:e6:4d:
03:fe:ed:e9:99:f7:dc:9f:58:ed:1d:15:bf:1c:ca:9d:02:41:
be:a8:cc:57:c5:71:55:0a:a6:26:84:c7:f3:c1:39:bf:51:b8:
f0:2a:09:2e:c8:88:12:2b:e4:c5:03:67:f2:92:d5:1e:28:f9:
8d:91:65:ae:79:d9:ff:74:4f:6a:79:11:39:cb:d3:39:53:53:
b0:14:df:42:3d:d1:25:3b:d8:5a:91:77:98:ec:ee:19:32:f2:
7f:46:23:34
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEihNhwLK7FimGMCxOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmFlN2VkMmItZDQyYS00MmZhLTk0N2QtZjcxOWVkZGM5
ODRhMB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk
YzQ3YjE2ZGQtMzUzZi00OTUxLThiOTUtOTkzZTIxMDhkNzY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Xw+1/MLsp2aJ6hSdQy7tQIcm/z53r2bsI5N
nOZav/uUyI+OUNE/s/DFozZwYhoOqHbB45E5n1r7oumqSRndBoWqveax91FtyIo0
4MYpzCzh8qM+HasvRqlusfRqnoSdDN5cjpQ0pA8v5o63uYQMbxx7xbBz85yNEUhQ
/0OgWpN+eGCaR8fU5RvlvZa5PhyXFFH2cmRpQD6abQl6jT4yN0Bo+6c9z1MDjCcS
dl7b8Q9IEJ+VD3JAvQZKmT5yY7L0jn+SGplS0JA/nMm+CggY38Ys7sK1NkGeRL2W
HFgo+wTUbAfPQdpmkvQU9wyYNir2KAYErcANScLCjPGWdQt29QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPL5N/pX1J5RMBFy3kDcAlrVGwCZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iYWU3
ZWQyYi1kNDJhLTQyZmEtOTQ3ZC1mNzE5ZWRkYzk4NGEvN2ZmNzFkOTYtYTEyNS0z
N2M0LWI3YzMtY2Y1YjNiNzA5MmQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYmFlN2VkMmItZDQyYS00MmZhLTk0
N2QtZjcxOWVkZGM5ODRhL2JhZTdlZDJiLWQ0MmEtNDJmYS05NDdkLWY3MTllZGRj
OTg0YS5jcmwwHwYDVR0jBBgwFoAUiESzVgFRlSSpcJUrlYdnm2Td2zowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9iYWU3ZWQyYi1kNDJhLTQyZmEtOTQ3ZC1mNzE5
ZWRkYzk4NGEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICyAAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAUlZsMFKMyi4J5+5v3ZedMeO4HvNA1Zm2jjzsgw0XQeC/WOaLIu
E7hXx80CKaCOfpyDnW6at5/YoHYNwEWMrLvO4+A4HoOy7mLF4ZQmC/RoW4zzDV5J
sk66y2XSH1eAUtbrbGcVt5p7EDbZ05XINWiLWsAZbAycXF+l/JK0ABcbWuQOYB8f
Ri2+ciEUpG8p1MUsN0nLCQKUXPv0XbL+jf7mTQP+7emZ99yfWO0dFb8cyp0CQb6o
zFfFcVUKpiaEx/PBOb9RuPAqCS7IiBIr5MUDZ/KS1R4o+Y2RZa552f90T2p5ETnL
0zlTU7AU30I90SU72FqRd5js7hky8n9GIzQ=
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:41:19 2025 by rpki-client