Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/afe60bc1-a510-3dfa-be6e-31001c9934b4.roa
File: afe60bc1-a510-3dfa-be6e-31001c9934b4.roa (raw, json)
Hash identifier: UCXO0S2uAQMVwVglihNuKTiUfGkHExw5ZYmzcDokONc=
Subject key identifier: 0E:46:A1:8C:6A:DC:02:D3:A1:69:EA:99:6C:A9:36:D0:88:49:B2:88
Certificate issuer: /CN=3d291b6a-1b30-4fc0-b1dd-582ab98347d6
Certificate serial: 010D0C9F43285849419E7D1754D2788719F6A480
Authority key identifier: BC:F7:6D:C8:7E:F4:7A:0B:B2:C7:B8:46:A4:17:5E:45:ED:F8:72:11
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/afe60bc1-a510-3dfa-be6e-31001c9934b4.roa
Signing time: Fri 21 Mar 2025 01:00:39 +0000
ROA not before: Fri 21 Mar 2025 01:00:39 +0000
ROA not after: Thu 19 Jun 2025 01:00:39 +0000
asID: 10952
IP address blocks: 2610:28:3020::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:41:9e:7d:17:54:d2:78:87:19:f6:a4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d291b6a-1b30-4fc0-b1dd-582ab98347d6
Validity
Not Before: Mar 21 01:00:39 2025 GMT
Not After : Jun 19 01:00:39 2025 GMT
Subject: CN=9f23c923-4cfe-469a-a597-9f70b25b2bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b2:98:c4:e3:43:19:a4:eb:57:3f:bc:8f:01:
4e:3e:51:ac:d4:fc:53:f4:82:46:21:6e:99:a9:48:
f0:c2:7b:2d:c2:e8:a2:25:23:0a:10:29:a7:9d:a7:
c4:25:be:fe:ae:4c:69:64:ff:81:10:29:6c:ab:90:
4e:97:5f:dc:d5:66:66:b9:55:b5:28:b1:47:5c:34:
44:4b:78:30:1e:e3:7b:d0:57:24:62:4d:f6:51:0f:
c2:e4:0c:63:39:25:e6:fb:02:68:e6:76:9e:2b:79:
11:f4:2d:9a:d5:c9:48:e7:66:4c:be:5b:4e:37:8a:
05:d8:af:0e:cb:50:70:20:e2:c6:4b:91:fe:7a:b4:
30:dc:4b:3b:2b:f6:c8:5f:e9:b6:46:d2:99:15:53:
42:ff:f6:65:a7:87:54:a2:c4:8b:68:9c:85:ae:70:
16:ef:92:87:e2:f6:e4:66:25:ab:6b:b0:08:8a:19:
43:53:cf:1b:95:86:0a:4f:28:49:40:66:57:24:8b:
9a:58:ca:c0:33:a1:89:ee:fb:f8:e4:66:f4:6e:22:
28:a9:94:23:03:3c:11:25:be:97:d6:24:82:6d:d6:
10:bb:73:2c:8c:23:11:f8:6b:4b:7b:d7:6a:fb:f2:
8d:0c:de:87:9c:73:37:c6:03:b8:01:c8:06:2c:91:
ae:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:46:A1:8C:6A:DC:02:D3:A1:69:EA:99:6C:A9:36:D0:88:49:B2:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/afe60bc1-a510-3dfa-be6e-31001c9934b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.crl
X509v3 Authority Key Identifier:
keyid:BC:F7:6D:C8:7E:F4:7A:0B:B2:C7:B8:46:A4:17:5E:45:ED:F8:72:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer
sbgp-ipAddrBlock: critical
IPv6:
2610:28:3020::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:6a:6b:37:03:2a:ef:db:c2:75:ec:83:27:97:6c:ac:29:9f:
35:97:e0:ec:2f:55:9f:a4:f3:78:db:c8:fd:01:31:b1:6a:33:
fa:00:34:3f:fc:2c:2c:78:47:3b:72:39:66:ef:9e:f5:a5:33:
d7:99:7e:f3:a1:da:4e:34:d1:a9:76:d2:e1:3f:d4:b3:76:e8:
d2:ce:01:e8:e1:43:af:77:e9:20:95:65:66:35:8b:de:ce:20:
75:b3:2c:78:33:de:fa:6e:ed:aa:26:b0:9c:61:a7:37:2c:63:
ce:d5:3b:36:09:17:ad:5d:64:85:44:6b:82:1c:91:c8:30:b2:
3d:6d:ab:97:c8:c1:d1:3b:04:fe:0f:46:76:08:6e:30:ef:1a:
c3:e5:1c:79:8a:09:81:ef:a1:6d:62:f3:95:79:9e:e7:4a:a3:
c3:38:c6:28:ab:8b:f2:f1:7c:f7:cf:b5:23:4f:9c:2e:f0:91:
19:e1:46:f3:ef:4f:fa:cc:35:eb:c2:08:b3:ef:12:99:83:63:
2f:5c:42:1f:55:7f:0d:27:2f:08:4a:fe:e8:3f:88:a0:41:14:
12:27:4f:14:12:91:76:e9:99:4a:44:4e:07:51:bc:cf:cf:49:
d0:40:c1:01:6b:79:51:45:82:4e:1c:47:53:da:46:ac:a4:c2:
83:11:ef:9e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElBnn0XVNJ4hxn2pIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2QyOTFiNmEtMWIzMC00ZmMwLWIxZGQtNTgyYWI5ODM0
N2Q2MB4XDTI1MDMyMTAxMDAzOVoXDTI1MDYxOTAxMDAzOVowLzEtMCsGA1UEAxMk
OWYyM2M5MjMtNGNmZS00NjlhLWE1OTctOWY3MGIyNWIyYmZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLKYxONDGaTrVz+8jwFOPlGs1PxT9IJGIW6Z
qUjwwnstwuiiJSMKECmnnafEJb7+rkxpZP+BEClsq5BOl1/c1WZmuVW1KLFHXDRE
S3gwHuN70FckYk32UQ/C5AxjOSXm+wJo5naeK3kR9C2a1clI52ZMvltON4oF2K8O
y1BwIOLGS5H+erQw3Es7K/bIX+m2RtKZFVNC//Zlp4dUosSLaJyFrnAW75KH4vbk
ZiWra7AIihlDU88blYYKTyhJQGZXJIuaWMrAM6GJ7vv45Gb0biIoqZQjAzwRJb6X
1iSCbdYQu3MsjCMR+GtLe9dq+/KNDN6HnHM3xgO4AcgGLJGupQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFA5GoYxq3ALToWnqmWypNtCISbKIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zZDI5
MWI2YS0xYjMwLTRmYzAtYjFkZC01ODJhYjk4MzQ3ZDYvYWZlNjBiYzEtYTUxMC0z
ZGZhLWJlNmUtMzEwMDFjOTkzNGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2QyOTFiNmEtMWIzMC00ZmMwLWIx
ZGQtNTgyYWI5ODM0N2Q2LzNkMjkxYjZhLTFiMzAtNGZjMC1iMWRkLTU4MmFiOTgz
NDdkNi5jcmwwHwYDVR0jBBgwFoAUvPdtyH70eguyx7hGpBdeRe34chEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zZDI5MWI2YS0xYjMwLTRmYzAtYjFkZC01ODJh
Yjk4MzQ3ZDYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJhAAKDAg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAApqazcDKu/bwnXsgyeXbKwpnzWX4OwvVZ+k83jbyP0BMbFqM/oA
ND/8LCx4RztyOWbvnvWlM9eZfvOh2k400al20uE/1LN26NLOAejhQ6936SCVZWY1
i97OIHWzLHgz3vpu7aomsJxhpzcsY87VOzYJF61dZIVEa4Ickcgwsj1tq5fIwdE7
BP4PRnYIbjDvGsPlHHmKCYHvoW1i85V5nudKo8M4xiiri/LxfPfPtSNPnC7wkRnh
RvPvT/rMNevCCLPvEpmDYy9cQh9Vfw0nLwhK/ug/iKBBFBInTxQSkXbpmUpETgdR
vM/PSdBAwQFreVFFgk4cR1PaRqykwoMR754=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:54:38 2025 by rpki-client