Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d/5747fda4-9caf-35d9-87f7-5bb218756291.roa
File: 5747fda4-9caf-35d9-87f7-5bb218756291.roa (raw, json)
Hash identifier: nSbCiU7d9e7Af3HPqkL3xKMQ/e0xgHpT/d9TochsPnE=
Subject key identifier: DF:A4:1B:09:15:E2:7C:CA:B6:20:82:55:F0:6F:D0:66:D9:75:F2:BA
Certificate issuer: /CN=3b5ce35f-042e-4fa4-8e8b-c101e60ee67d
Certificate serial: 010D0C9F4328584897708BADB1E11D7DF6CA6380
Authority key identifier: 81:BE:35:78:25:EE:BE:88:D2:4D:4B:F9:FC:4E:0B:B2:6E:B3:AB:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d/5747fda4-9caf-35d9-87f7-5bb218756291.roa
Signing time: Sun 19 Jan 2025 02:00:39 +0000
ROA not before: Sun 19 Jan 2025 02:00:39 +0000
ROA not after: Sat 19 Apr 2025 01:00:39 +0000
asID: 398779
IP address blocks: 2607:1740:1000::/36 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:97:70:8b:ad:b1:e1:1d:7d:f6:ca:63:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b5ce35f-042e-4fa4-8e8b-c101e60ee67d
Validity
Not Before: Jan 19 02:00:39 2025 GMT
Not After : Apr 19 01:00:39 2025 GMT
Subject: CN=11d9f234-22b7-4d25-a4d5-4fbda228f997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:98:13:02:dc:0a:80:01:06:60:2d:1a:13:8f:
76:63:76:88:a7:1e:0b:33:2e:0e:98:22:1c:66:65:
ed:9c:f5:fa:56:ce:88:86:9f:76:e5:f8:69:fe:30:
75:27:b6:66:13:e8:2c:32:22:58:2d:d6:9a:4f:eb:
3f:e1:50:9b:7c:fe:51:1a:08:92:72:1e:23:37:20:
73:f2:31:28:ec:1b:a8:8e:4c:f4:69:2e:07:aa:a2:
25:7a:0a:84:6b:ce:20:63:f7:ca:9e:dd:cb:b9:dc:
87:f7:ca:36:01:6b:8a:d9:66:e5:b3:50:f6:e0:8c:
24:40:53:a2:00:2e:8f:a6:d8:7f:7b:53:76:49:15:
44:37:1d:61:f1:81:90:87:3a:84:1f:4f:87:20:a0:
69:13:48:e8:f0:85:35:53:a2:d3:ab:cf:8f:bd:64:
33:4c:1f:b6:d4:fc:fa:c2:4d:86:ac:f6:e8:24:cb:
fb:c4:39:27:57:5f:2f:bb:ce:8d:20:b0:1d:3d:4c:
ed:62:12:09:94:13:ba:b0:ea:8e:89:b7:ba:2c:39:
dc:95:d4:85:17:4e:d3:c0:db:a6:17:9f:56:88:69:
68:29:38:a4:d7:2b:14:16:ec:7f:e7:3a:8f:d0:99:
f4:d9:cb:38:c5:7a:f6:f7:cc:96:89:94:a2:a4:97:
eb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A4:1B:09:15:E2:7C:CA:B6:20:82:55:F0:6F:D0:66:D9:75:F2:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d/5747fda4-9caf-35d9-87f7-5bb218756291.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d.crl
X509v3 Authority Key Identifier:
keyid:81:BE:35:78:25:EE:BE:88:D2:4D:4B:F9:FC:4E:0B:B2:6E:B3:AB:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:1740:1000::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:17:e6:a9:e6:0d:37:f5:08:62:32:26:6c:eb:a0:38:17:6b:
5c:32:32:4f:bd:cf:95:ae:35:19:b8:cc:7f:d4:2b:50:a4:85:
ad:53:f8:a4:a1:c1:9e:c7:fd:e6:ba:2e:8c:55:11:eb:78:5b:
8d:cc:62:42:b3:0a:f6:40:91:aa:a5:02:be:fa:52:46:44:93:
0e:85:3e:77:53:90:3a:97:10:cd:8c:29:7e:4b:85:36:80:3f:
1c:79:76:d8:6f:0e:40:12:12:a2:a4:e4:f7:7b:0b:2a:ce:e6:
25:be:b7:b5:33:79:bb:2f:0f:7b:69:47:b4:3f:57:47:2b:3f:
08:3d:5e:cf:b1:83:b1:08:29:86:8b:dd:de:b5:cd:19:35:ca:
57:54:e4:dc:93:9b:e5:47:5d:f4:32:ad:62:b6:80:a3:00:4b:
5c:64:31:cb:a2:28:54:73:97:87:fe:ca:57:e3:1b:87:6b:9f:
de:c2:47:25:3d:ff:db:48:d5:f4:d4:77:73:bf:ce:e9:e5:37:
9f:de:aa:91:b9:78:e9:01:74:6b:f7:ac:eb:54:c3:6b:82:4a:
28:7e:af:47:69:73:51:37:91:21:8a:e3:c9:21:8a:74:4f:4a:
7a:eb:64:5f:da:42:1c:50:82:ae:55:1c:6d:f2:a7:e1:b9:9d:
c0:13:d3:44
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEiXcIutseEdffbKY4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2I1Y2UzNWYtMDQyZS00ZmE0LThlOGItYzEwMWU2MGVl
NjdkMB4XDTI1MDExOTAyMDAzOVoXDTI1MDQxOTAxMDAzOVowLzEtMCsGA1UEAxMk
MTFkOWYyMzQtMjJiNy00ZDI1LWE0ZDUtNGZiZGEyMjhmOTk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJgTAtwKgAEGYC0aE492Y3aIpx4LMy4OmCIc
ZmXtnPX6Vs6Ihp925fhp/jB1J7ZmE+gsMiJYLdaaT+s/4VCbfP5RGgiSch4jNyBz
8jEo7Buojkz0aS4HqqIlegqEa84gY/fKnt3LudyH98o2AWuK2Wbls1D24IwkQFOi
AC6Ppth/e1N2SRVENx1h8YGQhzqEH0+HIKBpE0jo8IU1U6LTq8+PvWQzTB+21Pz6
wk2GrPboJMv7xDknV18vu86NILAdPUztYhIJlBO6sOqOibe6LDncldSFF07TwNum
F59WiGloKTik1ysUFux/5zqP0Jn02cs4xXr298yWiZSipJfrLQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFN+kGwkV4nzKtiCCVfBv0GbZdfK6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zYjVj
ZTM1Zi0wNDJlLTRmYTQtOGU4Yi1jMTAxZTYwZWU2N2QvNTc0N2ZkYTQtOWNhZi0z
NWQ5LTg3ZjctNWJiMjE4NzU2MjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvM2I1Y2UzNWYtMDQyZS00ZmE0LThl
OGItYzEwMWU2MGVlNjdkLzNiNWNlMzVmLTA0MmUtNGZhNC04ZThiLWMxMDFlNjBl
ZTY3ZC5jcmwwHwYDVR0jBBgwFoAUgb41eCXuvojSTUv5/E4Lsm6zq8kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8zYjVjZTM1Zi0wNDJlLTRmYTQtOGU4Yi1jMTAx
ZTYwZWU2N2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgcXQBAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAZhfmqeYNN/UIYjImbOugOBdrXDIyT73Pla41GbjMf9QrUKSFrVP4
pKHBnsf95roujFUR63hbjcxiQrMK9kCRqqUCvvpSRkSTDoU+d1OQOpcQzYwpfkuF
NoA/HHl22G8OQBISoqTk93sLKs7mJb63tTN5uy8Pe2lHtD9XRys/CD1ez7GDsQgp
hovd3rXNGTXKV1Tk3JOb5Udd9DKtYraAowBLXGQxy6IoVHOXh/7KV+Mbh2uf3sJH
JT3/20jV9NR3c7/O6eU3n96qkbl46QF0a/es61TDa4JKKH6vR2lzUTeRIYrjySGK
dE9KeutkX9pCHFCCrlUcbfKn4bmdwBPTRA==
-----END CERTIFICATE-----
Generated at Sun Apr 6 22:40:27 2025 by rpki-client