Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/eaabc137-0dda-3c05-b559-bd4b4dd04b72.roa
File: eaabc137-0dda-3c05-b559-bd4b4dd04b72.roa (raw, json)
Hash identifier: winYSbjOsZH4ItsJv9hNcWWEG2v35z2wt0/faGyExDU=
Subject key identifier: 66:53:0C:E7:B7:9A:7D:0F:70:D4:54:1B:66:D8:9C:B8:23:59:E2:EF
Certificate issuer: /CN=14618cc8-9232-4da8-8bf5-dcc0386e13c4
Certificate serial: 010D0C9F432858490B4C241B06EABCC9AE04DB00
Authority key identifier: 96:22:F5:84:82:2C:B9:22:17:C9:F8:1C:1D:50:E1:A4:08:8F:63:23
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/eaabc137-0dda-3c05-b559-bd4b4dd04b72.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 399646
IP address blocks: 2602:f9f3::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:24:1b:06:ea:bc:c9:ae:04:db:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14618cc8-9232-4da8-8bf5-dcc0386e13c4
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=34e09744-787f-4d98-80a8-c959e98ad323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4e:8c:8c:4b:8a:b1:a1:93:69:c4:62:49:72:
44:e5:9d:8b:62:71:25:2d:ba:61:73:f1:a0:d3:24:
0c:b3:c0:e7:ec:0d:65:60:26:ff:45:c7:4f:cb:0f:
3b:d7:c9:e5:28:b3:a9:63:40:fd:a9:74:f2:59:d3:
f0:4c:57:56:3b:89:27:c8:69:59:cb:4e:01:72:8b:
e3:d8:38:b0:a3:c9:0f:ed:e6:8e:e9:4c:d4:53:af:
52:1f:18:dc:08:f0:e2:cb:e3:6a:59:2b:be:c3:50:
1a:a2:07:52:5d:0f:5f:ae:32:79:e9:5b:31:78:b5:
02:f9:41:30:a4:4e:fe:57:ae:3d:ac:38:87:86:30:
a1:80:ea:ec:8e:a8:24:4f:8f:a0:9d:9b:cd:a7:90:
6c:62:d4:86:6d:92:71:4a:b7:61:4b:41:92:8d:f5:
a1:55:3d:8e:d3:1c:96:67:b4:5c:33:c9:b5:21:d6:
e4:9f:a9:8c:90:fe:c7:d5:13:dc:7b:94:3b:1a:dd:
66:e4:63:71:fa:67:5e:14:14:7b:46:c2:41:f7:37:
87:e0:55:04:0a:ad:3f:30:a7:64:32:81:4f:b5:7a:
37:31:4b:12:cb:71:da:bb:1b:c0:fc:89:b7:6b:f3:
bb:32:02:2c:df:90:ce:bb:b3:cf:bf:c3:89:05:d0:
ce:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:53:0C:E7:B7:9A:7D:0F:70:D4:54:1B:66:D8:9C:B8:23:59:E2:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/eaabc137-0dda-3c05-b559-bd4b4dd04b72.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/14618cc8-9232-4da8-8bf5-dcc0386e13c4.crl
X509v3 Authority Key Identifier:
keyid:96:22:F5:84:82:2C:B9:22:17:C9:F8:1C:1D:50:E1:A4:08:8F:63:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f9f3::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:2f:a4:d4:40:bd:71:d3:90:6d:41:99:ea:d3:35:3b:2c:3e:
e7:c6:f7:d4:70:2e:69:72:ac:24:3d:fc:ca:fe:69:43:53:12:
ba:d1:f4:6b:5e:1e:3f:5e:d6:8c:f5:0c:ed:ee:0b:bf:d7:50:
f6:5e:28:1f:fa:ca:c8:a2:b5:fa:57:5b:f8:26:87:49:d8:38:
5a:9f:b0:11:75:9f:01:b3:70:97:49:dd:b7:0a:89:08:d3:a5:
01:ae:5b:0b:0d:13:95:93:90:a2:88:17:3a:4f:f4:08:d8:95:
a5:b6:10:d5:62:c3:22:31:60:48:18:91:d9:23:cc:5b:d6:de:
6b:bb:27:a3:12:06:e8:a9:19:24:74:eb:f2:c4:c7:67:db:78:
bd:bb:11:7d:c5:c3:d2:9c:5a:85:5d:a4:15:46:c6:69:d2:9b:
bf:64:a7:c7:34:35:8e:ed:ce:e8:92:84:8d:d6:65:2d:21:dd:
d8:30:7b:87:ce:60:93:cd:9f:f1:c8:8d:e9:e1:2e:a5:8b:d1:
26:47:28:67:75:ea:22:aa:8a:ea:0a:f2:17:0f:43:57:e3:90:
c4:ac:e0:b8:ff:8a:27:8c:26:0c:4e:7a:e9:18:70:7e:f3:e2:
d9:51:07:02:9c:cb:69:95:04:63:93:a9:6b:2d:55:dd:78:ca:
9a:63:35:56
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkLTCQbBuq8ya4E2wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTQ2MThjYzgtOTIzMi00ZGE4LThiZjUtZGNjMDM4NmUx
M2M0MB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk
MzRlMDk3NDQtNzg3Zi00ZDk4LTgwYTgtYzk1OWU5OGFkMzIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkU6MjEuKsaGTacRiSXJE5Z2LYnElLbphc/Gg
0yQMs8Dn7A1lYCb/RcdPyw8718nlKLOpY0D9qXTyWdPwTFdWO4knyGlZy04Bcovj
2Diwo8kP7eaO6UzUU69SHxjcCPDiy+NqWSu+w1AaogdSXQ9frjJ56VsxeLUC+UEw
pE7+V649rDiHhjChgOrsjqgkT4+gnZvNp5BsYtSGbZJxSrdhS0GSjfWhVT2O0xyW
Z7RcM8m1Idbkn6mMkP7H1RPce5Q7Gt1m5GNx+mdeFBR7RsJB9zeH4FUECq0/MKdk
MoFPtXo3MUsSy3HauxvA/Im3a/O7MgIs35DOu7PPv8OJBdDOZwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFGZTDOe3mn0PcNRUG2bYnLgjWeLvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xNDYx
OGNjOC05MjMyLTRkYTgtOGJmNS1kY2MwMzg2ZTEzYzQvZWFhYmMxMzctMGRkYS0z
YzA1LWI1NTktYmQ0YjRkZDA0YjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTQ2MThjYzgtOTIzMi00ZGE4LThi
ZjUtZGNjMDM4NmUxM2M0LzE0NjE4Y2M4LTkyMzItNGRhOC04YmY1LWRjYzAzODZl
MTNjNC5jcmwwHwYDVR0jBBgwFoAUliL1hIIsuSIXyfgcHVDhpAiPYyMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8xNDYxOGNjOC05MjMyLTRkYTgtOGJmNS1kY2Mw
Mzg2ZTEzYzQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL58wAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEATS+k1EC9cdOQbUGZ6tM1Oyw+58b31HAuaXKsJD38yv5pQ1MSutH0
a14eP17WjPUM7e4Lv9dQ9l4oH/rKyKK1+ldb+CaHSdg4Wp+wEXWfAbNwl0ndtwqJ
CNOlAa5bCw0TlZOQoogXOk/0CNiVpbYQ1WLDIjFgSBiR2SPMW9bea7snoxIG6KkZ
JHTr8sTHZ9t4vbsRfcXD0pxahV2kFUbGadKbv2SnxzQ1ju3O6JKEjdZlLSHd2DB7
h85gk82f8ciN6eEupYvRJkcoZ3XqIqqK6gryFw9DV+OQxKzguP+KJ4wmDE566Rhw
fvPi2VEHApzLaZUEY5Opay1V3XjKmmM1Vg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:42:12 2025 by rpki-client