Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c8735afd-0489-4381-a272-01f568cf031c/b65b0236-6a52-3153-bfa5-a447c74c7db5.roa
File: b65b0236-6a52-3153-bfa5-a447c74c7db5.roa (raw, json)
Hash identifier: CnT4AtbR91eCq9MfAneAXxiNz1vOPTV0xpil5Ikyneg=
Subject key identifier: F0:0B:08:D7:1A:5A:16:40:86:FE:32:10:23:27:60:B7:E0:3D:92:7E
Certificate issuer: /CN=c8735afd-0489-4381-a272-01f568cf031c
Certificate serial: 010D0C9F43285849393E7B08C3868C0CF5E1F280
Authority key identifier: 1F:5C:16:0D:B0:62:36:BA:5C:93:02:BF:E0:CB:34:FD:44:D2:97:73
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c8735afd-0489-4381-a272-01f568cf031c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c8735afd-0489-4381-a272-01f568cf031c/b65b0236-6a52-3153-bfa5-a447c74c7db5.roa
Signing time: Tue 18 Mar 2025 01:00:38 +0000
ROA not before: Tue 18 Mar 2025 01:00:38 +0000
ROA not after: Mon 16 Jun 2025 01:00:38 +0000
asID: 36786
IP address blocks: 2620:0:1af0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:39:3e:7b:08:c3:86:8c:0c:f5:e1:f2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8735afd-0489-4381-a272-01f568cf031c
Validity
Not Before: Mar 18 01:00:38 2025 GMT
Not After : Jun 16 01:00:38 2025 GMT
Subject: CN=9c51939f-639a-4e2b-bb31-e6432ac2e11a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:08:83:57:9f:7f:f4:dd:7b:52:ff:74:79:5b:
23:c2:e8:0b:ff:9e:53:79:84:f4:de:52:01:0f:66:
51:20:c5:67:1b:0d:dc:1f:97:1b:83:1b:4d:77:8e:
5e:d4:76:d5:69:91:fd:9d:13:b1:a5:e0:c3:5f:9f:
24:c3:71:68:9a:ae:ab:9a:ed:b4:39:e2:56:da:b8:
8f:82:10:d2:2e:bb:fb:76:fc:07:e6:bd:3f:f0:3c:
07:49:38:03:84:ce:24:20:d3:1b:40:3e:e6:00:96:
7c:af:53:90:b9:ab:ba:7e:dd:b8:ee:92:cf:04:f8:
8d:02:d7:3c:49:02:82:a2:d9:5f:dc:33:97:43:40:
67:0f:27:06:21:da:0b:e5:1a:eb:12:af:f3:b5:bb:
43:1d:5e:a6:3e:ca:e5:2d:ea:35:97:8d:05:02:93:
37:7f:68:12:fb:ac:91:2c:41:2c:87:5d:6b:5a:43:
76:da:4a:11:52:61:f9:66:05:0b:47:77:4d:cc:f9:
2a:06:d0:50:3d:d8:26:9e:48:0a:93:41:40:62:41:
9f:28:77:3c:4c:a1:1d:56:bb:21:1d:40:36:12:3f:
42:2b:82:24:e0:44:1e:90:38:d6:07:04:9c:ba:14:
5c:90:ca:94:83:1c:fc:13:2d:14:ce:d4:22:01:b1:
aa:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:0B:08:D7:1A:5A:16:40:86:FE:32:10:23:27:60:B7:E0:3D:92:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c8735afd-0489-4381-a272-01f568cf031c/b65b0236-6a52-3153-bfa5-a447c74c7db5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c8735afd-0489-4381-a272-01f568cf031c/c8735afd-0489-4381-a272-01f568cf031c.crl
X509v3 Authority Key Identifier:
keyid:1F:5C:16:0D:B0:62:36:BA:5C:93:02:BF:E0:CB:34:FD:44:D2:97:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c8735afd-0489-4381-a272-01f568cf031c.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:0:1af0::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:c6:59:01:9c:f5:cd:f0:e9:ec:7e:3a:e0:7f:9f:28:90:23:
8f:06:df:62:84:9b:5c:fd:de:2b:9a:f8:de:1b:b5:b4:2e:c6:
9a:7d:b6:63:f3:2a:8b:f4:d6:23:40:5f:78:88:8d:0b:01:34:
8d:57:8c:d6:18:f5:cb:2d:72:59:f1:49:db:02:9a:71:25:60:
88:0a:8f:39:b5:de:48:11:45:ee:a8:88:33:20:c2:da:30:5e:
d7:88:50:03:4c:a2:23:fd:f1:1d:6d:43:f1:bb:0a:b5:c4:5c:
4b:65:8b:e1:2b:be:67:2d:ef:04:50:8c:ef:f9:e2:93:0d:b6:
8d:51:9f:ff:3e:ac:ea:d5:09:9e:ea:53:d2:d6:da:31:df:d4:
f5:d4:57:cc:38:56:4f:a4:5f:04:9d:f5:b0:21:5c:7c:1d:d8:
48:26:35:f2:c5:63:7e:2d:0a:ab:a5:bc:c8:19:42:70:27:19:
bb:16:a5:cd:b4:90:22:63:87:2a:c4:d5:4e:70:b9:0e:41:80:
ae:0c:82:e1:d7:29:52:83:bc:f5:6c:43:3a:c7:af:63:52:d7:
bd:8f:12:21:48:34:4b:83:15:18:c6:9b:fb:2a:10:79:03:c6:
5c:ff:60:f5:d5:60:a1:2e:fe:05:51:71:e5:41:ee:01:f3:11:
b5:89:85:86
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEk5PnsIw4aMDPXh8oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzg3MzVhZmQtMDQ4OS00MzgxLWEyNzItMDFmNTY4Y2Yw
MzFjMB4XDTI1MDMxODAxMDAzOFoXDTI1MDYxNjAxMDAzOFowLzEtMCsGA1UEAxMk
OWM1MTkzOWYtNjM5YS00ZTJiLWJiMzEtZTY0MzJhYzJlMTFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5giDV59/9N17Uv90eVsjwugL/55TeYT03lIB
D2ZRIMVnGw3cH5cbgxtNd45e1HbVaZH9nROxpeDDX58kw3Fomq6rmu20OeJW2riP
ghDSLrv7dvwH5r0/8DwHSTgDhM4kINMbQD7mAJZ8r1OQuau6ft247pLPBPiNAtc8
SQKCotlf3DOXQ0BnDycGIdoL5RrrEq/ztbtDHV6mPsrlLeo1l40FApM3f2gS+6yR
LEEsh11rWkN22koRUmH5ZgULR3dNzPkqBtBQPdgmnkgKk0FAYkGfKHc8TKEdVrsh
HUA2Ej9CK4Ik4EQekDjWBwScuhRckMqUgxz8Ey0UztQiAbGqbwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPALCNcaWhZAhv4yECMnYLfgPZJ+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jODcz
NWFmZC0wNDg5LTQzODEtYTI3Mi0wMWY1NjhjZjAzMWMvYjY1YjAyMzYtNmE1Mi0z
MTUzLWJmYTUtYTQ0N2M3NGM3ZGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzg3MzVhZmQtMDQ4OS00MzgxLWEy
NzItMDFmNTY4Y2YwMzFjL2M4NzM1YWZkLTA0ODktNDM4MS1hMjcyLTAxZjU2OGNm
MDMxYy5jcmwwHwYDVR0jBBgwFoAUH1wWDbBiNrpckwK/4Ms0/UTSl3MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9jODczNWFmZC0wNDg5LTQzODEtYTI3Mi0wMWY1
NjhjZjAzMWMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAABrw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAG3GWQGc9c3w6ex+OuB/nyiQI48G32KEm1z93iua+N4btbQuxpp9
tmPzKov01iNAX3iIjQsBNI1XjNYY9cstclnxSdsCmnElYIgKjzm13kgRRe6oiDMg
wtowXteIUANMoiP98R1tQ/G7CrXEXEtli+Ervmct7wRQjO/54pMNto1Rn/8+rOrV
CZ7qU9LW2jHf1PXUV8w4Vk+kXwSd9bAhXHwd2EgmNfLFY34tCqulvMgZQnAnGbsW
pc20kCJjhyrE1U5wuQ5BgK4MguHXKVKDvPVsQzrHr2NS172PEiFINEuDFRjGm/sq
EHkDxlz/YPXVYKEu/gVRceVB7gHzEbWJhYY=
-----END CERTIFICATE-----
Generated at Wed Apr 9 23:21:53 2025 by rpki-client