Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cbb9348f-0e74-4fb3-9ea9-84626962cb22/f5410f09-d2c6-34c8-bf69-b6d91440538b.roa
File: f5410f09-d2c6-34c8-bf69-b6d91440538b.roa (raw, json)
Hash identifier: qX2no7rA5udmXnIaef4gnCQzRDZctwtKgWm9Pb8lVeE=
Subject key identifier: 00:E1:80:57:AF:50:7F:C1:26:CF:92:CE:F3:6A:2D:05:E0:54:45:71
Certificate issuer: /CN=cbb9348f-0e74-4fb3-9ea9-84626962cb22
Certificate serial: 010D0C9F43285848EF616AA511D8FE9405D9FB50
Authority key identifier: 44:2F:BF:B1:80:1F:E6:EB:A4:8F:A7:37:42:BA:68:31:1F:3B:47:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cbb9348f-0e74-4fb3-9ea9-84626962cb22.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cbb9348f-0e74-4fb3-9ea9-84626962cb22/f5410f09-d2c6-34c8-bf69-b6d91440538b.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 53763
IP address blocks: 2602:f9f7::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:6a:a5:11:d8:fe:94:05:d9:fb:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbb9348f-0e74-4fb3-9ea9-84626962cb22
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=5e97b73e-b8df-4fdb-884a-3162b2a75154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:fb:2c:cf:f2:54:32:d7:59:d7:93:b7:b2:72:
ca:43:a3:94:3f:24:c7:b6:11:33:2b:16:9c:38:e1:
88:72:63:20:98:69:10:1a:31:50:c0:94:84:dd:8c:
b7:77:f6:14:7d:0a:1f:d7:f4:8d:cf:fa:85:40:3b:
4a:2f:bb:6f:5d:ba:69:26:d6:d1:4a:49:cf:84:fd:
df:11:2e:8b:8c:61:a5:4b:59:d6:4c:24:8a:a1:2b:
6f:21:fb:bf:37:a3:54:f6:43:b0:b8:85:e9:f1:b1:
33:28:1a:56:54:cc:0e:2e:b6:6f:b1:a0:10:2e:a8:
9f:98:c2:e8:40:3f:7e:8a:69:a8:7c:2c:ba:54:cc:
42:bc:3b:cc:0e:5e:47:eb:c4:db:ea:46:4a:bc:eb:
db:bd:48:13:00:ed:74:74:06:7c:36:2c:cc:67:18:
48:db:a2:10:8a:a4:d2:cd:9b:ab:1b:57:b4:30:96:
db:d9:19:2b:dc:dd:81:a2:ca:b5:2a:04:c4:95:61:
f1:72:5a:6f:ba:79:40:08:fd:10:1c:95:00:0a:65:
09:43:ac:2a:8a:58:dd:46:dc:34:4a:18:3c:0b:98:
7b:89:da:f5:89:0b:53:80:83:13:76:d3:d3:75:7b:
f6:f1:06:2e:97:af:d4:28:aa:60:e9:a2:c5:fd:1d:
32:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E1:80:57:AF:50:7F:C1:26:CF:92:CE:F3:6A:2D:05:E0:54:45:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cbb9348f-0e74-4fb3-9ea9-84626962cb22/f5410f09-d2c6-34c8-bf69-b6d91440538b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cbb9348f-0e74-4fb3-9ea9-84626962cb22/cbb9348f-0e74-4fb3-9ea9-84626962cb22.crl
X509v3 Authority Key Identifier:
keyid:44:2F:BF:B1:80:1F:E6:EB:A4:8F:A7:37:42:BA:68:31:1F:3B:47:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cbb9348f-0e74-4fb3-9ea9-84626962cb22.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f9f7::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:d9:85:b0:80:76:6e:62:25:34:e4:1e:55:b6:af:2f:18:20:
d1:3d:f4:73:2f:38:b7:04:27:0b:52:80:bd:6d:b9:80:b1:63:
03:c8:b1:12:0e:f9:02:42:9e:c6:a9:d3:0f:bf:4c:9c:5e:4e:
02:4f:de:a9:59:9a:ed:a9:03:2e:42:2b:f4:d1:08:6b:ab:94:
cd:dd:f0:ad:ba:f6:e7:95:98:4d:8a:26:21:1a:df:a2:57:78:
74:33:ff:84:ad:10:94:7f:fc:72:33:8e:4f:f7:0c:1d:94:88:
6a:97:13:d2:db:3b:e8:5d:98:74:5d:ab:05:f1:b6:bd:db:64:
2c:b4:27:d4:5f:0a:b1:6e:63:03:12:a8:cb:91:4a:61:e1:e7:
ab:f3:e5:af:6c:f1:d0:79:28:e5:d9:11:c2:5c:dd:2d:f9:c2:
d3:42:9b:0a:e1:1e:f1:80:cc:74:71:b0:30:33:5f:4d:fb:54:
48:e6:b8:77:dc:1a:0e:35:06:39:ac:d9:92:e6:64:11:9e:a8:
81:59:f4:71:e6:bc:ea:20:76:6c:62:dc:14:fa:49:c5:95:b5:
5b:b3:9d:51:d5:55:44:76:e1:ae:06:8d:4d:20:4b:7f:60:e3:
6b:b4:95:df:fe:26:cf:ee:a2:55:dd:55:cf:b6:9c:2d:e6:57:
86:65:1e:4d
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjvYWqlEdj+lAXZ+1AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2JiOTM0OGYtMGU3NC00ZmIzLTllYTktODQ2MjY5NjJj
YjIyMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk
NWU5N2I3M2UtYjhkZi00ZmRiLTg4NGEtMzE2MmIyYTc1MTU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/ssz/JUMtdZ15O3snLKQ6OUPyTHthEzKxac
OOGIcmMgmGkQGjFQwJSE3Yy3d/YUfQof1/SNz/qFQDtKL7tvXbppJtbRSknPhP3f
ES6LjGGlS1nWTCSKoStvIfu/N6NU9kOwuIXp8bEzKBpWVMwOLrZvsaAQLqifmMLo
QD9+immofCy6VMxCvDvMDl5H68Tb6kZKvOvbvUgTAO10dAZ8NizMZxhI26IQiqTS
zZurG1e0MJbb2Rkr3N2Bosq1KgTElWHxclpvunlACP0QHJUACmUJQ6wqiljdRtw0
Shg8C5h7idr1iQtTgIMTdtPTdXv28QYul6/UKKpg6aLF/R0yeQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFADhgFevUH/BJs+SzvNqLQXgVEVxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jYmI5
MzQ4Zi0wZTc0LTRmYjMtOWVhOS04NDYyNjk2MmNiMjIvZjU0MTBmMDktZDJjNi0z
NGM4LWJmNjktYjZkOTE0NDA1MzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvY2JiOTM0OGYtMGU3NC00ZmIzLTll
YTktODQ2MjY5NjJjYjIyL2NiYjkzNDhmLTBlNzQtNGZiMy05ZWE5LTg0NjI2OTYy
Y2IyMi5jcmwwHwYDVR0jBBgwFoAURC+/sYAf5uukj6c3QrpoMR87RwIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9jYmI5MzQ4Zi0wZTc0LTRmYjMtOWVhOS04NDYy
Njk2MmNiMjIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL59wAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAKtmFsIB2bmIlNOQeVbavLxgg0T30cy84twQnC1KAvW25gLFjA8ix
Eg75AkKexqnTD79MnF5OAk/eqVma7akDLkIr9NEIa6uUzd3wrbr255WYTYomIRrf
old4dDP/hK0QlH/8cjOOT/cMHZSIapcT0ts76F2YdF2rBfG2vdtkLLQn1F8KsW5j
AxKoy5FKYeHnq/Plr2zx0Hko5dkRwlzdLfnC00KbCuEe8YDMdHGwMDNfTftUSOa4
d9waDjUGOazZkuZkEZ6ogVn0cea86iB2bGLcFPpJxZW1W7OdUdVVRHbhrgaNTSBL
f2Dja7SV3/4mz+6iVd1Vz7acLeZXhmUeTQ==
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:01:40 2025 by rpki-client