Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/e2dbc839-1878-3592-8929-a116e0b99a2b.roa
File: e2dbc839-1878-3592-8929-a116e0b99a2b.roa (raw, json)
Hash identifier: p9Hex2J9z7DQAHIENFsBuAH3yjAsj7XEGPFAamNArfw=
Subject key identifier: 1B:BE:96:A2:79:A4:04:C3:AF:13:7C:6D:99:DF:8F:CF:E7:95:65:7D
Certificate issuer: /CN=01586a37-c709-480e-ac0d-b07d855c615b
Certificate serial: 010D0C9F4328584882809F1D4A33AA41DEB4F580
Authority key identifier: 40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/e2dbc839-1878-3592-8929-a116e0b99a2b.roa
Signing time: Sat 11 Jan 2025 14:00:52 +0000
ROA not before: Sat 11 Jan 2025 14:00:52 +0000
ROA not after: Fri 11 Apr 2025 13:00:52 +0000
asID: 207990
IP address blocks: 2600:2904::/30 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:82:80:9f:1d:4a:33:aa:41:de:b4:f5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01586a37-c709-480e-ac0d-b07d855c615b
Validity
Not Before: Jan 11 14:00:52 2025 GMT
Not After : Apr 11 13:00:52 2025 GMT
Subject: CN=f0a53a38-7560-4532-bb40-a66d1edbcefd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:55:c9:6a:38:28:be:be:e1:6c:53:00:a0:96:
97:6b:45:20:b1:4f:b7:a0:76:6b:26:33:2b:28:e1:
fe:dd:bc:22:91:64:53:ba:d1:29:86:11:54:6c:b6:
b7:f6:bb:d4:85:3f:7d:a5:21:12:5e:ca:a3:4e:53:
ed:31:59:67:60:be:2d:75:7f:98:32:85:d7:56:95:
c4:ef:e1:d3:c9:a4:2c:6d:8f:c1:3f:d5:91:2b:58:
13:81:2f:eb:07:0d:b2:8c:16:66:c3:59:29:e5:c5:
3b:03:46:77:8e:14:80:43:f2:a7:82:85:bb:27:ab:
5d:f2:f8:c3:7d:63:8c:97:90:ef:66:da:43:8e:5a:
ae:b1:10:bd:b0:6c:4b:3c:29:1c:2c:9b:b5:28:74:
62:41:ec:33:45:c1:45:c1:6f:ad:3f:64:68:4c:eb:
ff:58:d3:0d:a6:a9:7c:17:c4:e4:4a:f2:6b:e1:f3:
bf:a3:8e:08:ce:7f:56:2b:93:f1:23:12:5d:ee:d7:
35:50:12:d7:ca:f2:fe:90:9e:63:03:6d:1c:e5:d5:
13:a4:67:7c:db:66:22:2c:c5:77:c4:7b:7a:8e:98:
87:bd:62:fa:5a:3e:c9:b0:67:41:fe:ff:b4:8f:d8:
e1:ed:c8:77:e5:92:5e:b8:1c:69:ea:d0:0a:31:30:
18:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:BE:96:A2:79:A4:04:C3:AF:13:7C:6D:99:DF:8F:CF:E7:95:65:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/e2dbc839-1878-3592-8929-a116e0b99a2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl
X509v3 Authority Key Identifier:
keyid:40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:2904::/30
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:46:de:6a:a2:bc:1e:4f:e4:c6:cb:83:a0:a8:9d:ca:14:1e:
1c:ab:2a:8b:12:73:9a:b9:6a:ea:e7:ea:6c:5a:a3:6c:8c:44:
6d:a6:08:e7:d9:51:4a:29:9d:2a:87:da:39:fe:74:4d:df:fa:
0e:86:7d:65:eb:44:94:9a:6e:14:e1:31:3e:34:98:6b:79:a1:
ee:1a:f1:85:6c:5a:49:06:89:98:50:80:2e:15:d2:ff:23:62:
bf:1b:7d:85:75:bd:20:42:78:ce:53:ff:46:c9:91:98:85:d3:
e1:55:46:6f:10:ce:06:b7:82:cd:90:50:5c:03:8a:fd:60:ba:
08:03:02:e6:c5:ff:4f:33:d1:b0:4c:46:38:33:c0:b3:54:3d:
87:4e:8a:63:91:1d:ff:22:e6:a8:05:34:d5:75:ee:af:b0:20:
2b:18:00:2c:38:bc:86:f6:42:97:d2:c9:5a:8a:0a:68:26:70:
e1:fb:6c:11:b4:99:77:db:42:f2:76:bf:40:d2:f4:94:f9:36:
22:ba:ba:e2:aa:d1:3c:16:fe:ea:e0:51:a5:18:43:0b:86:f1:
9f:18:f8:20:30:e2:c6:76:22:b6:5a:24:4c:36:0d:c9:22:9a:
02:08:94:f5:33:cd:df:41:bc:d9:59:bb:01:12:b6:a4:48:45:
74:51:da:87
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEiCgJ8dSjOqQd609YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDE1ODZhMzctYzcwOS00ODBlLWFjMGQtYjA3ZDg1NWM2
MTViMB4XDTI1MDExMTE0MDA1MloXDTI1MDQxMTEzMDA1MlowLzEtMCsGA1UEAxMk
ZjBhNTNhMzgtNzU2MC00NTMyLWJiNDAtYTY2ZDFlZGJjZWZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFXJajgovr7hbFMAoJaXa0UgsU+3oHZrJjMr
KOH+3bwikWRTutEphhFUbLa39rvUhT99pSESXsqjTlPtMVlnYL4tdX+YMoXXVpXE
7+HTyaQsbY/BP9WRK1gTgS/rBw2yjBZmw1kp5cU7A0Z3jhSAQ/KngoW7J6td8vjD
fWOMl5DvZtpDjlqusRC9sGxLPCkcLJu1KHRiQewzRcFFwW+tP2RoTOv/WNMNpql8
F8TkSvJr4fO/o44Izn9WK5PxIxJd7tc1UBLXyvL+kJ5jA20c5dUTpGd822YiLMV3
xHt6jpiHvWL6Wj7JsGdB/v+0j9jh7ch35ZJeuBxp6tAKMTAYTQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFBu+lqJ5pATDrxN8bZnfj8/nlWV9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wMTU4
NmEzNy1jNzA5LTQ4MGUtYWMwZC1iMDdkODU1YzYxNWIvZTJkYmM4MzktMTg3OC0z
NTkyLTg5MjktYTExNmUwYjk5YTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDE1ODZhMzctYzcwOS00ODBlLWFj
MGQtYjA3ZDg1NWM2MTViLzAxNTg2YTM3LWM3MDktNDgwZS1hYzBkLWIwN2Q4NTVj
NjE1Yi5jcmwwHwYDVR0jBBgwFoAUQLhpP8kUn1wre/qIuMf/YjLrm6kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wMTU4NmEzNy1jNzA5LTQ4MGUtYWMwZC1iMDdk
ODU1YzYxNWIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUCJgApBDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCERt5qorweT+TGy4OgqJ3KFB4cqyqLEnOauWrq5+psWqNsjERtpgjn
2VFKKZ0qh9o5/nRN3/oOhn1l60SUmm4U4TE+NJhreaHuGvGFbFpJBomYUIAuFdL/
I2K/G32Fdb0gQnjOU/9GyZGYhdPhVUZvEM4Gt4LNkFBcA4r9YLoIAwLmxf9PM9Gw
TEY4M8CzVD2HTopjkR3/IuaoBTTVde6vsCArGAAsOLyG9kKX0slaigpoJnDh+2wR
tJl320Lydr9A0vSU+TYiurriqtE8Fv7q4FGlGEMLhvGfGPggMOLGdiK2WiRMNg3J
IpoCCJT1M83fQbzZWbsBErakSEV0UdqH
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:42:48 2025 by rpki-client