Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2ed08d05-ef26-3a96-b6d7-e75b312a21c8.roa
File: 2ed08d05-ef26-3a96-b6d7-e75b312a21c8.roa (raw, json)
Hash identifier: TNhn0nK8imNL02/EO3HQ79tHk59uHdIUSMouCwVW9y4=
Subject key identifier: 36:0A:71:C1:C8:ED:36:B8:7B:72:DE:AA:01:7C:A3:79:B9:3D:4D:09
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848CF46381006ED3CC7D9F84B00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2ed08d05-ef26-3a96-b6d7-e75b312a21c8.roa
Signing time: Sat 08 Feb 2025 02:00:38 +0000
ROA not before: Sat 08 Feb 2025 02:00:38 +0000
ROA not after: Fri 09 May 2025 01:00:38 +0000
asID: 6167
IP address blocks: 2600:1012:a024::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cf:46:38:10:06:ed:3c:c7:d9:f8:4b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 8 02:00:38 2025 GMT
Not After : May 9 01:00:38 2025 GMT
Subject: CN=36508a18-b6fb-4769-8d4c-a5ee8f12fb83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9b:27:bc:92:a4:f2:00:ec:be:f2:38:f1:b7:
a0:da:fc:03:d2:aa:13:50:7a:08:e9:c9:f1:24:7d:
fb:26:d1:2d:39:11:05:6f:88:3a:5a:09:4f:6f:61:
4a:1f:ac:60:d8:45:87:da:9a:96:65:dc:d2:0d:98:
66:78:da:8b:64:c7:a1:b1:ef:66:f7:06:ac:2c:8b:
c7:c4:24:8b:ce:7d:b7:af:a0:56:3a:ce:44:dc:78:
96:10:62:a5:0d:6b:a6:fe:c8:4f:7e:ae:8c:a9:53:
d2:b7:14:57:83:82:7b:02:ee:a9:0b:6b:22:b7:25:
c6:9d:5b:82:cc:b0:76:23:8d:4a:1a:ab:52:58:1f:
4a:71:6b:c5:33:df:bd:69:82:d1:41:b4:8e:37:38:
2a:11:54:37:13:60:da:c0:49:da:ca:c6:07:90:31:
23:24:36:c0:31:f0:3b:85:d8:8a:73:4f:fe:90:9c:
75:99:8b:16:47:d4:db:15:aa:04:e5:ed:5c:bf:4a:
f5:6e:76:af:34:98:f7:e2:d9:7e:1d:0e:24:92:71:
d1:be:e9:93:d0:85:cd:89:00:52:22:aa:02:ff:90:
03:12:34:39:ba:af:7e:21:88:18:92:22:68:f1:9f:
01:6f:53:83:a3:81:62:6b:d8:54:dc:4e:36:e3:6f:
02:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:0A:71:C1:C8:ED:36:B8:7B:72:DE:AA:01:7C:A3:79:B9:3D:4D:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2ed08d05-ef26-3a96-b6d7-e75b312a21c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1012:a024::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:d7:68:e2:1f:82:dd:c0:b8:fa:48:51:b4:97:8a:07:07:70:
34:91:6d:fb:b1:f4:9f:5c:25:f1:85:10:b2:2a:35:c3:b2:86:
6b:f2:72:00:09:2b:ce:36:62:9b:5f:ab:52:c3:c2:38:24:4f:
eb:96:0a:2f:db:06:47:db:b6:c5:35:7b:cc:cc:f2:6d:23:58:
1d:2d:1a:27:f4:e5:79:3d:1e:71:41:af:90:97:dc:a8:98:79:
19:6b:d3:21:db:65:5c:c0:61:b0:89:eb:5a:7f:88:64:82:09:
0b:42:86:82:bd:69:ce:3b:12:e6:02:d6:08:14:8e:f8:6e:03:
a8:42:c7:09:28:2b:ae:15:56:84:c7:b3:02:f6:ea:e9:a0:c6:
c5:8a:e0:18:bd:c2:0b:23:2a:5e:2e:6f:c1:33:43:e8:6b:35:
b1:94:7e:52:de:ff:eb:36:bf:36:92:14:03:79:53:c2:65:9f:
5e:6a:68:d0:13:83:4c:18:ba:35:94:45:dc:e4:66:ac:34:f7:
f6:30:61:f6:cb:91:ef:4d:9d:ea:c8:15:d3:78:74:6f:14:6b:
15:ce:16:ac:4f:4f:99:cd:09:61:5d:96:7d:51:19:a2:54:1a:
9a:ab:43:21:6b:0c:6f:c7:8c:f8:f8:2e:ad:ca:9b:01:81:e6:
ec:a4:fe:86
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjPRjgQBu08x9n4SwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDIwODAyMDAzOFoXDTI1MDUwOTAxMDAzOFowLzEtMCsGA1UEAxMk
MzY1MDhhMTgtYjZmYi00NzY5LThkNGMtYTVlZThmMTJmYjgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZsnvJKk8gDsvvI48beg2vwD0qoTUHoI6cnx
JH37JtEtOREFb4g6WglPb2FKH6xg2EWH2pqWZdzSDZhmeNqLZMehse9m9wasLIvH
xCSLzn23r6BWOs5E3HiWEGKlDWum/shPfq6MqVPStxRXg4J7Au6pC2sityXGnVuC
zLB2I41KGqtSWB9KcWvFM9+9aYLRQbSONzgqEVQ3E2DawEnaysYHkDEjJDbAMfA7
hdiKc0/+kJx1mYsWR9TbFaoE5e1cv0r1bnavNJj34tl+HQ4kknHRvumT0IXNiQBS
IqoC/5ADEjQ5uq9+IYgYkiJo8Z8Bb1ODo4Fia9hU3E42428CowIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDYKccHI7Ta4e3LeqgF8o3m5PU0JMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMmVkMDhkMDUtZWYyNi0z
YTk2LWI2ZDctZTc1YjMxMmEyMWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQEqAk
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAnXaOIfgt3AuPpIUbSXigcHcDSRbfux9J9cJfGFELIqNcOyhmvy
cgAJK842Yptfq1LDwjgkT+uWCi/bBkfbtsU1e8zM8m0jWB0tGif05Xk9HnFBr5CX
3KiYeRlr0yHbZVzAYbCJ61p/iGSCCQtChoK9ac47EuYC1ggUjvhuA6hCxwkoK64V
VoTHswL26umgxsWK4Bi9wgsjKl4ub8EzQ+hrNbGUflLe/+s2vzaSFAN5U8Jln15q
aNATg0wYujWURdzkZqw09/YwYfbLke9NnerIFdN4dG8UaxXOFqxPT5nNCWFdln1R
GaJUGpqrQyFrDG/HjPj4Lq3KmwGB5uyk/oY=
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:26:51 2025 by rpki-client