Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c8e0fed2-13a2-3ce5-9e99-399d97517022.roa
File: c8e0fed2-13a2-3ce5-9e99-399d97517022.roa (raw, json)
Hash identifier: kUAsn/yiG4mClLFc6DIOU643Al+4n1STBjTLu6VqZ/Q=
Subject key identifier: 0B:B4:E8:23:35:9E:A6:B3:6F:8C:28:C9:35:33:D1:77:37:70:8A:A7
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858492184384B4650ADBFA3E66B60
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c8e0fed2-13a2-3ce5-9e99-399d97517022.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 22394
IP address blocks: 2001:4888:803a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:84:38:4b:46:50:ad:bf:a3:e6:6b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=06c54670-f02a-4fe1-ae78-9c7b0efeecc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6e:cd:96:95:21:d2:69:c3:7d:9c:e8:13:7e:
e5:a0:cf:22:e6:88:a4:06:eb:b5:aa:3d:a7:ef:11:
f8:a7:f9:61:65:c8:4b:33:b2:1a:a3:ea:bd:0e:aa:
e8:51:d7:64:23:6f:b0:e0:28:2a:34:8c:98:05:9b:
11:83:b0:bf:44:f0:a6:97:86:20:36:80:a2:8f:af:
c1:9b:15:ae:48:6c:87:2f:79:f9:7e:84:29:36:59:
36:41:60:8f:a8:e2:06:c4:ea:48:4f:86:d7:03:90:
37:0e:00:f6:02:22:15:0e:12:e0:8e:b4:67:69:35:
79:d0:83:3b:e9:a4:7b:76:43:92:91:4f:c8:33:59:
75:61:8a:b5:59:62:ce:92:28:2f:1d:02:02:ce:e0:
3f:25:a6:9f:87:96:84:e0:4c:27:1c:38:10:08:2a:
8b:2f:6c:49:91:8e:bf:d0:75:9c:a9:76:d1:4e:c1:
7f:49:fc:76:32:72:1e:fa:5e:50:e2:fc:5b:47:cd:
a6:eb:96:58:90:82:97:49:9f:88:06:6a:70:ca:4d:
c6:44:84:55:60:99:d6:06:3b:ab:c6:3c:f4:86:35:
4c:39:20:f2:fa:b7:d9:70:1d:b5:13:76:12:b2:2a:
b8:24:d5:ab:4e:1b:b2:b2:94:af:d5:88:c3:8b:b1:
46:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B4:E8:23:35:9E:A6:B3:6F:8C:28:C9:35:33:D1:77:37:70:8A:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c8e0fed2-13a2-3ce5-9e99-399d97517022.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4888:803a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:0a:e2:e1:ca:f5:97:58:b8:c5:6b:d6:fa:c2:95:17:2a:52:
21:04:c6:48:42:fb:cf:fb:1b:c9:fa:8a:e6:08:73:7f:8a:36:
49:ab:0f:f5:58:f6:df:67:70:5d:bf:1d:d4:f0:ee:6a:d9:6e:
fd:20:a6:eb:b0:ae:8f:d6:e6:9f:40:a2:a6:ad:ab:9e:aa:98:
b7:b5:33:b6:47:cd:55:ee:f6:c3:b7:66:97:db:b5:3c:a4:42:
fa:68:7c:1b:21:f4:82:b0:b7:cd:fa:3e:dd:12:05:b3:9c:1f:
0b:76:c9:e6:84:9c:82:d2:6e:eb:7e:f7:07:a8:bb:9c:0d:46:
95:45:e2:c2:b9:79:15:9f:ad:38:4e:3d:01:2b:01:09:87:58:
4f:c3:0d:54:c1:40:81:ed:37:c2:bd:77:c5:3b:69:15:f7:ff:
17:7d:7b:fc:6d:6d:6b:bf:b8:da:58:87:ca:02:2a:38:6c:69:
68:c6:80:62:0e:09:ad:61:c7:05:bb:85:56:95:c7:af:21:90:
99:f8:1d:da:cf:09:51:5e:34:79:38:2f:de:51:19:92:69:f6:
28:0b:f4:c2:4c:d5:46:ce:61:b9:02:25:57:b5:2b:5c:85:af:
35:da:65:ee:2f:af:83:a6:c3:19:22:7f:db:db:f0:02:a6:65:
56:72:bb:95
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkhhDhLRlCtv6Pma2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk
MDZjNTQ2NzAtZjAyYS00ZmUxLWFlNzgtOWM3YjBlZmVlY2MyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjG7NlpUh0mnDfZzoE37loM8i5oikBuu1qj2n
7xH4p/lhZchLM7Iao+q9DqroUddkI2+w4CgqNIyYBZsRg7C/RPCml4YgNoCij6/B
mxWuSGyHL3n5foQpNlk2QWCPqOIGxOpIT4bXA5A3DgD2AiIVDhLgjrRnaTV50IM7
6aR7dkOSkU/IM1l1YYq1WWLOkigvHQICzuA/Jaafh5aE4EwnHDgQCCqLL2xJkY6/
0HWcqXbRTsF/Sfx2MnIe+l5Q4vxbR82m65ZYkIKXSZ+IBmpwyk3GRIRVYJnWBjur
xjz0hjVMOSDy+rfZcB21E3YSsiq4JNWrThuyspSv1YjDi7FG0wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAu06CM1nqazb4woyTUz0Xc3cIqnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzhlMGZlZDItMTNhMi0z
Y2U1LTllOTktMzk5ZDk3NTE3MDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIiIA6
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFUK4uHK9ZdYuMVr1vrClRcqUiEExkhC+8/7G8n6iuYIc3+KNkmr
D/VY9t9ncF2/HdTw7mrZbv0gpuuwro/W5p9Aoqatq56qmLe1M7ZHzVXu9sO3Zpfb
tTykQvpofBsh9IKwt836Pt0SBbOcHwt2yeaEnILSbut+9weou5wNRpVF4sK5eRWf
rThOPQErAQmHWE/DDVTBQIHtN8K9d8U7aRX3/xd9e/xtbWu/uNpYh8oCKjhsaWjG
gGIOCa1hxwW7hVaVx68hkJn4HdrPCVFeNHk4L95RGZJp9igL9MJM1UbOYbkCJVe1
K1yFrzXaZe4vr4Omwxkif9vb8AKmZVZyu5U=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:24:17 2025 by rpki-client