Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f5bf872c-8220-308f-8867-aaa082ad3f44.roa
File: f5bf872c-8220-308f-8867-aaa082ad3f44.roa (raw, json)
Hash identifier: 5/pttftm288IZu8l75N6jOFplcPWqJUYdBcOrk9dh58=
Subject key identifier: DF:3C:26:1E:9D:B6:9B:97:59:1D:F3:67:AE:31:94:01:36:7A:A3:8B
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848C41B8358240CDB40929CDC00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f5bf872c-8220-308f-8867-aaa082ad3f44.roa
Signing time: Tue 04 Feb 2025 02:00:40 +0000
ROA not before: Tue 04 Feb 2025 02:00:40 +0000
ROA not after: Mon 05 May 2025 01:00:40 +0000
asID: 6167
IP address blocks: 2600:1009:a122::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c4:1b:83:58:24:0c:db:40:92:9c:dc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 4 02:00:40 2025 GMT
Not After : May 5 01:00:40 2025 GMT
Subject: CN=1f954180-2e6f-4ee8-871d-54969eb944bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:31:6f:3e:6b:61:e6:60:ec:2e:7d:c2:6e:2e:
af:3b:cd:41:18:9d:2c:d6:00:5a:12:75:91:cc:6b:
7c:d3:3b:bb:80:55:28:00:1d:cc:54:29:52:fd:20:
dc:1c:e7:42:22:91:ff:30:ef:c0:db:3b:ea:e0:73:
84:4c:4b:69:61:0b:5a:4c:d1:fa:72:ad:32:c7:b7:
e4:e9:11:5c:11:90:eb:e7:45:ea:ac:ca:73:d0:b9:
67:22:ee:a7:0f:92:00:b1:45:1d:90:e0:b5:86:ea:
cd:73:67:d6:14:a6:1b:a1:4c:27:00:df:b6:7e:8a:
ee:51:d0:bd:da:ae:27:e0:c5:10:24:3f:48:38:63:
58:e4:e2:f4:6f:f4:33:13:5b:0f:c1:95:e8:66:d8:
5f:ca:55:39:bd:27:fc:d0:3d:fc:6c:70:db:85:c2:
3a:96:a6:b4:2e:1a:5f:20:9e:1b:b8:c4:41:72:7d:
6f:1c:0a:88:00:ee:d9:68:d7:d6:2d:a4:06:0c:7f:
21:db:08:62:ea:22:82:78:0a:bc:6f:0f:7d:cd:c0:
04:e1:81:06:ce:e3:74:2d:18:70:8b:de:79:ea:45:
ac:61:4c:82:49:1f:a6:93:61:78:62:99:35:0d:05:
9c:02:5c:6a:05:a5:8f:e5:65:d8:1f:67:08:b6:a8:
af:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:3C:26:1E:9D:B6:9B:97:59:1D:F3:67:AE:31:94:01:36:7A:A3:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f5bf872c-8220-308f-8867-aaa082ad3f44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1009:a122::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:82:41:41:ed:e4:b7:be:1d:01:56:e6:12:f1:92:5a:66:f3:
d1:36:02:e8:01:67:df:1d:50:12:3a:71:64:8d:90:53:b2:fc:
e8:af:d0:c7:f1:ef:30:e9:c1:d6:40:f8:35:a9:2d:de:af:6e:
8c:3c:18:39:b4:aa:a3:7a:f7:90:aa:45:0f:e5:32:21:6f:18:
99:e5:2e:87:bb:be:29:dc:b7:ec:17:76:0e:20:76:7c:f6:77:
ba:17:b4:ac:b3:a6:43:1e:2c:1f:10:62:77:cd:86:98:3a:30:
15:75:c5:17:a3:bd:f0:0e:ba:c4:53:8c:20:f5:64:32:3d:91:
ec:19:f1:ab:6c:af:72:eb:49:ab:7a:68:bd:c1:2e:59:f7:e0:
50:a8:ae:ac:24:79:ea:48:1f:fa:a5:b5:5c:9c:ec:4e:68:78:
86:12:d0:85:46:e1:09:eb:c8:8c:3e:05:aa:00:fb:dc:d9:3f:
39:30:f5:05:f2:69:c8:b5:4e:72:8a:e5:51:15:ff:45:d0:d0:
3b:06:30:ad:08:a6:9f:07:4e:2e:9e:b7:de:24:81:1e:2b:45:
e8:48:44:d2:26:a3:8a:7a:63:88:6a:2d:5d:13:73:f9:ca:c2:
2a:10:c8:83:af:53:11:23:43:27:91:33:5d:04:49:96:1a:30:
a3:29:d5:9f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjEG4NYJAzbQJKc3AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDIwNDAyMDA0MFoXDTI1MDUwNTAxMDA0MFowLzEtMCsGA1UEAxMk
MWY5NTQxODAtMmU2Zi00ZWU4LTg3MWQtNTQ5NjllYjk0NGJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTFvPmth5mDsLn3Cbi6vO81BGJ0s1gBaEnWR
zGt80zu7gFUoAB3MVClS/SDcHOdCIpH/MO/A2zvq4HOETEtpYQtaTNH6cq0yx7fk
6RFcEZDr50XqrMpz0LlnIu6nD5IAsUUdkOC1hurNc2fWFKYboUwnAN+2foruUdC9
2q4n4MUQJD9IOGNY5OL0b/QzE1sPwZXoZthfylU5vSf80D38bHDbhcI6lqa0Lhpf
IJ4buMRBcn1vHAqIAO7ZaNfWLaQGDH8h2whi6iKCeAq8bw99zcAE4YEGzuN0LRhw
i9556kWsYUyCSR+mk2F4Ypk1DQWcAlxqBaWP5WXYH2cItqivpQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFN88Jh6dtpuXWR3zZ64xlAE2eqOLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZjViZjg3MmMtODIyMC0z
MDhmLTg4NjctYWFhMDgyYWQzZjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQCaEi
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIKCQUHt5Le+HQFW5hLxklpm89E2AugBZ98dUBI6cWSNkFOy/Oiv
0Mfx7zDpwdZA+DWpLd6vbow8GDm0qqN695CqRQ/lMiFvGJnlLoe7vinct+wXdg4g
dnz2d7oXtKyzpkMeLB8QYnfNhpg6MBV1xRejvfAOusRTjCD1ZDI9kewZ8atsr3Lr
Sat6aL3BLln34FCorqwkeepIH/qltVyc7E5oeIYS0IVG4QnryIw+BaoA+9zZPzkw
9QXyaci1TnKK5VEV/0XQ0DsGMK0Ipp8HTi6et94kgR4rRehIRNImo4p6Y4hqLV0T
c/nKwioQyIOvUxEjQyeRM10ESZYaMKMp1Z8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:20:10 2025 by rpki-client