Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ff7ab943-1573-3b8d-a916-21dc38391975.roa
File: ff7ab943-1573-3b8d-a916-21dc38391975.roa (raw, json)
Hash identifier: +nOmB3gClJd49UzFvUHiJnWM4amisMH5nJdhRnKShzo=
Subject key identifier: 87:70:CD:6B:71:2E:6A:E4:E4:E2:04:EE:76:12:37:18:CC:76:51:70
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB59CD031EEF6DAA3CE2C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ff7ab943-1573-3b8d-a916-21dc38391975.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:1008:a120::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:59:cd:03:1e:ef:6d:aa:3c:e2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=1e2bafb7-deed-4049-9eef-9557ed47b566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cc:4f:5a:0a:99:63:18:14:83:2b:57:f6:29:
75:20:ed:03:04:7e:b2:fe:ce:90:b7:8c:d1:e8:75:
cf:ef:df:81:17:4f:ca:c8:4b:22:d2:22:82:12:54:
09:65:ce:e4:7f:80:1c:19:63:b1:70:82:ef:25:fe:
b8:ee:ce:7a:02:7d:13:6b:bd:c9:75:13:77:af:13:
4f:a6:a2:46:67:d4:13:ee:ee:4f:5c:cb:ac:f8:94:
db:ed:94:df:35:14:45:59:d4:0d:71:38:80:74:bc:
d4:84:ea:c3:0c:7e:ae:05:76:1a:85:65:4d:be:e5:
e6:cb:e6:1e:4f:0f:73:b4:33:9d:15:83:fb:f5:b7:
58:ca:3e:bd:71:9c:42:3d:c3:4b:04:3c:16:78:64:
16:69:61:d4:1d:3c:44:8c:a1:29:4a:04:59:b4:87:
5a:24:d6:dc:02:ed:c6:9f:f6:a7:89:88:96:40:6c:
5a:1e:69:e8:0d:da:51:5f:ce:47:d8:c8:b2:b8:68:
ee:8e:20:81:4f:e2:90:40:cd:c8:19:20:7e:33:96:
4c:c8:35:c3:49:10:94:c9:22:27:44:34:e7:cf:44:
52:ec:97:a9:49:c9:87:c9:ee:1f:a4:34:ed:8f:33:
e8:a9:93:74:15:e4:e8:8c:58:25:a1:9a:52:3f:41:
39:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:70:CD:6B:71:2E:6A:E4:E4:E2:04:EE:76:12:37:18:CC:76:51:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ff7ab943-1573-3b8d-a916-21dc38391975.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1008:a120::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:8d:a3:b3:1a:a3:4f:e8:cc:4e:bd:52:e7:78:fd:aa:78:fa:
53:0d:e6:24:65:5c:a6:43:2b:de:c6:46:b2:5e:02:13:dc:06:
d0:b6:24:12:52:75:ba:ac:22:39:0c:ec:9a:63:07:3f:6f:21:
70:8d:4c:8d:9a:69:a3:47:b9:98:02:d3:23:33:cd:91:0a:53:
56:38:b4:e3:f5:c1:14:46:ce:92:aa:44:f2:21:0a:6c:f2:9c:
c4:9e:93:e8:bf:dd:17:0a:54:2e:09:5e:55:13:58:39:92:1f:
f5:f9:dd:69:cc:f1:65:7f:02:71:33:2c:e8:88:0a:ce:b7:6a:
80:d6:21:f3:67:5b:1c:36:2b:59:f9:d6:14:82:7a:b9:13:77:
a7:ac:c0:51:0a:c2:93:f4:c5:42:0e:53:38:22:83:57:93:40:
0e:08:3d:1a:4c:76:57:f8:15:08:29:a3:6b:13:c6:20:6b:8c:
c4:c0:96:c3:45:ed:aa:be:04:b9:b8:bc:18:b0:06:84:99:ab:
98:59:37:81:60:21:43:16:e3:e9:6e:87:00:93:06:8f:f9:27:
99:6c:37:03:7a:d9:d6:75:de:6e:ed:ae:32:7a:a8:44:f2:1d:
b7:75:e9:82:6e:03:6b:53:97:4b:1a:c0:5c:28:dd:28:6e:6d:
90:1a:18:c9
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEh861nNAx7vbao84sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDEwOTE0MDA1MloXDTI1MDQwOTEzMDA1MlowLzEtMCsGA1UEAxMk
MWUyYmFmYjctZGVlZC00MDQ5LTllZWYtOTU1N2VkNDdiNTY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMxPWgqZYxgUgytX9il1IO0DBH6y/s6Qt4zR
6HXP79+BF0/KyEsi0iKCElQJZc7kf4AcGWOxcILvJf647s56An0Ta73JdRN3rxNP
pqJGZ9QT7u5PXMus+JTb7ZTfNRRFWdQNcTiAdLzUhOrDDH6uBXYahWVNvuXmy+Ye
Tw9ztDOdFYP79bdYyj69cZxCPcNLBDwWeGQWaWHUHTxEjKEpSgRZtIdaJNbcAu3G
n/aniYiWQGxaHmnoDdpRX85H2MiyuGjujiCBT+KQQM3IGSB+M5ZMyDXDSRCUySIn
RDTnz0RS7JepScmHye4fpDTtjzPoqZN0FeTojFgloZpSP0E5rwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIdwzWtxLmrk5OIE7nYSNxjMdlFwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZmY3YWI5NDMtMTU3My0z
YjhkLWE5MTYtMjFkYzM4MzkxOTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQCKEg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHWNo7Mao0/ozE69Uud4/ap4+lMN5iRlXKZDK97GRrJeAhPcBtC2
JBJSdbqsIjkM7JpjBz9vIXCNTI2aaaNHuZgC0yMzzZEKU1Y4tOP1wRRGzpKqRPIh
CmzynMSek+i/3RcKVC4JXlUTWDmSH/X53WnM8WV/AnEzLOiICs63aoDWIfNnWxw2
K1n51hSCerkTd6eswFEKwpP0xUIOUzgig1eTQA4IPRpMdlf4FQgpo2sTxiBrjMTA
lsNF7aq+BLm4vBiwBoSZq5hZN4FgIUMW4+luhwCTBo/5J5lsNwN62dZ13m7trjJ6
qETyHbd16YJuA2tTl0sawFwo3ShubZAaGMk=
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:59:20 2025 by rpki-client