Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/defce0df-de38-3cba-952e-d0c411ab29b5.roa
File: defce0df-de38-3cba-952e-d0c411ab29b5.roa (raw, json)
Hash identifier: rcGjEF08hqz6ftuian3MqbGIrNKSafIn4niK81jkSxI=
Subject key identifier: 38:E1:FA:BC:5A:37:48:EC:71:58:8A:D5:11:CE:61:C4:3A:E4:91:E2
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F43285848A136161752315FEE54047F00
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/defce0df-de38-3cba-952e-d0c411ab29b5.roa
Signing time: Wed 22 Jan 2025 14:00:52 +0000
ROA not before: Wed 22 Jan 2025 14:00:52 +0000
ROA not after: Tue 22 Apr 2025 13:00:52 +0000
asID: 16417
IP address blocks: 2620:101:2010::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:36:16:17:52:31:5f:ee:54:04:7f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: Jan 22 14:00:52 2025 GMT
Not After : Apr 22 13:00:52 2025 GMT
Subject: CN=cd531827-6a5a-4804-8a89-dffd6ff2107d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:76:11:36:28:48:5a:50:74:da:11:5e:16:c1:
ec:bf:84:f9:1e:bf:af:79:34:00:fe:54:b1:03:bc:
3d:bf:a6:09:a6:9c:3a:d8:91:49:de:6f:57:b2:7c:
8f:ea:94:f6:55:a5:5d:7b:4c:c2:11:b2:23:23:91:
d6:03:d6:6c:2a:6b:be:e0:84:f6:02:13:c7:15:c5:
f7:96:21:93:26:35:8c:57:ad:41:bd:62:a8:95:09:
74:4a:69:a7:ef:14:44:0f:b0:48:73:f4:9b:d2:b5:
55:af:22:8d:0f:9e:c0:20:8c:23:db:ff:b7:20:5d:
d0:49:95:24:13:1a:6f:ca:05:a6:66:c6:8d:23:ea:
ad:74:f8:c5:9e:c5:4c:8f:7a:a7:f5:08:84:a2:90:
d8:d4:18:74:ee:64:99:89:07:f6:6b:58:17:43:43:
da:80:ba:46:fd:f2:96:c4:ca:34:3c:76:57:37:8e:
57:ef:e0:c1:c3:7c:95:79:b0:27:17:c3:d4:d1:c8:
ef:a1:2a:c7:75:b1:9b:9f:df:c8:fd:33:37:d0:28:
01:f6:db:a1:6f:65:c3:23:57:cc:1b:e9:e8:ac:1c:
87:55:21:03:73:f3:67:a9:c2:b2:60:02:fa:10:39:
5a:3f:9c:65:b4:ea:41:93:cc:98:6a:cf:41:dd:53:
31:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E1:FA:BC:5A:37:48:EC:71:58:8A:D5:11:CE:61:C4:3A:E4:91:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/defce0df-de38-3cba-952e-d0c411ab29b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:101:2010::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:68:5e:bb:24:c1:95:ac:22:f3:a3:c3:83:48:d4:62:10:52:
cc:e5:a2:99:91:0f:da:0c:ac:1d:86:b5:fd:b3:b6:1b:e7:56:
1a:b7:e3:ac:a9:c7:b2:48:bd:cf:ba:96:64:fd:25:c3:e8:51:
5a:31:b1:30:23:90:80:05:01:56:d5:92:ee:3e:5f:86:81:14:
39:fe:22:a9:46:bd:1d:9f:29:d0:7c:e7:33:4a:91:78:ce:f0:
5e:8b:4b:34:b5:d1:59:9e:c9:4f:68:05:25:39:05:d9:ce:09:
1f:09:8f:a9:48:cf:aa:e8:97:1b:52:5e:aa:83:84:d7:a6:fe:
a0:98:c8:81:f4:fa:45:61:2b:f9:20:83:b7:3b:d9:1f:cd:af:
58:af:3b:50:0f:37:38:36:ac:6a:7d:60:23:44:ed:98:33:7d:
12:99:96:26:76:3d:a1:fe:30:1c:a2:1d:92:5e:1a:22:6b:69:
73:d5:ba:e1:b5:91:a5:99:3f:94:ef:6d:77:78:f4:37:5d:a1:
5d:7e:fe:43:31:17:97:f1:88:34:28:9d:f1:08:95:aa:31:1c:
a7:8e:7e:f5:cf:82:a3:3f:d2:74:a6:b6:21:45:0a:56:eb:34:
97:f1:63:47:45:6f:14:cb:c0:0f:98:60:63:b2:b0:26:14:f3:
fe:22:2e:4c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEihNhYXUjFf7lQEfwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm
NGM5MB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk
Y2Q1MzE4MjctNmE1YS00ODA0LThhODktZGZmZDZmZjIxMDdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnYRNihIWlB02hFeFsHsv4T5Hr+veTQA/lSx
A7w9v6YJppw62JFJ3m9XsnyP6pT2VaVde0zCEbIjI5HWA9ZsKmu+4IT2AhPHFcX3
liGTJjWMV61BvWKolQl0Smmn7xRED7BIc/Sb0rVVryKND57AIIwj2/+3IF3QSZUk
ExpvygWmZsaNI+qtdPjFnsVMj3qn9QiEopDY1Bh07mSZiQf2a1gXQ0PagLpG/fKW
xMo0PHZXN45X7+DBw3yVebAnF8PU0cjvoSrHdbGbn9/I/TM30CgB9tuhb2XDI1fM
G+norByHVSEDc/NnqcKyYAL6EDlaP5xltOpBk8yYas9B3VMxhwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDjh+rxaN0jscViK1RHOYcQ65JHiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4
OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvZGVmY2UwZGYtZGUzOC0z
Y2JhLTk1MmUtZDBjNDExYWIyOWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4
NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm
ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0
ZTBiZmY0YzkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABASAQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJhoXrskwZWsIvOjw4NI1GIQUszlopmRD9oMrB2Gtf2zthvnVhq3
46ypx7JIvc+6lmT9JcPoUVoxsTAjkIAFAVbVku4+X4aBFDn+IqlGvR2fKdB85zNK
kXjO8F6LSzS10VmeyU9oBSU5BdnOCR8Jj6lIz6rolxtSXqqDhNem/qCYyIH0+kVh
K/kgg7c72R/Nr1ivO1APNzg2rGp9YCNE7ZgzfRKZliZ2PaH+MByiHZJeGiJraXPV
uuG1kaWZP5TvbXd49DddoV1+/kMxF5fxiDQonfEIlaoxHKeOfvXPgqM/0nSmtiFF
ClbrNJfxY0dFbxTLwA+YYGOysCYU8/4iLkw=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:34:08 2025 by rpki-client