Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1cb4b190-f857-32c1-aeb0-032993756101.roa
File: 1cb4b190-f857-32c1-aeb0-032993756101.roa (raw, json)
Hash identifier: vKxwzjhS8DWNKDljDQdkrC7IW4CLDUI47Qg75aNstVg=
Subject key identifier: 38:71:F8:91:8C:56:EC:ED:86:19:A7:2A:9B:E1:6C:E2:90:B8:61:79
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848A400E1E8D229D9D282DE6440
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1cb4b190-f857-32c1-aeb0-032993756101.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 30383
IP address blocks: 2001:470:36a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:e1:e8:d2:29:d9:d2:82:de:64:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=3ff216e0-3a30-48e3-901f-a1b74cdd35bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cf:c1:17:3d:5a:a6:07:7c:93:2f:7d:be:9c:
db:dd:e2:d2:8b:7b:df:f2:3e:f9:79:09:79:6e:c3:
a8:7d:b8:86:f7:ad:60:ca:6f:b4:b1:b4:ed:54:ba:
28:14:5c:a6:1d:36:14:8c:19:1d:2f:95:3e:2b:4e:
c3:9c:c7:41:50:8b:ef:9c:9a:0d:e8:a4:a7:0d:06:
2b:5b:78:01:75:6b:aa:70:fe:16:47:52:e4:85:11:
5d:b1:95:e7:47:8e:8b:07:97:da:53:ea:77:be:46:
da:3b:47:ac:b6:ab:bb:8d:bb:ac:66:0b:4a:4a:b3:
2b:b1:08:64:31:ee:1e:c0:1a:f9:b3:fd:4b:76:10:
16:b0:47:28:d3:cc:bb:08:61:c3:b9:5e:64:39:03:
41:4b:0b:24:67:6d:98:a5:43:83:79:b7:79:ef:67:
1d:4a:2b:44:69:59:d4:33:ef:79:f8:bb:ec:b4:6e:
44:3f:f0:2d:b5:d0:41:d0:7e:cc:d2:fb:22:05:d0:
71:3f:27:00:e5:96:37:f1:2a:09:91:d7:b3:4e:b9:
9d:cd:a4:a7:8e:1c:8a:90:64:dd:a1:e8:fb:4c:44:
1b:ae:de:4c:3e:ed:89:03:b1:47:bb:35:cd:6d:ac:
b2:23:9b:14:e3:7c:a3:9b:a9:c6:81:09:8c:b7:41:
79:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:71:F8:91:8C:56:EC:ED:86:19:A7:2A:9B:E1:6C:E2:90:B8:61:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1cb4b190-f857-32c1-aeb0-032993756101.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:36a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:9c:41:6c:80:94:af:2b:53:6f:06:63:1b:39:8b:85:00:3b:
05:f3:9e:ef:0d:67:a9:54:55:ec:a1:a6:71:2b:dc:92:f4:28:
d8:2c:3e:a1:19:3c:a0:12:9c:11:28:46:00:d4:36:51:92:4b:
81:9e:14:bc:4b:20:c9:f5:cf:b9:f8:25:81:a3:47:03:83:ba:
f7:bf:ef:ef:4c:32:48:76:65:8c:f5:65:fd:33:6d:a7:9e:50:
e9:e0:c6:15:98:a3:0b:4b:ec:fc:41:c5:3c:20:2b:09:67:56:
f6:06:bf:c4:4e:c0:60:25:71:8f:36:7d:e2:4f:05:c8:8a:44:
cc:2c:bf:fc:6b:5a:81:60:df:00:e2:51:23:9f:fc:2a:17:0b:
bc:ee:be:ed:b7:56:f6:7b:21:d6:97:fd:73:d5:3b:99:5a:9e:
36:bd:b3:48:89:ab:1b:55:fb:18:70:15:ab:59:18:f0:9f:85:
be:3c:f8:17:c4:8e:28:ca:bf:52:51:78:3a:73:ce:2b:00:90:
f2:59:4d:43:c1:6e:f0:18:6b:3d:bb:85:c4:b0:42:f3:e8:16:
71:d7:37:8f:bb:5d:d2:04:65:46:0b:81:16:5c:30:dc:3b:2a:
f9:ae:06:30:7a:27:88:3c:26:5b:18:28:fb:ee:4f:5e:c0:f7:
24:f5:ba:5a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEikAOHo0inZ0oLeZEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk
M2ZmMjE2ZTAtM2EzMC00OGUzLTkwMWYtYTFiNzRjZGQzNWJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsM/BFz1apgd8ky99vpzb3eLSi3vf8j75eQl5
bsOofbiG961gym+0sbTtVLooFFymHTYUjBkdL5U+K07DnMdBUIvvnJoN6KSnDQYr
W3gBdWuqcP4WR1LkhRFdsZXnR46LB5faU+p3vkbaO0estqu7jbusZgtKSrMrsQhk
Me4ewBr5s/1LdhAWsEco08y7CGHDuV5kOQNBSwskZ22YpUODebd572cdSitEaVnU
M+95+LvstG5EP/AttdBB0H7M0vsiBdBxPycA5ZY38SoJkdezTrmdzaSnjhyKkGTd
oej7TEQbrt5MPu2JA7FHuzXNbayyI5sU43yjm6nGgQmMt0F5HwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDhx+JGMVuzthhmnKpvhbOKQuGF5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMWNiNGIxOTAtZjg1Ny0z
MmMxLWFlYjAtMDMyOTkzNzU2MTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcANq
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAB6cQWyAlK8rU28GYxs5i4UAOwXznu8NZ6lUVeyhpnEr3JL0KNgs
PqEZPKASnBEoRgDUNlGSS4GeFLxLIMn1z7n4JYGjRwODuve/7+9MMkh2ZYz1Zf0z
baeeUOngxhWYowtL7PxBxTwgKwlnVvYGv8ROwGAlcY82feJPBciKRMwsv/xrWoFg
3wDiUSOf/CoXC7zuvu23VvZ7IdaX/XPVO5lanja9s0iJqxtV+xhwFatZGPCfhb48
+BfEjijKv1JReDpzzisAkPJZTUPBbvAYaz27hcSwQvPoFnHXN4+7XdIEZUYLgRZc
MNw7KvmuBjB6J4g8JlsYKPvuT17A9yT1ulo=
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:54:55 2025 by rpki-client