Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/30c1ac28-6af9-3dba-a520-0054f637bb34.roa
File: 30c1ac28-6af9-3dba-a520-0054f637bb34.roa (raw, json)
Hash identifier: lq6E2IcsK49/nfRWibszvoflG3ziWovdk/Pk1He5ZiE=
Subject key identifier: 17:4B:FD:DF:61:F3:7A:2F:4E:CC:66:F4:7D:38:98:E2:4A:00:4B:FC
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926BBA774FF27DB1FC82A00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/30c1ac28-6af9-3dba-a520-0054f637bb34.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 397787
IP address blocks: 2001:470:dd::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:bb:a7:74:ff:27:db:1f:c8:2a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=990d8ce3-8921-468b-b79e-9eb08da8f79a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:73:77:43:92:3f:18:92:cb:3e:b6:e6:20:e7:
f2:2a:a8:13:98:1f:57:d4:be:d4:b5:6e:3c:bf:93:
3a:6a:66:cf:d9:ce:69:5c:b7:39:fe:7a:39:4b:c4:
19:db:de:98:d4:a4:0d:9b:89:f7:bb:20:38:1d:a9:
f8:68:8d:9f:e7:ff:ea:a0:a9:e2:0e:7c:cc:d2:bc:
35:5a:a0:a3:55:7a:a9:3d:1c:bc:44:00:c2:13:c6:
35:cc:07:e7:43:d3:09:bf:97:b6:f4:17:92:03:38:
11:fb:0d:b7:1a:3a:35:cb:43:48:f2:08:64:d1:35:
81:03:20:95:7f:79:07:f8:d8:14:ae:e6:a3:5b:e5:
79:5c:ec:34:ad:ef:9a:49:35:03:cc:38:60:c0:19:
cf:4e:34:b0:63:35:ea:15:f2:ad:9a:2f:d4:13:03:
ee:d0:ab:47:ff:e9:c6:2b:28:c6:e0:97:30:ad:cb:
72:35:2c:d1:6e:45:98:c2:ef:50:04:4c:92:9a:8b:
8a:da:a6:18:f9:04:c4:74:71:16:17:16:d2:82:5a:
f3:2a:71:0a:ec:29:3b:d5:cb:5f:a9:94:02:51:14:
21:37:b0:d2:e8:d3:3a:64:12:87:bd:1c:ff:e4:69:
c8:13:4c:12:68:18:ba:66:5d:68:f7:62:a4:03:94:
a0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:4B:FD:DF:61:F3:7A:2F:4E:CC:66:F4:7D:38:98:E2:4A:00:4B:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/30c1ac28-6af9-3dba-a520-0054f637bb34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:dd::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:3e:3f:ad:b9:94:74:92:dd:ad:ce:d5:cd:3e:98:06:09:1c:
a8:5a:81:ee:08:06:80:78:e9:a1:aa:32:10:60:9e:3f:cc:2e:
67:0d:3f:25:6b:5b:94:f7:a6:96:23:1b:fb:45:21:1e:87:d6:
92:78:40:ab:dc:95:12:14:e5:2f:6f:e8:09:c1:ac:db:7f:2b:
35:da:10:67:7e:8b:32:67:ca:0b:23:b1:59:93:24:c8:e6:ae:
cb:7b:9c:c9:10:ac:71:98:23:04:6a:11:ea:2a:6d:7a:33:b7:
06:e3:2e:23:a3:75:f5:08:fa:ca:02:5f:60:86:29:0b:9e:c5:
2a:cc:72:56:2e:80:6f:bf:e7:87:a0:b6:95:07:64:6a:de:8e:
1f:80:12:ce:b6:5a:4e:68:e5:e5:ea:c8:f1:88:48:2d:a6:50:
a7:d7:0e:78:e3:01:fb:03:0a:4d:54:90:e6:07:a9:6a:35:28:
82:ba:62:a9:2d:ba:9d:67:37:f4:16:f2:59:2d:4c:13:09:1a:
13:ab:18:35:d2:c3:4e:18:dc:ad:14:bf:0d:13:a2:ad:5f:aa:
60:5d:32:64:73:70:77:ff:88:4f:b8:ce:d0:2d:78:e8:dd:bb:
ad:ac:78:32:13:6a:f7:12:c2:f3:02:f4:b1:1d:ae:b2:49:87:
02:63:7f:d9
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JrundP8n2x/IKgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk
OTkwZDhjZTMtODkyMS00NjhiLWI3OWUtOWViMDhkYThmNzlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3N3Q5I/GJLLPrbmIOfyKqgTmB9X1L7UtW48
v5M6ambP2c5pXLc5/no5S8QZ296Y1KQNm4n3uyA4Han4aI2f5//qoKniDnzM0rw1
WqCjVXqpPRy8RADCE8Y1zAfnQ9MJv5e29BeSAzgR+w23Gjo1y0NI8ghk0TWBAyCV
f3kH+NgUruajW+V5XOw0re+aSTUDzDhgwBnPTjSwYzXqFfKtmi/UEwPu0KtH/+nG
KyjG4JcwrctyNSzRbkWYwu9QBEySmouK2qYY+QTEdHEWFxbSglrzKnEK7Ck71ctf
qZQCURQhN7DS6NM6ZBKHvRz/5GnIE0wSaBi6Zl1o92KkA5SgvwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBdL/d9h83ovTsxm9H04mOJKAEv8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMzBjMWFjMjgtNmFmOS0z
ZGJhLWE1MjAtMDA1NGY2MzdiYjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcADd
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGI+P625lHSS3a3O1c0+mAYJHKhage4IBoB46aGqMhBgnj/MLmcN
PyVrW5T3ppYjG/tFIR6H1pJ4QKvclRIU5S9v6AnBrNt/KzXaEGd+izJnygsjsVmT
JMjmrst7nMkQrHGYIwRqEeoqbXoztwbjLiOjdfUI+soCX2CGKQuexSrMclYugG+/
54egtpUHZGrejh+AEs62Wk5o5eXqyPGISC2mUKfXDnjjAfsDCk1UkOYHqWo1KIK6
Yqktup1nN/QW8lktTBMJGhOrGDXSw04Y3K0Uvw0Toq1fqmBdMmRzcHf/iE+4ztAt
eOjdu62seDITavcSwvMC9LEdrrJJhwJjf9k=
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:44:07 2025 by rpki-client