Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5/855538ac-c152-3b18-a738-92a0aae00088.roa
File: 855538ac-c152-3b18-a738-92a0aae00088.roa (raw, json)
Hash identifier: ZGiD2TG7NWFXuUX1PsOkjPYRtBeLVhs6qc/LA35+TKE=
Subject key identifier: 0C:0B:02:BC:BC:06:60:92:19:1F:C8:FD:13:58:8C:10:63:07:BE:FE
Certificate issuer: /CN=c1c2fcb5-8224-40aa-bace-230fcdefbaa5
Certificate serial: 010D0C9F43285849350E86B54B80A900AEE489B0
Authority key identifier: B3:21:1E:7E:A2:3B:DC:EF:12:73:B8:E6:47:4E:F9:67:46:58:60:B1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5/855538ac-c152-3b18-a738-92a0aae00088.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 14618
IP address blocks: 2605:32c0:a000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:86:b5:4b:80:a9:00:ae:e4:89:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c2fcb5-8224-40aa-bace-230fcdefbaa5
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=98905c28-c3ac-419d-9465-b7c43060efdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:00:7f:58:8e:f6:1c:2b:23:a4:c1:44:29:b7:
08:f9:07:4c:c7:38:1e:dd:36:d7:85:5e:05:74:91:
d1:60:e7:a6:2d:47:44:26:c1:e2:55:64:5b:ef:55:
b7:c3:83:26:a7:cd:be:a8:56:5c:7d:4a:76:b7:b6:
ff:c6:b1:4a:1c:79:44:8e:92:91:bd:90:71:12:b2:
72:b7:22:2b:6a:01:1e:cf:b9:ed:b1:c5:ee:34:28:
67:4b:88:66:cc:a9:91:5b:28:08:c8:0b:9a:c3:54:
83:28:bf:b3:8f:32:95:eb:47:79:10:8c:d0:38:56:
cf:a9:9f:ad:9b:04:e9:67:88:bc:ef:ad:fc:a5:56:
8e:86:af:b5:a2:b2:d2:66:48:60:7c:b5:52:b3:87:
d9:2a:a2:10:04:ef:02:f9:4e:5d:73:72:cf:6a:ba:
5c:c1:d0:95:2e:ec:5b:fb:d5:18:6d:e0:ce:fd:59:
07:99:75:4c:69:60:7f:4d:3c:f2:42:4c:69:9c:74:
33:a1:3a:40:69:99:34:41:99:52:ad:12:94:62:46:
cf:5b:65:3e:2e:68:49:33:de:d1:83:45:1e:a3:9a:
a2:35:01:61:ff:0a:09:dd:1c:16:3f:19:4c:54:d3:
8f:22:ef:b0:0c:a3:02:f2:4e:41:0e:03:06:34:69:
ab:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:0B:02:BC:BC:06:60:92:19:1F:C8:FD:13:58:8C:10:63:07:BE:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5/855538ac-c152-3b18-a738-92a0aae00088.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5/c1c2fcb5-8224-40aa-bace-230fcdefbaa5.crl
X509v3 Authority Key Identifier:
keyid:B3:21:1E:7E:A2:3B:DC:EF:12:73:B8:E6:47:4E:F9:67:46:58:60:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:32c0:a000::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:51:d6:1f:f1:4f:89:7e:57:f9:1d:06:6b:84:45:e2:7c:41:
9c:ac:d3:91:77:26:52:f9:5a:a2:b1:ea:e2:05:7d:9a:22:a1:
6c:b8:af:88:67:a2:d6:1d:91:ad:22:bb:c3:ee:0f:05:50:ea:
4a:52:1e:11:cf:bc:93:2b:a4:70:60:07:51:a9:aa:80:d7:e5:
08:3f:63:63:29:19:4f:4f:21:69:62:23:c4:d1:84:22:fc:af:
ba:13:1f:dc:81:57:d4:4e:7c:7e:93:fc:c2:94:25:b8:e0:8d:
1f:f2:71:01:81:2e:f2:69:78:75:c0:bb:38:65:80:73:9d:a0:
cc:76:d5:7b:1f:a3:0a:3a:a7:46:8d:c7:36:9d:39:56:55:45:
85:05:79:fc:41:3f:d3:9e:16:4c:57:a6:8f:4d:94:dc:b8:62:
32:4e:e8:77:7c:9e:b8:82:74:55:5c:38:97:14:63:ed:c6:56:
97:68:6f:6a:2f:d4:b8:57:75:f3:e7:f4:32:76:98:89:4a:7a:
f7:9f:9b:6e:63:9a:a9:2e:f0:bb:d6:88:4f:ad:83:2a:ee:23:
e6:b0:44:2b:9c:1d:bf:b0:6f:86:30:e8:3b:7e:eb:de:57:7e:
be:67:47:b0:67:24:1f:f7:cd:be:ff:86:42:b0:f7:3a:bf:98:
5a:93:c5:68
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEk1Doa1S4CpAK7kibAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjMmZjYjUtODIyNC00MGFhLWJhY2UtMjMwZmNkZWZi
YWE1MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk
OTg5MDVjMjgtYzNhYy00MTlkLTk0NjUtYjdjNDMwNjBlZmRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugB/WI72HCsjpMFEKbcI+QdMxzge3TbXhV4F
dJHRYOemLUdEJsHiVWRb71W3w4Mmp82+qFZcfUp2t7b/xrFKHHlEjpKRvZBxErJy
tyIragEez7ntscXuNChnS4hmzKmRWygIyAuaw1SDKL+zjzKV60d5EIzQOFbPqZ+t
mwTpZ4i87638pVaOhq+1orLSZkhgfLVSs4fZKqIQBO8C+U5dc3LParpcwdCVLuxb
+9UYbeDO/VkHmXVMaWB/TTzyQkxpnHQzoTpAaZk0QZlSrRKUYkbPW2U+LmhJM97R
g0Ueo5qiNQFh/woJ3RwWPxlMVNOPIu+wDKMC8k5BDgMGNGmr7QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFAwLAry8BmCSGR/I/RNYjBBjB77+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMWMy
ZmNiNS04MjI0LTQwYWEtYmFjZS0yMzBmY2RlZmJhYTUvODU1NTM4YWMtYzE1Mi0z
YjE4LWE3MzgtOTJhMGFhZTAwMDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzFjMmZjYjUtODIyNC00MGFhLWJh
Y2UtMjMwZmNkZWZiYWE1L2MxYzJmY2I1LTgyMjQtNDBhYS1iYWNlLTIzMGZjZGVm
YmFhNS5jcmwwHwYDVR0jBBgwFoAUsyEefqI73O8Sc7jmR075Z0ZYYLEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9jMWMyZmNiNS04MjI0LTQwYWEtYmFjZS0yMzBm
Y2RlZmJhYTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgUywKAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAPFHWH/FPiX5X+R0Ga4RF4nxBnKzTkXcmUvlaorHq4gV9miKhbLiv
iGei1h2RrSK7w+4PBVDqSlIeEc+8kyukcGAHUamqgNflCD9jYykZT08haWIjxNGE
IvyvuhMf3IFX1E58fpP8wpQluOCNH/JxAYEu8ml4dcC7OGWAc52gzHbVex+jCjqn
Ro3HNp05VlVFhQV5/EE/054WTFemj02U3LhiMk7od3yeuIJ0VVw4lxRj7cZWl2hv
ai/UuFd18+f0MnaYiUp695+bbmOaqS7wu9aIT62DKu4j5rBEK5wdv7BvhjDoO37r
3ld+vmdHsGckH/fNvv+GQrD3Or+YWpPFaA==
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:45:27 2025 by rpki-client