Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6e2c8e3-cce6-4734-bf05-d45daaa2af3e/ad5e7590-c068-35c0-9e3f-642180b60356.roa
File: ad5e7590-c068-35c0-9e3f-642180b60356.roa (raw, json)
Hash identifier: KD09svN75kalX9C1CPXIKjsdx50ElycLXJggi/Zfk58=
Subject key identifier: 05:7A:7E:64:3F:AF:77:E4:6D:03:F8:80:97:1F:33:93:F5:5F:02:AC
Certificate issuer: /CN=e6e2c8e3-cce6-4734-bf05-d45daaa2af3e
Certificate serial: 010D0C9F4328584940394537DEBEEC9191C21980
Authority key identifier: BA:4F:D9:5B:71:8D:D4:4B:C8:0C:E0:4A:B2:B2:53:3A:15:9A:6A:4A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6e2c8e3-cce6-4734-bf05-d45daaa2af3e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6e2c8e3-cce6-4734-bf05-d45daaa2af3e/ad5e7590-c068-35c0-9e3f-642180b60356.roa
Signing time: Thu 20 Mar 2025 13:00:53 +0000
ROA not before: Thu 20 Mar 2025 13:00:53 +0000
ROA not after: Wed 18 Jun 2025 13:00:53 +0000
asID: 33412
IP address blocks: 216.170.117.0/24 maxlen: 24
2602:fd86::/36 maxlen: 36
2602:fd86::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:40:39:45:37:de:be:ec:91:91:c2:19:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6e2c8e3-cce6-4734-bf05-d45daaa2af3e
Validity
Not Before: Mar 20 13:00:53 2025 GMT
Not After : Jun 18 13:00:53 2025 GMT
Subject: CN=7a39baa3-f0a3-4a5c-89bb-c0ac57c416e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3b:9d:6e:05:65:c2:91:b5:2b:c3:1a:b1:ca:
05:d5:60:fb:43:b6:15:a3:e1:37:17:cb:3c:37:c4:
a0:85:c6:28:3c:2b:85:00:14:d7:b3:37:ca:f0:80:
4b:9f:ce:67:73:06:30:b0:57:69:20:3f:ce:59:96:
01:b5:28:31:f3:c8:c8:d3:a9:73:f7:51:c1:98:c0:
6d:ad:98:3b:5e:66:d1:27:1d:21:fd:e8:3f:53:74:
a5:ff:e2:65:e6:dc:82:0d:16:55:fd:0c:d0:87:74:
71:e0:f6:bb:ef:85:5d:95:cf:d0:b3:8e:08:2d:2b:
fb:e8:e7:8e:59:99:6e:f2:3e:b9:e3:8f:ec:d9:8e:
72:1b:dc:f0:6a:ed:a4:78:2a:a3:95:37:75:2f:15:
6f:d2:14:b4:18:aa:89:45:35:a3:fe:95:25:e3:ea:
33:34:18:28:2f:fd:1b:8a:0e:5a:2d:d8:79:f1:af:
54:92:e2:c0:b9:18:25:24:3f:34:83:dd:22:4c:f3:
90:e9:98:94:af:23:84:4c:a8:43:40:eb:f5:0e:73:
24:52:e7:34:89:47:42:3b:b4:fb:45:82:af:db:32:
3b:7b:54:8f:be:be:8c:e7:e6:82:2d:70:57:b8:73:
79:71:d6:f9:b3:b8:94:67:22:ca:79:b2:90:0c:ed:
8a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:7A:7E:64:3F:AF:77:E4:6D:03:F8:80:97:1F:33:93:F5:5F:02:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6e2c8e3-cce6-4734-bf05-d45daaa2af3e/ad5e7590-c068-35c0-9e3f-642180b60356.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6e2c8e3-cce6-4734-bf05-d45daaa2af3e/e6e2c8e3-cce6-4734-bf05-d45daaa2af3e.crl
X509v3 Authority Key Identifier:
keyid:BA:4F:D9:5B:71:8D:D4:4B:C8:0C:E0:4A:B2:B2:53:3A:15:9A:6A:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6e2c8e3-cce6-4734-bf05-d45daaa2af3e.cer
sbgp-ipAddrBlock: critical
IPv4:
216.170.117.0/24
IPv6:
2602:fd86::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:65:bd:38:64:d1:13:94:23:ce:87:a2:82:b2:5f:ba:37:53:
55:85:5a:a6:b7:93:f7:b7:6c:ad:fb:b6:05:f0:82:59:aa:ec:
77:7e:64:33:ac:2d:b6:3a:aa:b3:0e:52:60:71:31:1a:50:d5:
d3:82:c0:8b:a5:10:8c:5f:a5:a9:d3:22:12:20:14:70:17:a5:
a9:9d:fb:40:b4:8d:b1:e3:01:31:70:81:95:11:20:23:08:4a:
de:1d:52:28:bb:99:83:04:8b:d4:c4:d3:44:b7:28:77:ec:9a:
2b:c5:55:50:29:7b:6a:f1:c3:04:45:af:ae:ea:79:ff:a1:8c:
bb:42:b9:71:3c:3e:02:1e:f2:0d:9d:7b:5f:43:fd:84:c7:e5:
e7:3d:b7:2d:82:19:8b:82:09:81:8a:23:24:78:6b:32:ee:92:
8e:84:c5:e9:9d:79:ee:0c:24:37:eb:7e:af:52:68:47:8f:22:
16:ea:e0:44:0a:70:0c:61:5d:78:dc:6f:86:83:c4:0f:cc:bd:
4e:75:64:d3:22:81:35:88:8e:3b:21:6f:58:d7:d9:ed:2c:b9:
2c:a5:c9:f4:9c:82:81:ff:e9:cc:3d:71:bd:c3:bc:75:f7:fd:
d3:fe:89:2b:a0:ee:21:d0:88:b0:ec:ff:0c:ec:91:1f:27:c7:
89:de:d1:1f
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWElAOUU33r7skZHCGYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTZlMmM4ZTMtY2NlNi00NzM0LWJmMDUtZDQ1ZGFhYTJh
ZjNlMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk
N2EzOWJhYTMtZjBhMy00YTVjLTg5YmItYzBhYzU3YzQxNmUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTudbgVlwpG1K8MascoF1WD7Q7YVo+E3F8s8
N8SghcYoPCuFABTXszfK8IBLn85ncwYwsFdpID/OWZYBtSgx88jI06lz91HBmMBt
rZg7XmbRJx0h/eg/U3Sl/+Jl5tyCDRZV/QzQh3Rx4Pa774Vdlc/Qs44ILSv76OeO
WZlu8j6544/s2Y5yG9zwau2keCqjlTd1LxVv0hS0GKqJRTWj/pUl4+ozNBgoL/0b
ig5aLdh58a9UkuLAuRglJD80g90iTPOQ6ZiUryOETKhDQOv1DnMkUuc0iUdCO7T7
RYKv2zI7e1SPvr6M5+aCLXBXuHN5cdb5s7iUZyLKebKQDO2K5wIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFAV6fmQ/r3fkbQP4gJcfM5P1XwKsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lNmUy
YzhlMy1jY2U2LTQ3MzQtYmYwNS1kNDVkYWFhMmFmM2UvYWQ1ZTc1OTAtYzA2OC0z
NWMwLTllM2YtNjQyMTgwYjYwMzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTZlMmM4ZTMtY2NlNi00NzM0LWJm
MDUtZDQ1ZGFhYTJhZjNlL2U2ZTJjOGUzLWNjZTYtNDczNC1iZjA1LWQ0NWRhYWEy
YWYzZS5jcmwwHwYDVR0jBBgwFoAUuk/ZW3GN1EvIDOBKsrJTOhWaakowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lNmUyYzhlMy1jY2U2LTQ3MzQtYmYwNS1kNDVk
YWFhMmFmM2UuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQA2Kp1MA4E
AgACMAgDBgQmAv2GADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA6Zb04ZNETlCPOh6KCsl+6N1NVhVqmt5P3
t2yt+7YF8IJZqux3fmQzrC22OqqzDlJgcTEaUNXTgsCLpRCMX6Wp0yISIBRwF6Wp
nftAtI2x4wExcIGVESAjCEreHVIou5mDBIvUxNNEtyh37JorxVVQKXtq8cMERa+u
6nn/oYy7QrlxPD4CHvINnXtfQ/2Ex+XnPbctghmLggmBiiMkeGsy7pKOhMXpnXnu
DCQ3636vUmhHjyIW6uBECnAMYV143G+Gg8QPzL1OdWTTIoE1iI47IW9Y19ntLLks
pcn0nIKB/+nMPXG9w7x19/3T/okroO4h0Iiw7P8M7JEfJ8eJ3tEf
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:35:37 2025 by rpki-client