Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/1c77d59f-76ab-3542-b115-de5343a440e7.roa
File: 1c77d59f-76ab-3542-b115-de5343a440e7.roa (raw, json)
Hash identifier: a2Q7nasc6fuKKntOJKT4tw620MutBbrD/BzwC2waLdM=
Subject key identifier: 4C:2B:A0:E7:5A:54:D8:4E:EC:B9:0F:C1:48:B2:15:F9:B2:9B:44:19
Certificate issuer: /CN=fca4862e-7314-4415-a264-4e5dc31b73d8
Certificate serial: 010D0C9F4328584976A98DC6CD0BAF49372032C4
Authority key identifier: F3:2A:FE:F1:7D:67:12:DA:6A:50:D2:98:1F:3E:31:47:61:82:95:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/1c77d59f-76ab-3542-b115-de5343a440e7.roa
Signing time: Wed 09 Apr 2025 01:00:47 +0000
ROA not before: Wed 09 Apr 2025 01:00:47 +0000
ROA not after: Tue 08 Jul 2025 01:00:47 +0000
asID: 4186
IP address blocks: 2620:0:610::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:76:a9:8d:c6:cd:0b:af:49:37:20:32:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fca4862e-7314-4415-a264-4e5dc31b73d8
Validity
Not Before: Apr 9 01:00:47 2025 GMT
Not After : Jul 8 01:00:47 2025 GMT
Subject: CN=2bbccc57-3529-4b33-8a9f-d8492dd3843e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2b:ee:84:a0:85:77:e1:7e:09:39:a9:49:64:
e0:33:83:7f:20:80:df:a3:92:91:83:2a:c2:2f:eb:
29:e5:07:b8:89:ce:cd:2e:3f:42:c5:1f:57:75:ec:
7e:ac:bf:6b:72:8e:29:40:db:a1:14:d4:cf:5f:d3:
2f:b0:46:72:22:63:66:c6:29:48:59:56:d4:3b:3b:
47:21:47:8e:2e:e1:41:e5:85:e1:03:71:89:d6:1e:
31:3e:d2:86:dd:b9:32:b8:1f:00:76:01:b2:34:c8:
95:03:85:d2:fb:ab:ff:c0:58:76:d0:55:45:39:16:
0b:e4:b3:25:bd:39:13:2e:ce:5f:41:6f:f2:7b:8c:
76:b9:2d:f4:4b:10:71:39:33:fa:7c:bc:00:75:d0:
8c:dc:1c:6e:0f:1e:be:7a:e6:fc:2b:4d:8a:7c:60:
f9:21:39:9e:9e:ec:93:3a:83:13:d2:d8:5c:9b:a9:
40:f9:9e:5e:cf:c4:a9:0e:f5:3a:1f:55:c2:98:d6:
e9:cc:83:28:37:ec:b4:4d:ab:a7:6a:5d:53:46:22:
37:f9:73:19:1c:0b:4f:d8:47:59:29:2a:7d:f0:a4:
59:e5:62:e0:a8:1a:1b:94:c4:b5:e9:d9:7c:98:3f:
dc:f9:75:4f:7c:f6:94:be:43:24:f5:15:bd:b9:76:
5e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:2B:A0:E7:5A:54:D8:4E:EC:B9:0F:C1:48:B2:15:F9:B2:9B:44:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/1c77d59f-76ab-3542-b115-de5343a440e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/fca4862e-7314-4415-a264-4e5dc31b73d8.crl
X509v3 Authority Key Identifier:
keyid:F3:2A:FE:F1:7D:67:12:DA:6A:50:D2:98:1F:3E:31:47:61:82:95:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:0:610::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:9b:f5:33:57:df:48:4d:a2:23:ae:c0:70:a6:e6:d7:21:60:
9f:a9:88:97:72:70:c3:3e:02:80:c5:5c:3a:e0:14:8b:4b:b5:
c9:f6:4c:ee:54:d3:1f:a3:78:81:b1:2b:16:22:ce:84:1a:82:
a9:b3:84:46:3a:38:90:83:8a:6d:f3:25:d6:80:eb:0e:9b:4f:
f8:e7:31:9c:cd:8b:eb:99:48:98:6e:27:cc:1c:7c:f1:f0:4a:
64:7b:64:f0:54:d5:e7:9b:02:3b:bc:0a:2a:0b:d0:86:4a:20:
b7:15:22:45:71:fa:60:95:7c:95:4b:9a:a3:77:6b:af:d8:af:
9b:24:2f:a4:77:cf:6b:b2:82:ce:f7:60:0a:1b:fd:49:22:91:
a5:ca:0a:e1:c3:77:d0:a6:3d:08:6e:a8:f4:63:21:3c:62:cc:
d0:4b:10:ca:5b:40:83:bb:35:ff:88:69:10:f8:74:f7:bd:d0:
d6:59:5e:d0:ab:1a:7a:18:33:40:ee:bc:aa:85:a3:62:3f:79:
6f:1e:c4:56:46:b2:40:b9:07:44:50:80:39:20:80:fe:bb:0f:
7f:8b:0c:1c:5e:e5:5b:30:51:06:32:bd:30:ee:d5:02:5a:59:
f1:2a:80:0f:63:a2:fd:95:6e:02:0f:25:b8:68:68:b4:1f:3b:
20:76:6e:60
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl2qY3GzQuvSTcgMsQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmNhNDg2MmUtNzMxNC00NDE1LWEyNjQtNGU1ZGMzMWI3
M2Q4MB4XDTI1MDQwOTAxMDA0N1oXDTI1MDcwODAxMDA0N1owLzEtMCsGA1UEAxMk
MmJiY2NjNTctMzUyOS00YjMzLThhOWYtZDg0OTJkZDM4NDNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCvuhKCFd+F+CTmpSWTgM4N/IIDfo5KRgyrC
L+sp5Qe4ic7NLj9CxR9Xdex+rL9rco4pQNuhFNTPX9MvsEZyImNmxilIWVbUOztH
IUeOLuFB5YXhA3GJ1h4xPtKG3bkyuB8AdgGyNMiVA4XS+6v/wFh20FVFORYL5LMl
vTkTLs5fQW/ye4x2uS30SxBxOTP6fLwAddCM3BxuDx6+eub8K02KfGD5ITmenuyT
OoMT0thcm6lA+Z5ez8SpDvU6H1XCmNbpzIMoN+y0Taunal1TRiI3+XMZHAtP2EdZ
KSp98KRZ5WLgqBoblMS16dl8mD/c+XVPfPaUvkMk9RW9uXZexQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEwroOdaVNhO7LkPwUiyFfmym0QZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mY2E0
ODYyZS03MzE0LTQ0MTUtYTI2NC00ZTVkYzMxYjczZDgvMWM3N2Q1OWYtNzZhYi0z
NTQyLWIxMTUtZGU1MzQzYTQ0MGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmNhNDg2MmUtNzMxNC00NDE1LWEy
NjQtNGU1ZGMzMWI3M2Q4L2ZjYTQ4NjJlLTczMTQtNDQxNS1hMjY0LTRlNWRjMzFi
NzNkOC5jcmwwHwYDVR0jBBgwFoAU8yr+8X1nEtpqUNKYHz4xR2GCleQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mY2E0ODYyZS03MzE0LTQ0MTUtYTI2NC00ZTVk
YzMxYjczZDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAAYQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACub9TNX30hNoiOuwHCm5tchYJ+piJdycMM+AoDFXDrgFItLtcn2
TO5U0x+jeIGxKxYizoQagqmzhEY6OJCDim3zJdaA6w6bT/jnMZzNi+uZSJhuJ8wc
fPHwSmR7ZPBU1eebAju8CioL0IZKILcVIkVx+mCVfJVLmqN3a6/Yr5skL6R3z2uy
gs73YAob/UkikaXKCuHDd9CmPQhuqPRjITxizNBLEMpbQIO7Nf+IaRD4dPe90NZZ
XtCrGnoYM0DuvKqFo2I/eW8exFZGskC5B0RQgDkggP67D3+LDBxe5VswUQYyvTDu
1QJaWfEqgA9jov2VbgIPJbhoaLQfOyB2bmA=
-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:58 2025 by rpki-client on console.sobornost.net