Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4/ab35e460-b367-33e1-8081-35c5fd7a43f1.roa
File: ab35e460-b367-33e1-8081-35c5fd7a43f1.roa (raw, json)
Hash identifier: pkfDBszDxtKDX8kh1bpVfIweuAXf2Bkn9D2kBJIGQ2E=
Subject key identifier: 9B:7C:5F:BE:6A:62:C6:DE:3C:1B:3E:0B:34:9F:4B:0F:CF:4B:33:4B
Certificate issuer: /CN=2882ac67-96bc-43ba-b06e-c2f533c852f4
Certificate serial: 010D0C9F43285848C84B9EEC868ECDD5A82FEE40
Authority key identifier: CC:C8:29:5C:F6:D2:6E:6D:51:E2:87:93:45:67:F5:86:8B:4B:1E:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4/ab35e460-b367-33e1-8081-35c5fd7a43f1.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 401106
IP address blocks: 2607:b740::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:9e:ec:86:8e:cd:d5:a8:2f:ee:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2882ac67-96bc-43ba-b06e-c2f533c852f4
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=60a16357-dd90-400c-9fed-b1c453277c43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5a:85:8f:ca:eb:9b:a5:77:4a:f4:97:28:a8:
ac:3e:32:ff:bb:84:be:cc:b9:4c:12:71:5f:e5:1d:
45:a0:9b:dd:eb:30:7f:ba:34:59:2f:ee:32:b0:3c:
95:52:7b:29:be:9d:1e:fd:98:95:b3:1a:41:f1:49:
7e:f2:44:e5:cf:47:1f:5d:27:da:58:37:81:32:f8:
25:ea:6f:65:69:e3:7d:56:7c:26:ba:b5:64:f8:17:
3c:2e:93:8e:1a:1d:a7:ae:3f:d3:4a:27:75:22:12:
11:f6:e9:6e:d2:6b:f6:0d:d3:5e:69:01:82:aa:4d:
22:17:c4:dd:4a:14:da:21:b6:22:f1:d8:b7:e8:16:
95:c8:13:5e:be:e9:99:df:6b:03:48:d8:c1:28:65:
d3:41:20:7e:48:08:47:9c:8f:97:14:6f:96:74:8d:
c9:44:42:83:2f:b4:fa:e6:9f:af:54:38:71:ba:3a:
7a:12:c5:cf:5f:cd:17:51:3a:7f:fc:5a:22:d7:07:
ae:1c:ea:e5:64:b9:2f:51:c7:9a:74:2a:2b:54:78:
b9:52:cb:a8:5d:48:e9:0b:08:d1:55:d9:40:81:59:
7d:71:67:f1:fc:ed:3d:e7:eb:b9:fe:25:61:d1:a2:
00:00:1b:23:8b:56:bc:9a:8f:62:9f:b5:70:82:7b:
11:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:7C:5F:BE:6A:62:C6:DE:3C:1B:3E:0B:34:9F:4B:0F:CF:4B:33:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4/ab35e460-b367-33e1-8081-35c5fd7a43f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4/2882ac67-96bc-43ba-b06e-c2f533c852f4.crl
X509v3 Authority Key Identifier:
keyid:CC:C8:29:5C:F6:D2:6E:6D:51:E2:87:93:45:67:F5:86:8B:4B:1E:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:b740::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:70:94:bf:89:4f:b5:5a:0c:e7:a0:fa:6a:9e:a3:75:da:be:
82:70:03:34:34:73:1f:40:e5:d1:5f:6d:17:8f:b2:b2:5c:52:
d7:84:fa:86:16:0b:fc:d8:11:03:77:16:65:2d:ad:c9:f7:45:
ad:36:58:4c:a4:03:27:a1:c8:ac:00:f1:cd:4f:22:57:06:c7:
8d:c0:e8:25:84:f6:75:d9:65:da:e8:b7:e2:d8:6e:cb:dd:37:
22:a4:e5:bc:d8:d9:37:c2:51:da:80:fe:d5:bf:26:73:ba:44:
3b:12:81:c7:39:0f:4a:06:32:2b:6e:61:b6:47:08:e2:2e:d3:
50:99:78:23:a3:9a:be:70:7c:57:90:94:b5:4e:76:33:37:80:
96:02:92:02:64:e0:6f:cf:70:ee:69:b9:ce:6b:ff:d0:5c:c9:
99:7d:2a:60:2c:36:8c:0c:4c:fa:ea:2a:eb:1f:eb:4b:16:ad:
bd:30:a1:51:70:b7:37:b2:f7:de:26:bc:81:b4:af:53:3f:ee:
e2:eb:c1:ba:95:d5:95:0a:52:96:ad:80:17:57:8d:cb:fe:03:
8e:0d:63:c7:cb:72:10:3d:ec:0e:2f:06:e9:9a:1a:46:be:6b:
61:67:05:1b:35:98:be:a3:f4:71:c6:60:e0:8e:80:75:ad:6e:
bf:93:af:d7
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjIS57sho7N1agv7kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjg4MmFjNjctOTZiYy00M2JhLWIwNmUtYzJmNTMzYzg1
MmY0MB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk
NjBhMTYzNTctZGQ5MC00MDBjLTlmZWQtYjFjNDUzMjc3YzQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFqFj8rrm6V3SvSXKKisPjL/u4S+zLlMEnFf
5R1FoJvd6zB/ujRZL+4ysDyVUnspvp0e/ZiVsxpB8Ul+8kTlz0cfXSfaWDeBMvgl
6m9laeN9VnwmurVk+Bc8LpOOGh2nrj/TSid1IhIR9ulu0mv2DdNeaQGCqk0iF8Td
ShTaIbYi8di36BaVyBNevumZ32sDSNjBKGXTQSB+SAhHnI+XFG+WdI3JREKDL7T6
5p+vVDhxujp6EsXPX80XUTp//Foi1weuHOrlZLkvUceadCorVHi5UsuoXUjpCwjR
VdlAgVl9cWfx/O095+u5/iVh0aIAABsji1a8mo9in7VwgnsRIQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJt8X75qYsbePBs+CzSfSw/PSzNLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8yODgy
YWM2Ny05NmJjLTQzYmEtYjA2ZS1jMmY1MzNjODUyZjQvYWIzNWU0NjAtYjM2Ny0z
M2UxLTgwODEtMzVjNWZkN2E0M2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMjg4MmFjNjctOTZiYy00M2JhLWIw
NmUtYzJmNTMzYzg1MmY0LzI4ODJhYzY3LTk2YmMtNDNiYS1iMDZlLWMyZjUzM2M4
NTJmNC5jcmwwHwYDVR0jBBgwFoAUzMgpXPbSbm1R4oeTRWf1hotLHrIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8yODgyYWM2Ny05NmJjLTQzYmEtYjA2ZS1jMmY1
MzNjODUyZjQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJge3QDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBIcJS/iU+1WgznoPpqnqN12r6CcAM0NHMfQOXRX20Xj7KyXFLXhPqG
Fgv82BEDdxZlLa3J90WtNlhMpAMnocisAPHNTyJXBseNwOglhPZ12WXa6Lfi2G7L
3TcipOW82Nk3wlHagP7VvyZzukQ7EoHHOQ9KBjIrbmG2RwjiLtNQmXgjo5q+cHxX
kJS1TnYzN4CWApICZOBvz3DuabnOa//QXMmZfSpgLDaMDEz66irrH+tLFq29MKFR
cLc3svfeJryBtK9TP+7i68G6ldWVClKWrYAXV43L/gOODWPHy3IQPewOLwbpmhpG
vmthZwUbNZi+o/RxxmDgjoB1rW6/k6/X
-----END CERTIFICATE-----
Generated at Sat Mar 8 04:21:40 2025 by rpki-client on console.sobornost.net