Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/00848a6a-98d3-34fd-a1e2-007404c66cca.roa
File: 00848a6a-98d3-34fd-a1e2-007404c66cca.roa (raw, json)
Hash identifier: 64ogl8/hLA9u2P2w5VfL6dODB8JwqxrnyhoYYInP1Os=
Subject key identifier: D2:9F:BC:97:72:74:0D:AC:08:48:9E:38:77:E3:46:48:D0:29:9B:7C
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584858A04BD780F4B19FA0015580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/00848a6a-98d3-34fd-a1e2-007404c66cca.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 397204
IP address blocks: 2001:500:120::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:4b:d7:80:f4:b1:9f:a0:01:55:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=c3c537aa-fab1-4c08-882b-3b6a30b605d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a6:5c:a5:ab:34:f4:ed:61:b9:6d:7d:13:31:
06:c3:34:f9:2f:93:37:8e:05:2d:b0:e3:21:ce:4f:
5d:ae:e6:7b:a5:e5:eb:1a:23:9e:d9:35:dc:f7:0c:
75:95:ea:8f:a7:1e:3c:fd:cd:55:a4:33:ca:c9:72:
bc:9d:27:fd:02:55:01:f2:68:57:11:96:1c:cd:cd:
5b:a7:67:9e:f4:93:ab:12:5d:f5:62:b3:e5:c7:f9:
42:44:ad:f3:02:4b:7a:a7:90:a7:9a:18:9f:ff:39:
73:eb:e0:08:b7:9a:68:5e:33:29:b9:6d:76:37:5c:
4a:9c:c8:cd:82:48:75:99:70:49:ff:a6:3e:20:3b:
e4:d8:4e:64:7c:19:20:14:44:d9:69:5f:d4:f2:11:
53:5a:7f:6e:da:cb:54:91:e5:62:ea:17:3e:a3:79:
07:50:3c:1c:55:07:08:fd:c6:04:c8:3a:d0:94:1e:
12:4b:23:3a:06:47:02:89:56:f7:66:36:97:05:b7:
8d:fc:9d:fc:6e:fc:af:db:10:4d:a7:81:f3:c3:d2:
ce:25:85:0a:f5:5f:cc:0d:1d:ee:92:b8:85:97:8b:
c9:54:f9:9a:bb:1b:cc:9e:3b:be:d2:ae:74:f4:5c:
43:5b:69:fb:b4:62:3f:30:93:90:2d:a2:39:92:e5:
d9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:9F:BC:97:72:74:0D:AC:08:48:9E:38:77:E3:46:48:D0:29:9B:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/00848a6a-98d3-34fd-a1e2-007404c66cca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:120:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:5d:49:37:ed:19:17:b2:b0:42:3b:bd:ae:75:5c:2b:ae:96:
b2:ad:96:c8:0e:fb:c5:58:9f:7c:8f:b0:38:25:dc:d9:bd:f1:
b6:82:5f:ed:0f:11:98:68:50:d5:fb:d1:48:55:84:2d:00:cb:
07:54:9e:2f:79:c2:8d:0d:94:0f:66:e2:44:0b:d5:cf:e7:5f:
81:ce:4f:b8:b4:94:54:75:43:f9:2a:2b:e5:09:c8:e1:e8:db:
0c:fb:50:df:e4:97:92:27:a0:37:fa:3a:0e:10:33:d8:11:f9:
4c:c4:bd:40:e7:f9:bd:36:96:c3:2a:10:f6:9e:a6:f5:0e:40:
bb:e3:7e:6c:b1:c0:33:ac:58:8f:42:4c:fd:c4:4b:89:e7:a3:
d4:39:5c:ef:a4:1d:70:72:83:35:f1:f2:b1:ce:55:ff:46:b2:
5b:95:44:0d:a1:17:6a:f5:59:75:e4:09:9c:81:93:8c:2e:9b:
65:7e:6a:af:34:0b:48:3e:13:94:f2:1b:fe:14:db:5f:78:a7:
3f:86:6f:2a:5f:0f:92:f8:c0:33:f4:81:3d:12:92:05:ad:bb:
4d:1a:38:eb:36:ef:09:e1:c2:4b:34:7d:f1:39:f1:46:22:91:
51:d9:10:5d:6d:b4:de:fc:ac:a4:24:13:05:16:03:fe:a4:cd:
45:15:d0:71
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEhYoEvXgPSxn6ABVYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIyNzE0MDA1MloXDTI1MDMyNzEzMDA1MlowLzEtMCsGA1UEAxMk
YzNjNTM3YWEtZmFiMS00YzA4LTg4MmItM2I2YTMwYjYwNWQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKZcpas09O1huW19EzEGwzT5L5M3jgUtsOMh
zk9druZ7peXrGiOe2TXc9wx1leqPpx48/c1VpDPKyXK8nSf9AlUB8mhXEZYczc1b
p2ee9JOrEl31YrPlx/lCRK3zAkt6p5Cnmhif/zlz6+AIt5poXjMpuW12N1xKnMjN
gkh1mXBJ/6Y+IDvk2E5kfBkgFETZaV/U8hFTWn9u2stUkeVi6hc+o3kHUDwcVQcI
/cYEyDrQlB4SSyM6BkcCiVb3ZjaXBbeN/J38bvyv2xBNp4Hzw9LOJYUK9V/MDR3u
kriFl4vJVPmauxvMnju+0q509FxDW2n7tGI/MJOQLaI5kuXZ3wIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFNKfvJdydA2sCEieOHfjRkjQKZt8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDA4NDhhNmEtOThkMy0z
NGZkLWExZTItMDA3NDA0YzY2Y2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEg
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBqXUk37RkXsrBCO72udVwrrpayrZbIDvvFWJ98
j7A4JdzZvfG2gl/tDxGYaFDV+9FIVYQtAMsHVJ4vecKNDZQPZuJEC9XP51+Bzk+4
tJRUdUP5KivlCcjh6NsM+1Df5JeSJ6A3+joOEDPYEflMxL1A5/m9NpbDKhD2nqb1
DkC7435sscAzrFiPQkz9xEuJ56PUOVzvpB1wcoM18fKxzlX/RrJblUQNoRdq9Vl1
5AmcgZOMLptlfmqvNAtIPhOU8hv+FNtfeKc/hm8qXw+S+MAz9IE9EpIFrbtNGjjr
Nu8J4cJLNH3xOfFGIpFR2RBdbbTe/KykJBMFFgP+pM1FFdBx
-----END CERTIFICATE-----
Generated at Fri Apr 25 20:18:58 2025 by rpki-client