Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/10c9931e-5525-3a21-b16b-e79ee4edaeff.roa
File: 10c9931e-5525-3a21-b16b-e79ee4edaeff.roa (raw, json)
Hash identifier: MMEa6O9UaSPSg87JeklaZ2Jfl7kFqK6vKS9U/EKStu0=
Subject key identifier: 52:49:2C:ED:3B:DF:EC:0E:CB:81:64:94:27:3E:39:E4:D6:E8:CC:C1
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848AC60CEA0A10744F414C64280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/10c9931e-5525-3a21-b16b-e79ee4edaeff.roa
Signing time: Sun 26 Jan 2025 14:00:52 +0000
ROA not before: Sun 26 Jan 2025 14:00:52 +0000
ROA not after: Sat 26 Apr 2025 13:00:52 +0000
asID: 396582
IP address blocks: 2001:500:135::53/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ac:60:ce:a0:a1:07:44:f4:14:c6:42:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 26 14:00:52 2025 GMT
Not After : Apr 26 13:00:52 2025 GMT
Subject: CN=6ce3a5a9-5b81-410e-9923-cb14f8c1428d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e0:5d:23:63:fc:30:c4:fd:d7:90:4c:00:72:
15:a3:0d:12:8b:50:58:c7:4f:61:71:6f:d4:55:1e:
f9:10:2f:9d:2a:f8:cc:ae:90:75:75:1c:a2:a4:2a:
34:cc:96:f0:01:52:5a:fb:92:8e:25:a2:4e:48:bf:
91:9a:00:eb:a9:9c:f7:91:c8:e9:99:92:f5:59:e6:
68:04:e5:2c:03:82:e1:ab:09:b0:d6:0a:18:ed:3e:
eb:cd:74:71:a2:79:23:8e:c7:cc:71:47:4b:90:b3:
9f:76:78:ef:e0:b1:2e:51:61:b3:04:c6:e6:2e:99:
a2:2b:16:ff:b6:9a:2e:8a:4f:8d:a1:af:7c:da:8b:
9a:0a:70:cd:23:fc:22:02:0e:4f:5b:cb:36:6a:7e:
a4:02:7d:b9:14:b0:98:c7:94:15:1d:1d:2e:76:7d:
18:af:b9:68:c7:24:2d:08:b9:a2:1d:14:a0:c1:ee:
e0:e6:d9:b0:7e:dd:a0:07:87:af:d6:02:25:bf:37:
2c:01:bc:2c:6e:6e:82:8e:84:2e:7c:f0:b4:41:40:
bf:6c:67:3a:04:eb:be:0f:e9:16:ad:37:11:2b:fc:
a7:16:92:41:f5:f5:67:f9:88:35:77:2f:72:e7:7c:
88:ef:00:39:16:cd:09:57:2e:fc:2d:39:d3:c3:c6:
16:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:49:2C:ED:3B:DF:EC:0E:CB:81:64:94:27:3E:39:E4:D6:E8:CC:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/10c9931e-5525-3a21-b16b-e79ee4edaeff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:135:0:0:0:0:53/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:53:c2:ed:17:08:45:ca:1f:b3:24:72:79:e1:3b:1d:0c:f9:
96:96:45:0f:31:9e:8a:56:65:57:8a:dd:2a:60:75:bb:c1:18:
78:11:f8:7e:70:e2:3c:c2:51:e5:7f:36:a2:33:37:e0:bd:e2:
fd:9b:69:7b:e3:1a:d7:ba:0a:51:c6:71:92:e1:c8:5e:e5:9e:
27:39:b7:84:5a:ab:4c:88:d0:d2:b7:f1:0c:9b:8b:6f:8d:2b:
5c:ff:f7:2b:d0:c5:82:ce:99:57:fa:d0:1c:3d:08:b9:07:dc:
d3:da:22:ef:c8:88:90:f8:38:4a:6d:7f:b4:f5:26:6f:62:d4:
16:86:95:4c:3b:ab:f8:56:b6:18:c7:b1:cf:3b:47:e1:54:4c:
76:ae:62:a4:dd:45:21:43:48:c7:0e:a5:b0:be:cb:c2:07:4d:
85:17:ac:9c:a2:1d:96:ce:79:b0:c4:7d:f4:e9:3f:c2:f0:56:
ba:10:d2:70:09:13:eb:6b:6c:51:ee:f8:5b:65:ed:90:e2:bf:
a0:a2:af:cc:ed:10:1d:7f:f1:65:07:c9:37:03:31:c3:11:f7:
ca:60:6e:de:dd:b7:e2:2b:04:17:cb:de:6e:aa:33:cc:45:45:
81:9f:dd:58:f2:ea:a7:17:b3:d2:00:49:cc:a8:df:19:e5:3f:
56:ab:31:68
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEisYM6goQdE9BTGQoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDEyNjE0MDA1MloXDTI1MDQyNjEzMDA1MlowLzEtMCsGA1UEAxMk
NmNlM2E1YTktNWI4MS00MTBlLTk5MjMtY2IxNGY4YzE0MjhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+BdI2P8MMT915BMAHIVow0Si1BYx09hcW/U
VR75EC+dKvjMrpB1dRyipCo0zJbwAVJa+5KOJaJOSL+RmgDrqZz3kcjpmZL1WeZo
BOUsA4Lhqwmw1goY7T7rzXRxonkjjsfMcUdLkLOfdnjv4LEuUWGzBMbmLpmiKxb/
tpouik+Noa982ouaCnDNI/wiAg5PW8s2an6kAn25FLCYx5QVHR0udn0Yr7loxyQt
CLmiHRSgwe7g5tmwft2gB4ev1gIlvzcsAbwsbm6CjoQufPC0QUC/bGc6BOu+D+kW
rTcRK/ynFpJB9fVn+Yg1dy9y53yI7wA5Fs0JVy78LTnTw8YWcQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFFJJLO073+wOy4FklCc+OeTW6MzBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTBjOTkzMWUtNTUyNS0z
YTIxLWIxNmItZTc5ZWU0ZWRhZWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE1
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQANU8LtFwhFyh+zJHJ54TsdDPmWlkUPMZ6KVmVX
it0qYHW7wRh4Efh+cOI8wlHlfzaiMzfgveL9m2l74xrXugpRxnGS4che5Z4nObeE
WqtMiNDSt/EMm4tvjStc//cr0MWCzplX+tAcPQi5B9zT2iLvyIiQ+DhKbX+09SZv
YtQWhpVMO6v4VrYYx7HPO0fhVEx2rmKk3UUhQ0jHDqWwvsvCB02FF6ycoh2Wznmw
xH306T/C8Fa6ENJwCRPra2xR7vhbZe2Q4r+goq/M7RAdf/FlB8k3AzHDEffKYG7e
3bfiKwQXy95uqjPMRUWBn91Y8uqnF7PSAEnMqN8Z5T9WqzFo
-----END CERTIFICATE-----
Generated at Fri Apr 25 19:50:36 2025 by rpki-client