Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a20d117-c99a-3aa3-9c69-16dd152be9df.roa
File: 1a20d117-c99a-3aa3-9c69-16dd152be9df.roa (raw, json)
Hash identifier: 2XdNVcH7Cn/80g0jVfnRdfrH2cuq8y4fMoBMIL4Ogac=
Subject key identifier: DD:67:03:E8:DF:BF:30:DB:6A:62:21:B3:9F:F8:2E:1B:C5:11:B5:DE
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848424303C9D0D9911297221DC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a20d117-c99a-3aa3-9c69-16dd152be9df.roa
Signing time: Thu 19 Dec 2024 13:45:16 +0000
ROA not before: Thu 19 Dec 2024 13:45:16 +0000
ROA not after: Wed 19 Mar 2025 12:45:16 +0000
asID: 396540
IP address blocks: 2001:500:124::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:43:03:c9:d0:d9:91:12:97:22:1d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 13:45:16 2024 GMT
Not After : Mar 19 12:45:16 2025 GMT
Subject: CN=28fef186-b8fb-409a-a8e4-7618f8cb7e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9e:00:0d:75:ba:5d:4e:71:c1:89:f2:99:29:
25:1e:81:cb:4a:79:79:68:ca:20:a3:a4:14:0b:ed:
e3:43:90:2e:ed:75:d3:b4:09:77:98:48:6b:fb:a2:
e9:5d:06:56:5f:70:05:cf:41:a3:67:20:58:66:24:
da:1a:b9:1d:2e:f1:f1:23:94:c1:da:95:d9:4e:e0:
fd:65:b4:9b:5e:85:8f:85:86:53:2f:b1:ce:78:d8:
9c:3c:6d:73:c1:3a:50:54:cf:bb:4a:e3:2f:9a:05:
ba:9b:2b:1b:53:3b:5a:b2:b6:5c:64:37:05:c4:40:
33:0e:3e:7e:40:3c:2c:81:38:f7:cb:2b:6c:bc:5e:
9c:20:b8:18:e4:3d:58:4e:c3:d7:d2:76:e1:33:fc:
0a:8b:ad:e3:47:01:25:6e:e7:78:17:7a:a1:92:49:
3d:7e:25:03:2a:dc:b7:5e:fc:c0:67:66:dd:28:84:
8e:e0:d7:09:c3:5b:e7:d4:2f:1c:1a:22:4d:35:79:
15:62:7f:f3:ce:7f:ed:52:e2:bd:5f:4f:73:24:5f:
37:a1:e3:6d:17:f1:57:bf:05:97:cd:d1:0f:ba:56:
fe:f6:12:31:24:f8:50:0e:49:e1:07:e1:10:73:8b:
e5:10:2c:56:f5:a7:f2:ec:61:e2:bf:b8:38:a8:69:
cd:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:67:03:E8:DF:BF:30:DB:6A:62:21:B3:9F:F8:2E:1B:C5:11:B5:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a20d117-c99a-3aa3-9c69-16dd152be9df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:124:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:38:85:f9:dc:58:97:5e:9c:f3:51:09:3c:a9:a6:51:d8:d4:
fd:e0:99:44:6a:1d:7c:9b:91:e5:89:2e:ac:46:7a:b9:68:9f:
25:a1:d7:d8:cb:80:be:22:f2:5a:08:bf:67:81:33:3c:89:a7:
a9:5b:6f:b7:0e:15:dd:3a:33:bb:4d:d0:ee:a8:0b:db:4e:a7:
d7:0b:70:34:91:8d:a8:b2:b2:bd:59:09:2a:6f:e7:96:a0:2e:
f3:c1:df:bd:fe:ac:3d:13:c1:ef:af:90:cf:aa:2b:1e:79:91:
79:2d:fd:48:7f:ec:b2:60:d1:1a:7e:d6:18:e3:46:90:73:ac:
0f:a9:42:2f:47:bf:57:c1:7d:d4:57:8d:23:fb:c3:f7:aa:ae:
7f:76:a6:57:1b:6f:f8:0f:07:10:a9:f1:9a:0a:97:7d:b4:b4:
7b:8c:3f:e4:d0:11:25:53:0b:4e:20:9d:b6:3f:4b:aa:6e:71:
59:54:65:6b:5e:77:60:d5:fe:ee:e2:4d:d3:e9:0d:74:31:34:
be:ae:da:b5:f6:12:fe:dc:14:8b:85:f6:79:dd:ad:9a:d4:e8:
dc:f6:70:46:a0:f1:18:26:aa:a6:91:45:b4:3c:a6:c0:84:5e:
81:3d:31:d7:aa:07:d2:cf:a3:9b:a6:22:4f:c7:39:b3:14:64:
7a:76:df:76
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEhCQwPJ0NmREpciHcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIxOTEzNDUxNloXDTI1MDMxOTEyNDUxNlowLzEtMCsGA1UEAxMk
MjhmZWYxODYtYjhmYi00MDlhLWE4ZTQtNzYxOGY4Y2I3ZTBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJ4ADXW6XU5xwYnymSklHoHLSnl5aMogo6QU
C+3jQ5Au7XXTtAl3mEhr+6LpXQZWX3AFz0GjZyBYZiTaGrkdLvHxI5TB2pXZTuD9
ZbSbXoWPhYZTL7HOeNicPG1zwTpQVM+7SuMvmgW6mysbUztasrZcZDcFxEAzDj5+
QDwsgTj3yytsvF6cILgY5D1YTsPX0nbhM/wKi63jRwElbud4F3qhkkk9fiUDKty3
XvzAZ2bdKISO4NcJw1vn1C8cGiJNNXkVYn/zzn/tUuK9X09zJF83oeNtF/FXvwWX
zdEPulb+9hIxJPhQDknhB+EQc4vlECxW9afy7GHiv7g4qGnNlQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFN1nA+jfvzDbamIhs5/4LhvFEbXeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWEyMGQxMTctYzk5YS0z
YWEzLTljNjktMTZkZDE1MmJlOWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEk
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCCOIX53FiXXpzzUQk8qaZR2NT94JlEah18m5Hl
iS6sRnq5aJ8lodfYy4C+IvJaCL9ngTM8iaepW2+3DhXdOjO7TdDuqAvbTqfXC3A0
kY2osrK9WQkqb+eWoC7zwd+9/qw9E8Hvr5DPqiseeZF5Lf1If+yyYNEaftYY40aQ
c6wPqUIvR79XwX3UV40j+8P3qq5/dqZXG2/4DwcQqfGaCpd9tLR7jD/k0BElUwtO
IJ22P0uqbnFZVGVrXndg1f7u4k3T6Q10MTS+rtq19hL+3BSLhfZ53a2a1Ojc9nBG
oPEYJqqmkUW0PKbAhF6BPTHXqgfSz6ObpiJPxzmzFGR6dt92
-----END CERTIFICATE-----
Generated at Tue May 6 22:19:47 2025 by rpki-client