Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2bf2379f-8d19-3606-b954-eaf409304b5c.roa
File: 2bf2379f-8d19-3606-b954-eaf409304b5c.roa (raw, json)
Hash identifier: tL1p2QtWqz3TBz3d4LOwMkk0Vp+vHopQMK28ksROHVU=
Subject key identifier: 83:80:05:96:1F:C8:03:DC:2C:8A:AB:1B:7E:B2:A3:D8:16:AE:F3:2E
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848451578450F79D79A1981E3E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2bf2379f-8d19-3606-b954-eaf409304b5c.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 397200
IP address blocks: 2001:500:122::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:78:45:0f:79:d7:9a:19:81:e3:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=34f8a11a-36a4-4127-ac92-06d1b04c5312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:27:cd:06:a3:11:04:25:4d:27:b5:f2:d3:ac:
1b:de:d6:a1:25:09:d4:94:d8:0a:2e:89:d9:e6:00:
11:43:08:cf:55:06:e1:ce:5d:91:9d:10:be:73:93:
2c:c1:22:eb:4c:38:04:53:f6:30:98:6d:92:71:55:
30:f7:fa:de:84:af:53:d3:4d:07:e2:13:0b:72:fa:
5b:67:e1:32:7d:82:3a:61:b6:0d:3d:66:72:53:41:
0d:ef:8f:d5:82:9b:fa:42:76:1d:df:bf:a2:c3:7f:
7f:93:d0:33:a6:3c:3c:74:8e:87:5d:5f:f7:7e:5e:
83:66:55:14:49:c3:68:c4:5c:e6:ce:79:47:48:6d:
9d:e8:73:66:19:02:30:8e:10:9d:4e:5f:be:1d:cd:
8b:76:54:98:be:f8:60:c7:93:1d:70:40:1f:46:90:
a7:7c:03:6c:ec:e9:0e:1d:f2:79:73:c6:17:de:c9:
59:29:ad:98:8a:09:38:d4:fe:8c:57:a6:a9:53:da:
53:7d:19:2f:56:3e:17:f0:1e:70:41:d6:db:59:f2:
bf:b3:bd:08:18:bb:13:fb:e8:3f:70:c3:af:d3:b7:
03:d3:40:b2:ee:20:e1:fc:69:48:f8:b3:25:a5:42:
d3:5e:90:f1:1c:ab:02:42:e3:8c:18:00:5c:51:56:
29:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:80:05:96:1F:C8:03:DC:2C:8A:AB:1B:7E:B2:A3:D8:16:AE:F3:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2bf2379f-8d19-3606-b954-eaf409304b5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:122:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:02:90:f8:36:61:1e:4d:e2:a3:2c:53:65:29:e2:5c:92:09:
e2:0f:e4:c7:25:b0:02:59:24:48:c3:6c:03:65:98:ee:3b:f1:
b0:51:e5:bb:69:20:e4:5f:91:2a:22:e3:b6:c7:99:75:fb:bb:
1f:a8:0d:34:21:a9:51:2c:e1:cc:34:9d:ff:b3:b8:88:33:0c:
5b:9f:24:8a:28:45:8f:dc:ad:8e:12:55:6a:56:cb:6d:3a:c7:
62:54:26:cf:cb:9b:65:f0:32:70:fe:34:e0:cc:fe:38:9d:13:
0e:34:00:f7:72:03:fd:43:12:f7:6a:9c:bf:3a:75:1d:80:78:
ac:fe:b2:f1:a5:49:7c:a3:58:36:2e:0d:34:2c:56:86:d9:66:
cb:f3:6e:51:10:dc:84:81:87:92:97:52:16:9d:79:be:41:ff:
07:59:70:72:4d:05:62:22:65:fc:33:54:d0:ff:ff:66:82:54:
84:15:2f:86:34:46:fc:b4:1a:3e:60:43:4f:c3:5a:8e:32:e3:
b8:e4:69:68:04:a5:8e:94:52:eb:8e:a0:e7:00:aa:67:9f:02:
06:10:32:fc:3b:57:69:44:64:4c:47:ae:92:b1:1c:9e:d9:29:
58:d0:f0:af:b0:4d:a4:e6:3b:32:99:07:a5:5e:ce:18:6b:28:
df:bf:b2:bb
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEhFFXhFD3nXmhmB4+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIyMDE0MDA1MVoXDTI1MDMyMDEzMDA1MVowLzEtMCsGA1UEAxMk
MzRmOGExMWEtMzZhNC00MTI3LWFjOTItMDZkMWIwNGM1MzEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSfNBqMRBCVNJ7Xy06wb3tahJQnUlNgKLonZ
5gARQwjPVQbhzl2RnRC+c5MswSLrTDgEU/YwmG2ScVUw9/rehK9T000H4hMLcvpb
Z+EyfYI6YbYNPWZyU0EN74/Vgpv6QnYd37+iw39/k9Azpjw8dI6HXV/3fl6DZlUU
ScNoxFzmznlHSG2d6HNmGQIwjhCdTl++Hc2LdlSYvvhgx5MdcEAfRpCnfANs7OkO
HfJ5c8YX3slZKa2Yigk41P6MV6apU9pTfRkvVj4X8B5wQdbbWfK/s70IGLsT++g/
cMOv07cD00Cy7iDh/GlI+LMlpULTXpDxHKsCQuOMGABcUVYpIwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFIOABZYfyAPcLIqrG36yo9gWrvMuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmJmMjM3OWYtOGQxOS0z
NjA2LWI5NTQtZWFmNDA5MzA0YjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEi
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCNApD4NmEeTeKjLFNlKeJckgniD+THJbACWSRI
w2wDZZjuO/GwUeW7aSDkX5EqIuO2x5l1+7sfqA00IalRLOHMNJ3/s7iIMwxbnySK
KEWP3K2OElVqVsttOsdiVCbPy5tl8DJw/jTgzP44nRMONAD3cgP9QxL3apy/OnUd
gHis/rLxpUl8o1g2Lg00LFaG2WbL825RENyEgYeSl1IWnXm+Qf8HWXByTQViImX8
M1TQ//9mglSEFS+GNEb8tBo+YENPw1qOMuO45GloBKWOlFLrjqDnAKpnnwIGEDL8
O1dpRGRMR66SsRye2SlY0PCvsE2k5jsymQelXs4Yayjfv7K7
-----END CERTIFICATE-----
Generated at Fri Apr 25 20:10:53 2025 by rpki-client