Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2f89339e-fe35-36be-8a81-ad0e051a71c8.roa
File: 2f89339e-fe35-36be-8a81-ad0e051a71c8.roa (raw, json)
Hash identifier: OOgb7VqCexcSWxHSuZTgXda2sOLNX+eFgQWQxAig7H0=
Subject key identifier: 69:70:1D:69:17:50:D1:CF:AF:6B:50:E3:A5:EF:68:E9:7C:3C:6C:F0
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858488DAB7468CEAD9E8015B828A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2f89339e-fe35-36be-8a81-ad0e051a71c8.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 396585
IP address blocks: 2001:500:7967::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:74:68:ce:ad:9e:80:15:b8:28:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=c629acbb-cb8c-41a3-b88b-91ef07d7a1ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:71:a3:29:01:b5:62:79:bc:dd:fe:24:e6:2a:
f5:c2:55:dd:e3:09:97:2e:09:12:6c:25:f9:63:47:
86:96:fe:0e:68:88:a7:c2:3c:8d:36:ec:2c:6b:67:
c3:6b:c4:46:87:76:9a:11:ff:03:a8:66:05:8b:ea:
e0:e5:b5:2c:d9:76:aa:13:5c:7f:cd:4d:7b:8f:c6:
cb:d2:9d:be:77:0d:32:b8:c8:7c:1e:a7:41:8c:6a:
38:be:c1:52:f5:f9:da:b5:d2:54:85:86:8d:d2:e5:
99:0f:5f:e3:e0:3c:75:78:6c:23:3c:f5:9c:52:46:
fd:b4:46:13:72:49:d0:35:be:5c:0e:69:92:4a:79:
2c:02:72:d1:41:76:ae:77:69:7a:e7:8d:d8:76:f4:
6a:90:9d:d8:cb:86:dd:35:d7:92:a9:8d:3b:1f:ab:
af:29:16:f6:f8:0e:cc:3c:50:0b:9a:13:bd:f0:6f:
26:4a:f2:bf:fd:a0:2e:26:3f:6f:d0:9a:d7:7a:e4:
25:06:63:c5:22:90:71:15:7d:79:af:30:1b:93:8f:
04:23:5d:6a:0c:f9:cc:ba:5c:f4:3b:42:40:bc:de:
97:85:7c:13:0b:16:ba:a6:37:76:0f:32:46:d9:ae:
6a:70:26:37:7f:f4:54:59:34:0e:dc:7d:b4:f0:37:
29:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:70:1D:69:17:50:D1:CF:AF:6B:50:E3:A5:EF:68:E9:7C:3C:6C:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2f89339e-fe35-36be-8a81-ad0e051a71c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:7967:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:6c:6c:47:1a:d0:41:e8:89:92:42:c1:3d:45:e7:8b:bb:db:
5f:91:88:90:85:09:11:4d:3f:4c:bb:02:da:64:8c:7e:8e:01:
27:a3:d5:af:ef:b5:fa:7c:14:b3:24:2f:e6:93:60:eb:b1:f0:
61:93:c1:f0:ab:13:1d:50:46:81:6b:62:74:54:30:32:3f:b1:
9d:7d:7c:48:36:3f:74:5f:e9:df:5f:82:2d:d3:b8:1d:67:1c:
99:20:fe:26:79:bf:28:35:3d:ae:6f:9f:c4:ce:b2:dd:b8:0d:
97:d4:da:1f:73:dc:35:90:32:e0:5a:bb:5b:48:5c:60:0c:33:
1f:42:ca:2c:1a:a1:ac:aa:2c:ac:7e:ac:55:ed:0b:d8:b9:f4:
d4:32:dc:3f:e9:b7:f0:25:8b:a3:1c:66:50:a0:9b:66:22:5f:
8b:1f:fe:7b:38:44:c8:a6:11:cc:86:c5:4e:5e:74:f7:17:0a:
e8:cb:4b:1f:2d:cf:d8:5f:ee:9d:d3:bf:ad:b2:32:2c:81:e0:
e8:8a:fb:ac:46:b4:c4:f1:6a:97:98:b9:f4:23:5e:5c:c9:b8:
df:d1:42:4d:09:e9:f3:13:3e:3b:be:64:fb:81:7d:42:8c:5c:
8f:f5:8d:ec:da:c3:95:ab:cb:36:3d:55:eb:ee:e2:6a:22:7d:
7f:bd:4c:b4
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEiNq3Rozq2egBW4KKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDExNTE0MDA1MVoXDTI1MDQxNTEzMDA1MVowLzEtMCsGA1UEAxMk
YzYyOWFjYmItY2I4Yy00MWEzLWI4OGItOTFlZjA3ZDdhMWFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3GjKQG1Ynm83f4k5ir1wlXd4wmXLgkSbCX5
Y0eGlv4OaIinwjyNNuwsa2fDa8RGh3aaEf8DqGYFi+rg5bUs2XaqE1x/zU17j8bL
0p2+dw0yuMh8HqdBjGo4vsFS9fnatdJUhYaN0uWZD1/j4Dx1eGwjPPWcUkb9tEYT
cknQNb5cDmmSSnksAnLRQXaud2l6543YdvRqkJ3Yy4bdNdeSqY07H6uvKRb2+A7M
PFALmhO98G8mSvK//aAuJj9v0JrXeuQlBmPFIpBxFX15rzAbk48EI11qDPnMulz0
O0JAvN6XhXwTCxa6pjd2DzJG2a5qcCY3f/RUWTQO3H208DcpFwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFGlwHWkXUNHPr2tQ46XvaOl8PGzwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmY4OTMzOWUtZmUzNS0z
NmJlLThhODEtYWQwZTA1MWE3MWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAHln
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBibGxHGtBB6ImSQsE9ReeLu9tfkYiQhQkRTT9M
uwLaZIx+jgEno9Wv77X6fBSzJC/mk2DrsfBhk8HwqxMdUEaBa2J0VDAyP7GdfXxI
Nj90X+nfX4It07gdZxyZIP4meb8oNT2ub5/EzrLduA2X1Nofc9w1kDLgWrtbSFxg
DDMfQsosGqGsqiysfqxV7QvYufTUMtw/6bfwJYujHGZQoJtmIl+LH/57OETIphHM
hsVOXnT3Fwroy0sfLc/YX+6d07+tsjIsgeDoivusRrTE8WqXmLn0I15cybjf0UJN
CenzEz47vmT7gX1CjFyP9Y3s2sOVq8s2PVXr7uJqIn1/vUy0
-----END CERTIFICATE-----
Generated at Sat Apr 26 05:18:17 2025 by rpki-client