Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3af3f3f8-4fa2-3c49-85a8-ae989b863def.roa
File: 3af3f3f8-4fa2-3c49-85a8-ae989b863def.roa (raw, json)
Hash identifier: y9OY1U0MqQJ4Vt5oJ8KTVIHSeTS9Csxvj4GJa1RBX3w=
Subject key identifier: B9:BE:3F:D0:9B:83:A2:69:6D:FC:E4:5A:BC:3A:71:71:18:8D:29:8F
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489E5E4A19BA57A138641F1F80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3af3f3f8-4fa2-3c49-85a8-ae989b863def.roa
Signing time: Tue 21 Jan 2025 13:34:35 +0000
ROA not before: Tue 21 Jan 2025 13:34:35 +0000
ROA not after: Mon 21 Apr 2025 12:34:35 +0000
asID: 396558
IP address blocks: 2001:503:39c1::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:5e:4a:19:ba:57:a1:38:64:1f:1f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 21 13:34:35 2025 GMT
Not After : Apr 21 12:34:35 2025 GMT
Subject: CN=9ac2a27f-3a2e-49b2-b09a-2525da418349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d1:10:d8:a3:43:2e:51:c9:1f:32:6f:d1:8b:
93:ff:2c:98:9b:ea:12:5e:f3:03:b6:a0:e3:b9:f7:
8e:c3:77:39:e7:81:5a:59:a3:aa:0c:a8:2b:7b:19:
bc:5b:b8:3c:c8:de:92:8d:9c:51:7c:b1:56:8a:9c:
57:6d:06:24:6c:d4:2b:23:7a:ab:70:04:73:29:fd:
f6:88:8e:61:00:da:74:b9:f6:db:7d:5e:a1:24:e8:
54:b8:6e:6a:df:53:56:c9:19:64:eb:27:00:80:b9:
4d:d4:66:ad:39:d4:ba:56:e1:27:20:83:ab:bf:76:
44:5f:54:d8:21:87:2d:29:79:15:00:87:13:36:b3:
71:39:7e:91:40:61:85:f8:00:0a:70:c7:7c:1c:c8:
96:27:bc:b0:bf:f7:ec:f5:bc:b9:78:bf:37:6b:1a:
62:83:9c:d1:d7:32:0c:a6:7a:6d:e4:f2:fb:49:87:
4e:5c:67:23:3e:e9:b7:1b:27:70:6d:9a:0f:13:91:
cb:a2:ab:0a:18:36:b6:70:c8:ea:f7:8a:d5:90:a2:
e0:0c:f4:53:14:0e:24:76:a6:38:f9:5c:c5:14:49:
7a:53:8d:ef:58:26:57:c4:ef:ce:81:2b:f5:8b:5e:
91:8e:4f:cb:b3:36:26:97:b1:cc:e0:b0:82:aa:a9:
d7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:BE:3F:D0:9B:83:A2:69:6D:FC:E4:5A:BC:3A:71:71:18:8D:29:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3af3f3f8-4fa2-3c49-85a8-ae989b863def.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:39c1:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:79:83:bc:97:a7:dc:ff:bf:b0:39:3d:e5:15:f4:14:4b:8e:
48:f2:66:9a:83:6b:06:75:e4:52:4b:e8:10:69:99:70:a5:c0:
8f:cc:73:42:e0:ab:7b:de:d7:99:ad:26:aa:85:ae:c6:0b:6a:
2a:9d:1b:54:8a:6d:26:f2:30:8c:16:f1:b1:93:10:48:2b:59:
f3:25:5a:7b:d8:1c:2e:14:ef:e6:ff:44:e0:2c:1b:27:2f:fc:
f0:4f:8c:d1:e7:21:ff:50:83:c5:15:ee:fa:d3:42:0d:03:e3:
67:ef:a4:68:ac:15:45:d6:84:7d:ca:47:af:86:29:12:57:0c:
76:37:be:b8:87:e1:a8:ea:6f:70:c4:a3:f2:e3:8a:1c:1c:a5:
56:c9:3d:10:9f:53:69:69:f2:d7:27:9a:3e:39:74:af:b5:dd:
f1:40:71:42:6b:51:76:d2:ed:de:2f:80:97:f7:71:12:28:82:
ff:09:a4:dc:d1:e8:1a:6a:d5:9d:28:30:87:c5:8c:d4:34:a7:
56:e5:b0:06:c0:5b:89:84:7e:4e:e6:78:5d:2a:3b:15:d5:66:
d7:77:35:2d:6d:f9:f4:6e:27:83:66:26:52:a1:7f:9e:25:c5:
23:fe:15:f0:f9:55:95:b1:0f:33:6e:6c:f5:a2:23:2e:6f:7e:
84:bf:b4:7e
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEieXkoZulehOGQfH4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDEyMTEzMzQzNVoXDTI1MDQyMTEyMzQzNVowLzEtMCsGA1UEAxMk
OWFjMmEyN2YtM2EyZS00OWIyLWIwOWEtMjUyNWRhNDE4MzQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldEQ2KNDLlHJHzJv0YuT/yyYm+oSXvMDtqDj
ufeOw3c554FaWaOqDKgrexm8W7g8yN6SjZxRfLFWipxXbQYkbNQrI3qrcARzKf32
iI5hANp0ufbbfV6hJOhUuG5q31NWyRlk6ycAgLlN1GatOdS6VuEnIIOrv3ZEX1TY
IYctKXkVAIcTNrNxOX6RQGGF+AAKcMd8HMiWJ7ywv/fs9by5eL83axpig5zR1zIM
pnpt5PL7SYdOXGcjPum3GydwbZoPE5HLoqsKGDa2cMjq94rVkKLgDPRTFA4kdqY4
+VzFFEl6U43vWCZXxO/OgSv1i16Rjk/LszYml7HM4LCCqqnXdQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFLm+P9Cbg6JpbfzkWrw6cXEYjSmPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2FmM2YzZjgtNGZhMi0z
YzQ5LTg1YTgtYWU5ODliODYzZGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAznB
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQA2eYO8l6fc/7+wOT3lFfQUS45I8maag2sGdeRS
S+gQaZlwpcCPzHNC4Kt73teZrSaqha7GC2oqnRtUim0m8jCMFvGxkxBIK1nzJVp7
2BwuFO/m/0TgLBsnL/zwT4zR5yH/UIPFFe7600INA+Nn76RorBVF1oR9ykevhikS
Vwx2N764h+Go6m9wxKPy44ocHKVWyT0Qn1NpafLXJ5o+OXSvtd3xQHFCa1F20u3e
L4CX93ESKIL/CaTc0egaatWdKDCHxYzUNKdW5bAGwFuJhH5O5nhdKjsV1WbXdzUt
bfn0bieDZiZSoX+eJcUj/hXw+VWVsQ8zbmz1oiMub36Ev7R+
-----END CERTIFICATE-----
Generated at Fri Apr 25 19:49:06 2025 by rpki-client