Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/471c8e28-8998-3a61-9d0a-48fc3062cb19.roa
File: 471c8e28-8998-3a61-9d0a-48fc3062cb19.roa (raw, json)
Hash identifier: zyZNZ3B+WjS473YbF+mZkXaIUyT6n9vVQ4a2xEC+Lu8=
Subject key identifier: DC:E0:DD:DA:75:34:EA:95:23:F4:71:05:B4:97:3B:E3:60:62:67:D9
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584858A04CD5BEEA9E4495063400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/471c8e28-8998-3a61-9d0a-48fc3062cb19.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 397197
IP address blocks: 2001:500:120::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:4c:d5:be:ea:9e:44:95:06:34:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=63658602-3c75-4204-85b0-92b396d6b08f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:dc:6d:e7:1f:93:9a:52:f9:91:6a:58:dd:90:
51:87:e3:2b:46:73:db:2e:f3:01:21:1c:33:19:eb:
f2:08:57:9b:3b:cf:c4:b1:91:a0:7c:24:e6:e7:24:
f9:f5:df:d0:f5:1d:c6:d4:38:00:31:b2:24:fc:33:
05:36:9d:6e:6e:a1:ea:48:e0:cc:3e:0d:c4:46:26:
8f:35:e1:e6:f0:41:2c:70:9c:e8:c0:e4:26:54:7d:
bc:e1:6f:f2:a3:e5:42:c4:72:ab:87:e2:0c:80:bc:
3c:e8:ef:f9:11:92:24:32:f5:0e:3f:c4:2c:9d:01:
5e:2d:1d:2b:26:56:d4:0f:44:10:e8:45:7b:eb:f8:
d5:39:10:1c:d2:6f:d1:ad:d4:96:68:f9:63:f2:e2:
bd:a7:96:a0:29:26:ef:05:48:b8:87:ff:b2:9d:16:
97:cc:91:b7:2d:eb:2c:70:2b:3c:0d:92:23:40:18:
02:27:93:23:88:37:6c:50:fb:0c:43:71:a5:d2:ad:
05:22:1a:a8:2a:45:4f:1b:1d:0f:b7:fd:66:4a:4f:
2a:ff:cf:7e:03:d8:bc:99:b8:8d:a4:b1:6f:95:9f:
c5:c9:21:be:6b:36:9a:7a:06:11:d4:ad:bb:56:c6:
5b:05:bf:51:54:b5:19:19:ac:43:ec:17:8e:94:75:
1d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E0:DD:DA:75:34:EA:95:23:F4:71:05:B4:97:3B:E3:60:62:67:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/471c8e28-8998-3a61-9d0a-48fc3062cb19.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:120:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:3a:e6:c7:26:a1:38:3c:6c:1f:4b:b2:22:54:43:f7:f5:3f:
99:dc:a9:7d:e0:90:43:1d:28:41:10:45:59:18:21:b7:bd:66:
99:8c:df:7e:3e:14:94:65:e8:0a:74:e9:05:74:26:de:cb:53:
53:1d:0f:9d:4e:64:5b:bc:8f:2a:24:0e:17:00:dd:29:9f:6f:
31:27:2d:02:7e:45:2f:63:5d:9b:1e:f7:6a:48:30:2e:43:0f:
61:ae:e8:12:05:c0:33:2a:c0:98:b8:c1:2a:aa:c1:82:16:7a:
ec:d2:66:13:02:bf:bf:98:9c:e0:38:a9:3c:30:47:8d:b8:69:
5f:60:b7:bd:f5:e0:4c:6c:d3:c8:da:ae:01:88:19:d5:d9:16:
e5:7f:c3:72:92:20:06:ed:51:8f:44:38:69:c2:43:5b:d8:42:
4d:9e:47:a4:27:21:46:a7:86:e0:92:85:b5:70:7e:f9:07:8e:
53:31:51:08:2c:0a:59:06:42:64:7d:fc:de:e0:e6:7a:11:6b:
bd:45:3f:e1:62:97:6c:b7:92:df:cc:70:6a:6f:07:52:eb:a6:
eb:55:59:68:ff:25:aa:7b:e2:6c:be:26:0a:27:9f:67:ea:06:
c9:5d:a1:0d:3f:24:fe:82:cf:35:f3:1e:0e:1f:70:ee:5d:f4:
20:f2:d5:83
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEhYoEzVvuqeRJUGNAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIyNzE0MDA1MloXDTI1MDMyNzEzMDA1MlowLzEtMCsGA1UEAxMk
NjM2NTg2MDItM2M3NS00MjA0LTg1YjAtOTJiMzk2ZDZiMDhmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNxt5x+TmlL5kWpY3ZBRh+MrRnPbLvMBIRwz
GevyCFebO8/EsZGgfCTm5yT59d/Q9R3G1DgAMbIk/DMFNp1ubqHqSODMPg3ERiaP
NeHm8EEscJzowOQmVH284W/yo+VCxHKrh+IMgLw86O/5EZIkMvUOP8QsnQFeLR0r
JlbUD0QQ6EV76/jVORAc0m/RrdSWaPlj8uK9p5agKSbvBUi4h/+ynRaXzJG3Less
cCs8DZIjQBgCJ5MjiDdsUPsMQ3Gl0q0FIhqoKkVPGx0Pt/1mSk8q/89+A9i8mbiN
pLFvlZ/FySG+azaaegYR1K27VsZbBb9RVLUZGaxD7BeOlHUdLQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFNzg3dp1NOqVI/RxBbSXO+NgYmfZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDcxYzhlMjgtODk5OC0z
YTYxLTlkMGEtNDhmYzMwNjJjYjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEg
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCwOubHJqE4PGwfS7IiVEP39T+Z3Kl94JBDHShB
EEVZGCG3vWaZjN9+PhSUZegKdOkFdCbey1NTHQ+dTmRbvI8qJA4XAN0pn28xJy0C
fkUvY12bHvdqSDAuQw9hrugSBcAzKsCYuMEqqsGCFnrs0mYTAr+/mJzgOKk8MEeN
uGlfYLe99eBMbNPI2q4BiBnV2Rblf8NykiAG7VGPRDhpwkNb2EJNnkekJyFGp4bg
koW1cH75B45TMVEILApZBkJkffze4OZ6EWu9RT/hYpdst5LfzHBqbwdS66brVVlo
/yWqe+JsviYKJ59n6gbJXaENPyT+gs818x4OH3DuXfQg8tWD
-----END CERTIFICATE-----
Generated at Fri Apr 25 20:30:19 2025 by rpki-client