Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4899d971-0a25-3754-8ea4-3ed235a263bd.roa
File: 4899d971-0a25-3754-8ea4-3ed235a263bd.roa (raw, json)
Hash identifier: 9oQLksKqK9wCFU5AiIqX8/k8fuh8zR/dZ2eYLuL5tsk=
Subject key identifier: 40:ED:A4:4E:8A:11:46:45:8C:F5:E1:29:22:94:9B:F6:E5:12:7A:E8
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848451578836BCF74D9904CBD00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4899d971-0a25-3754-8ea4-3ed235a263bd.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 36630
IP address blocks: 2001:500:122::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:78:83:6b:cf:74:d9:90:4c:bd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=b72b56a5-1d03-40ae-9756-13560680a48a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b9:b7:7a:9d:b3:33:23:a5:92:60:ee:9e:ff:
71:84:5e:8d:45:92:db:a9:9f:bd:64:08:aa:45:80:
59:96:22:47:8e:ab:7e:41:34:65:38:59:1d:f9:24:
05:35:da:1a:fc:1b:f0:78:28:c1:e4:80:68:db:82:
bc:e5:37:39:e7:c5:a1:d7:83:2e:cd:d4:4a:73:a3:
53:92:34:fc:2a:80:21:f2:9f:0c:6f:56:78:e4:90:
cc:f6:36:bb:20:c2:86:51:bd:d4:5c:49:6f:cb:3a:
96:6b:e8:26:59:49:cb:53:02:cc:e0:ea:90:25:16:
35:18:74:6d:99:9f:83:11:90:5c:5c:0b:c3:c2:82:
94:51:05:03:6e:f8:78:15:56:03:c4:8f:47:28:4e:
b1:15:a6:b0:85:c4:df:46:bb:c6:78:35:6e:ba:b3:
b1:da:80:4c:77:af:6c:fb:eb:24:22:42:36:3b:0a:
08:c1:52:4f:ec:6c:e5:5b:76:7a:dc:7b:7c:6c:03:
98:c2:0b:04:57:34:9b:02:00:22:6b:94:32:6b:0c:
62:b4:71:ad:7a:26:f1:87:de:d6:ff:b1:51:93:4b:
ac:32:34:be:9b:e7:d3:4f:b5:b1:cf:1a:e2:ec:9c:
82:c9:15:ab:f8:0c:8f:00:5d:21:01:bc:5a:af:50:
d0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:ED:A4:4E:8A:11:46:45:8C:F5:E1:29:22:94:9B:F6:E5:12:7A:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4899d971-0a25-3754-8ea4-3ed235a263bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:122:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b9:10:f5:ec:6d:ca:a8:0c:7d:97:be:00:fd:bc:74:a4:9a:4f:
9a:8c:c5:76:1f:06:61:b7:bb:a7:fe:bb:72:70:ad:6e:65:ab:
4c:af:dd:2d:f6:90:52:c8:1d:c1:e1:3a:21:02:b2:fa:d1:e4:
29:f7:85:bb:46:52:a9:8a:e9:5e:d8:a0:32:5b:57:cc:70:80:
9e:76:0c:c0:c2:09:63:7a:76:0f:ea:fe:f7:06:fa:00:e6:b7:
ff:80:67:4b:e2:9a:02:a1:1b:fa:0e:63:08:5b:4d:c7:dd:91:
25:98:0b:45:64:43:b4:18:5b:fb:77:50:67:2f:33:24:84:ef:
87:3a:01:81:48:b5:cb:dd:53:f0:49:a9:20:be:27:6e:d5:38:
b4:2e:f4:3b:2b:98:ed:4a:ba:e5:1a:49:c7:8e:99:df:c1:5c:
9c:71:4d:4f:db:96:fc:39:2e:74:28:dd:49:20:b5:c8:0b:36:
9e:07:c7:db:8e:0d:f1:f9:1e:c7:b2:3c:67:21:d7:30:00:9e:
4b:3e:25:57:2c:d9:ce:11:76:ca:42:9a:f8:6d:8e:5e:6c:f4:
de:00:a7:ab:e9:9f:a9:08:02:99:27:e1:71:58:aa:dd:af:7f:
95:24:31:e9:5e:b0:5c:5c:62:61:2b:34:d7:1e:09:8a:16:1a:
58:df:93:47
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEhFFXiDa8902ZBMvQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIyMDE0MDA1MVoXDTI1MDMyMDEzMDA1MVowLzEtMCsGA1UEAxMk
YjcyYjU2YTUtMWQwMy00MGFlLTk3NTYtMTM1NjA2ODBhNDhhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7m3ep2zMyOlkmDunv9xhF6NRZLbqZ+9ZAiq
RYBZliJHjqt+QTRlOFkd+SQFNdoa/BvweCjB5IBo24K85Tc558Wh14MuzdRKc6NT
kjT8KoAh8p8Mb1Z45JDM9ja7IMKGUb3UXElvyzqWa+gmWUnLUwLM4OqQJRY1GHRt
mZ+DEZBcXAvDwoKUUQUDbvh4FVYDxI9HKE6xFaawhcTfRrvGeDVuurOx2oBMd69s
++skIkI2OwoIwVJP7GzlW3Z63Ht8bAOYwgsEVzSbAgAia5QyawxitHGteibxh97W
/7FRk0usMjS+m+fTT7Wxzxri7JyCyRWr+AyPAF0hAbxar1DQmQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFEDtpE6KEUZFjPXhKSKUm/blEnroMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDg5OWQ5NzEtMGEyNS0z
NzU0LThlYTQtM2VkMjM1YTI2M2JkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEi
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQC5EPXsbcqoDH2XvgD9vHSkmk+ajMV2HwZht7un
/rtycK1uZatMr90t9pBSyB3B4TohArL60eQp94W7RlKpiule2KAyW1fMcICedgzA
wgljenYP6v73BvoA5rf/gGdL4poCoRv6DmMIW03H3ZElmAtFZEO0GFv7d1BnLzMk
hO+HOgGBSLXL3VPwSakgvidu1Ti0LvQ7K5jtSrrlGknHjpnfwVyccU1P25b8OS50
KN1JILXICzaeB8fbjg3x+R7HsjxnIdcwAJ5LPiVXLNnOEXbKQpr4bY5ebPTeAKer
6Z+pCAKZJ+FxWKrdr3+VJDHpXrBcXGJhKzTXHgmKFhpY35NH
-----END CERTIFICATE-----
Generated at Sat Apr 26 00:40:40 2025 by rpki-client