Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/49b3848c-eb82-3ffb-8a43-4b3c43efd703.roa
File: 49b3848c-eb82-3ffb-8a43-4b3c43efd703.roa (raw, json)
Hash identifier: jeCFiazywZMxvuuCkINN6W+KXcJCUHiqamXf8biVeAQ=
Subject key identifier: 4E:F9:A0:AB:C8:32:8B:00:82:F2:C5:8B:E7:6C:1C:11:4E:5B:3A:9C
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858482C1BA9F0A88D014BC2988280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/49b3848c-eb82-3ffb-8a43-4b3c43efd703.roa
Signing time: Wed 11 Dec 2024 15:18:12 +0000
ROA not before: Wed 11 Dec 2024 15:18:12 +0000
ROA not after: Tue 11 Mar 2025 14:18:12 +0000
asID: 396608
IP address blocks: 2620:0:5050::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2c:1b:a9:f0:a8:8d:01:4b:c2:98:82:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 11 15:18:12 2024 GMT
Not After : Mar 11 14:18:12 2025 GMT
Subject: CN=be45a2d7-df35-45c8-913f-d8702ef4a923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2c:e3:62:18:26:5c:71:c0:58:25:19:73:e8:
51:ad:a9:6d:ad:4a:05:41:a6:97:9e:d8:51:b4:4f:
24:61:0a:75:01:b9:8c:5f:61:eb:94:f7:69:81:4f:
36:c8:e7:12:be:be:fb:f1:08:2a:61:2a:6a:09:8e:
64:da:c9:ee:70:8a:d5:a5:ae:80:2f:2b:45:0a:cd:
a4:92:0e:5b:e8:a3:70:5e:4f:26:91:d8:56:5f:67:
09:19:ad:3a:c0:6a:6d:62:4b:22:26:1d:01:5e:86:
74:5e:ee:45:a9:29:2a:43:56:8e:b0:59:12:ad:a9:
88:5e:24:30:5e:82:e3:68:66:10:1b:39:c9:7a:10:
f3:3d:b0:c9:f7:9b:1c:23:f4:56:22:4e:c5:ed:23:
ae:f0:ba:96:9b:c6:a2:bd:9f:3a:3e:a4:73:73:77:
5a:ef:70:27:79:a0:9d:3c:4d:d7:9d:fd:d4:25:49:
1a:8e:53:68:70:28:df:99:c6:8c:ff:3b:b9:a6:02:
dd:53:22:84:73:58:3c:69:ae:05:dc:ff:b6:b5:6f:
d2:7f:1b:71:24:de:66:35:c0:fe:fb:00:f4:d8:9c:
2d:42:19:39:c0:a9:bd:b4:88:14:d6:9a:bb:f7:b9:
a0:d9:d5:8e:f9:8a:f6:95:77:62:a3:31:3e:0f:a2:
c6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F9:A0:AB:C8:32:8B:00:82:F2:C5:8B:E7:6C:1C:11:4E:5B:3A:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/49b3848c-eb82-3ffb-8a43-4b3c43efd703.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:0:5050:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:21:85:15:53:42:96:e5:a5:02:95:6e:57:31:61:e6:b7:82:
28:30:79:28:f8:fa:ba:e8:0e:eb:20:c4:56:a6:c4:42:1a:36:
95:db:29:91:a4:ae:09:c8:66:34:a8:da:b6:84:06:a6:51:e2:
70:fe:26:2b:d2:7e:aa:73:5c:f5:f3:5c:e9:8b:e8:ce:0c:19:
42:85:7e:13:2e:30:25:47:bf:ca:3d:94:2f:09:9e:ac:3c:08:
8a:08:32:d4:aa:de:3f:6c:be:57:66:e6:32:45:b9:01:d6:65:
ea:ea:1e:0c:5f:ae:2c:58:55:f6:30:ed:1c:3b:de:c0:17:77:
fc:8d:c3:e1:a4:d5:9f:23:95:89:ff:29:5e:35:42:17:15:db:
f9:cd:9b:26:3a:9f:fc:0a:b5:f9:1c:39:75:5e:17:74:07:b8:
c2:7f:11:ef:2b:ab:b3:63:e4:fc:61:5e:90:39:96:29:5d:2f:
e3:63:de:45:dd:a6:8a:b0:e8:0a:d4:91:0f:ee:5a:6a:8b:1f:
46:ee:50:77:10:be:e2:16:bb:b0:a7:f3:9e:4c:0d:73:ff:26:
a1:ae:7c:ca:89:a4:88:63:29:db:e5:86:42:e1:23:5c:12:8e:
16:ed:6b:85:64:40:94:76:b4:5d:03:4a:0e:80:92:2f:8e:8d:
9a:06:2b:0f
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEgsG6nwqI0BS8KYgoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIxMTE1MTgxMloXDTI1MDMxMTE0MTgxMlowLzEtMCsGA1UEAxMk
YmU0NWEyZDctZGYzNS00NWM4LTkxM2YtZDg3MDJlZjRhOTIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySzjYhgmXHHAWCUZc+hRraltrUoFQaaXnthR
tE8kYQp1AbmMX2HrlPdpgU82yOcSvr778QgqYSpqCY5k2snucIrVpa6ALytFCs2k
kg5b6KNwXk8mkdhWX2cJGa06wGptYksiJh0BXoZ0Xu5FqSkqQ1aOsFkSramIXiQw
XoLjaGYQGznJehDzPbDJ95scI/RWIk7F7SOu8LqWm8aivZ86PqRzc3da73AneaCd
PE3Xnf3UJUkajlNocCjfmcaM/zu5pgLdUyKEc1g8aa4F3P+2tW/SfxtxJN5mNcD+
+wD02JwtQhk5wKm9tIgU1pq797mg2dWO+Yr2lXdiozE+D6LGrQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFE75oKvIMosAgvLFi+dsHBFOWzqcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDliMzg0OGMtZWI4Mi0z
ZmZiLThhNDMtNGIzYzQzZWZkNzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAAFBQ
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBxIYUVU0KW5aUClW5XMWHmt4IoMHko+Pq66A7r
IMRWpsRCGjaV2ymRpK4JyGY0qNq2hAamUeJw/iYr0n6qc1z181zpi+jODBlChX4T
LjAlR7/KPZQvCZ6sPAiKCDLUqt4/bL5XZuYyRbkB1mXq6h4MX64sWFX2MO0cO97A
F3f8jcPhpNWfI5WJ/yleNUIXFdv5zZsmOp/8CrX5HDl1Xhd0B7jCfxHvK6uzY+T8
YV6QOZYpXS/jY95F3aaKsOgK1JEP7lpqix9G7lB3EL7iFruwp/OeTA1z/yahrnzK
iaSIYynb5YZC4SNcEo4W7WuFZECUdrRdA0oOgJIvjo2aBisP
-----END CERTIFICATE-----
Generated at Fri Apr 25 20:07:09 2025 by rpki-client