Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/53229f65-cd98-32c4-abd6-a8d6b54038e1.roa
File: 53229f65-cd98-32c4-abd6-a8d6b54038e1.roa (raw, json)
Hash identifier: Ged2x8lXQ7+w/eviIDr/qW7FGTG1X13yYa1Y6hfxlWQ=
Subject key identifier: B4:58:44:2C:71:68:35:60:43:FA:86:A4:6C:7A:27:1D:85:F4:6A:5F
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858484AAADA63040CC194DD64F100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/53229f65-cd98-32c4-abd6-a8d6b54038e1.roa
Signing time: Sun 22 Dec 2024 14:00:51 +0000
ROA not before: Sun 22 Dec 2024 14:00:51 +0000
ROA not after: Sat 22 Mar 2025 13:00:51 +0000
asID: 396554
IP address blocks: 2001:500:121::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4a:aa:da:63:04:0c:c1:94:dd:64:f1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 22 14:00:51 2024 GMT
Not After : Mar 22 13:00:51 2025 GMT
Subject: CN=6074c4b2-d10a-4fd1-a251-70a1436c1231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:55:22:4e:f2:5a:9e:46:25:2e:b6:d3:71:4a:
0c:97:d8:48:7a:8b:ae:c0:07:f5:c6:74:58:97:73:
77:38:93:8a:36:32:5e:69:bd:9b:46:85:c4:83:f1:
42:2f:02:7c:2c:c6:b4:d8:c9:b1:f2:19:6b:ab:ff:
88:04:ea:6d:da:a9:ac:ac:db:82:24:4a:7a:15:bf:
b2:b4:9c:86:22:c6:b3:3d:8f:9e:a9:93:7b:90:94:
e8:39:83:45:1d:85:06:bd:f3:2e:5f:44:04:72:ff:
ba:24:33:59:43:dc:83:ba:38:5b:08:10:3b:f3:e7:
0c:a4:ec:7f:c2:23:92:27:7d:0f:07:0f:8f:63:4a:
55:6d:52:aa:f2:9d:9d:f9:0b:0f:ae:94:d7:fb:fb:
2b:81:57:f6:95:90:91:51:b9:10:3c:60:cf:b7:34:
b3:35:f5:5a:2d:47:cb:89:38:f7:72:69:6a:e3:1b:
f5:76:36:7c:6b:ea:9a:84:9e:8d:34:7c:9f:0c:bb:
55:31:ea:53:51:cf:99:fc:3b:fc:92:bc:26:60:0b:
45:f4:c1:71:6e:cb:86:e5:fd:79:e4:d9:73:31:c1:
ff:48:d7:4c:96:b0:8f:99:1a:c5:48:d0:39:8d:a3:
37:9b:e7:62:a2:e7:43:96:1a:ea:45:f3:20:08:fd:
f2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:58:44:2C:71:68:35:60:43:FA:86:A4:6C:7A:27:1D:85:F4:6A:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/53229f65-cd98-32c4-abd6-a8d6b54038e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:121:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:6c:6f:82:83:05:ec:5f:cf:21:85:10:77:4f:1c:bd:2d:12:
40:4f:0c:02:ad:d5:35:51:14:20:88:47:f2:78:30:a2:6e:f1:
c0:1f:04:f4:d7:fe:d7:a8:4c:fd:1c:1a:fc:e7:f3:eb:d3:30:
c0:c6:82:e0:ec:2c:f8:8d:79:b2:fa:2c:e8:55:5e:c8:7c:b0:
f8:84:14:f7:ce:f9:19:8e:e3:d0:c4:28:fc:09:65:0a:0e:a3:
ad:cc:6c:ee:55:84:9e:9f:e0:f2:81:27:e8:3d:25:77:27:be:
61:48:3f:ac:42:18:30:da:0d:82:fe:43:ee:7b:a8:a0:d2:eb:
a1:51:b7:fd:cf:dc:fc:07:d4:96:00:b3:6d:20:7a:07:2b:e1:
42:04:63:d3:80:9b:1c:e0:e3:98:d2:31:e6:37:52:4b:f0:5d:
2a:cd:6b:df:64:28:52:01:7a:46:c1:71:38:fe:76:c1:68:66:
cf:0e:83:52:bc:9c:16:3d:b2:46:bd:fa:f8:8f:fd:30:c7:9d:
6c:e4:e1:aa:6b:c5:61:cf:8a:1f:f0:97:3c:01:04:13:5a:0a:
0d:a6:06:c5:e9:cd:90:a3:c3:47:90:bf:4c:01:79:8d:0a:97:
b8:01:73:cb:62:0d:c0:7a:b7:92:6e:92:81:87:3f:06:5c:ec:
e9:2a:ca:6d
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEhKqtpjBAzBlN1k8QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIyMjE0MDA1MVoXDTI1MDMyMjEzMDA1MVowLzEtMCsGA1UEAxMk
NjA3NGM0YjItZDEwYS00ZmQxLWEyNTEtNzBhMTQzNmMxMjMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVUiTvJankYlLrbTcUoMl9hIeouuwAf1xnRY
l3N3OJOKNjJeab2bRoXEg/FCLwJ8LMa02Mmx8hlrq/+IBOpt2qmsrNuCJEp6Fb+y
tJyGIsazPY+eqZN7kJToOYNFHYUGvfMuX0QEcv+6JDNZQ9yDujhbCBA78+cMpOx/
wiOSJ30PBw+PY0pVbVKq8p2d+QsPrpTX+/srgVf2lZCRUbkQPGDPtzSzNfVaLUfL
iTj3cmlq4xv1djZ8a+qahJ6NNHyfDLtVMepTUc+Z/Dv8krwmYAtF9MFxbsuG5f15
5NlzMcH/SNdMlrCPmRrFSNA5jaM3m+dioudDlhrqRfMgCP3yywIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFLRYRCxxaDVgQ/qGpGx6Jx2F9GpfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTMyMjlmNjUtY2Q5OC0z
MmM0LWFiZDYtYThkNmI1NDAzOGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQABbG+CgwXsX88hhRB3Txy9LRJATwwCrdU1URQg
iEfyeDCibvHAHwT01/7XqEz9HBr85/Pr0zDAxoLg7Cz4jXmy+izoVV7IfLD4hBT3
zvkZjuPQxCj8CWUKDqOtzGzuVYSen+DygSfoPSV3J75hSD+sQhgw2g2C/kPue6ig
0uuhUbf9z9z8B9SWALNtIHoHK+FCBGPTgJsc4OOY0jHmN1JL8F0qzWvfZChSAXpG
wXE4/nbBaGbPDoNSvJwWPbJGvfr4j/0wx51s5OGqa8Vhz4of8Jc8AQQTWgoNpgbF
6c2Qo8NHkL9MAXmNCpe4AXPLYg3AereSbpKBhz8GXOzpKspt
-----END CERTIFICATE-----
Generated at Fri Apr 25 20:17:36 2025 by rpki-client