Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5ba4aa41-7348-34a9-ab7a-2bc6c54b4bdd.roa
File: 5ba4aa41-7348-34a9-ab7a-2bc6c54b4bdd.roa (raw, json)
Hash identifier: 12rTHBQ6LXH8SBqHD0DK1gb3QlhmM5a2oSQnNYPr8SY=
Subject key identifier: 03:7E:B5:7F:3E:BF:F3:A7:8E:3F:7D:53:0B:D8:C7:65:26:9D:CA:B9
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848451577CF69A01A05CDBAD0DA
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5ba4aa41-7348-34a9-ab7a-2bc6c54b4bdd.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 397197
IP address blocks: 2001:500:122::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:77:cf:69:a0:1a:05:cd:ba:d0:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=0750d4f8-f75e-416f-bcac-ffe2d679d9fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:30:8b:e9:1a:04:17:a7:32:60:6a:a3:04:1c:
b5:92:94:d9:29:77:c3:54:32:3a:53:83:89:71:c1:
21:1d:57:94:99:d1:36:d2:14:2f:44:8c:dc:3b:71:
03:14:43:1c:78:88:71:3c:d7:1d:9a:7b:bc:f1:67:
e6:0d:e9:c7:aa:e6:8c:05:9e:60:52:df:a3:7e:fa:
6e:c7:46:52:92:eb:eb:0f:0d:30:8f:ab:4d:9a:9a:
0f:b4:db:58:63:e3:27:f5:22:1c:06:04:69:55:d3:
13:8f:10:e4:c3:ca:35:00:60:ad:64:ef:e8:36:29:
ad:9a:b2:aa:b6:56:b3:bb:2b:d4:a2:f2:7e:63:cf:
65:26:b3:fb:dd:d3:2c:fd:d8:fa:aa:94:80:f8:f7:
18:25:a7:36:1b:39:07:67:e6:ca:66:70:95:74:43:
f8:99:c1:81:43:78:8f:1a:ea:9a:c0:25:b1:8f:e3:
d7:94:9e:13:2f:c2:01:ea:59:0f:53:3c:85:f2:76:
69:b6:69:c7:ea:f6:48:dd:72:2a:a3:15:9e:3b:48:
fb:f3:df:b9:ee:7a:d9:32:7a:29:f7:04:60:3f:a4:
b3:44:a4:9b:74:db:8a:ee:e1:c4:44:db:55:b9:b8:
99:cf:dd:58:fb:c9:2e:cd:6b:ac:45:db:3e:d0:df:
9a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:7E:B5:7F:3E:BF:F3:A7:8E:3F:7D:53:0B:D8:C7:65:26:9D:CA:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5ba4aa41-7348-34a9-ab7a-2bc6c54b4bdd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:122:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:56:53:9a:2a:2c:a9:9d:01:14:0d:dc:e5:c7:81:d7:25:fd:
ce:3c:d5:bc:0b:d1:3f:b0:d0:7d:0a:62:b3:2c:fb:31:a8:a0:
6a:88:e2:5e:86:df:58:e3:b8:8e:8a:31:f2:99:d1:36:3f:ff:
09:3f:36:9f:3a:d7:33:4d:68:5c:fc:2f:60:7c:bf:12:f3:b6:
d1:e1:92:29:e4:ee:bb:44:2c:61:9c:88:9d:22:2d:5f:0f:0d:
5a:a6:3d:d9:6f:13:bf:89:ad:2c:d3:16:50:2a:56:19:b7:a5:
e1:2b:a0:16:e5:b8:61:7d:c7:87:88:7f:e7:65:ae:4e:79:64:
88:58:ff:c9:38:b8:40:d7:f5:5e:2c:29:a5:ed:72:43:0f:3b:
9e:0b:cc:42:23:2c:d2:85:d6:97:3b:c5:d0:dc:4f:69:d0:c4:
4b:30:4a:ad:06:be:f4:b7:60:be:58:99:56:1a:84:f1:1c:ac:
86:d4:98:c2:54:11:a9:d4:ab:d3:64:4a:bc:58:03:90:46:ad:
97:ee:72:0a:da:61:8c:26:8b:01:3d:38:03:65:87:8f:79:69:
5e:3f:60:0e:95:2a:a3:80:b5:0b:ce:66:94:7f:ee:ff:22:06:
46:50:f7:b5:16:06:f5:d3:d4:2e:93:d4:e0:78:a4:4d:e9:7f:
3e:32:6b:7a
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEhFFXfPaaAaBc260NowDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIyMDE0MDA1MVoXDTI1MDMyMDEzMDA1MVowLzEtMCsGA1UEAxMk
MDc1MGQ0ZjgtZjc1ZS00MTZmLWJjYWMtZmZlMmQ2NzlkOWZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTCL6RoEF6cyYGqjBBy1kpTZKXfDVDI6U4OJ
ccEhHVeUmdE20hQvRIzcO3EDFEMceIhxPNcdmnu88WfmDenHquaMBZ5gUt+jfvpu
x0ZSkuvrDw0wj6tNmpoPtNtYY+Mn9SIcBgRpVdMTjxDkw8o1AGCtZO/oNimtmrKq
tlazuyvUovJ+Y89lJrP73dMs/dj6qpSA+PcYJac2GzkHZ+bKZnCVdEP4mcGBQ3iP
GuqawCWxj+PXlJ4TL8IB6lkPUzyF8nZptmnH6vZI3XIqoxWeO0j789+57nrZMnop
9wRgP6SzRKSbdNuK7uHERNtVubiZz91Y+8kuzWusRds+0N+aBQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFAN+tX8+v/Onjj99UwvYx2Umncq5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNWJhNGFhNDEtNzM0OC0z
NGE5LWFiN2EtMmJjNmM1NGI0YmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEi
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQChVlOaKiypnQEUDdzlx4HXJf3OPNW8C9E/sNB9
CmKzLPsxqKBqiOJeht9Y47iOijHymdE2P/8JPzafOtczTWhc/C9gfL8S87bR4ZIp
5O67RCxhnIidIi1fDw1apj3ZbxO/ia0s0xZQKlYZt6XhK6AW5bhhfceHiH/nZa5O
eWSIWP/JOLhA1/VeLCml7XJDDzueC8xCIyzShdaXO8XQ3E9p0MRLMEqtBr70t2C+
WJlWGoTxHKyG1JjCVBGp1KvTZEq8WAOQRq2X7nIK2mGMJosBPTgDZYePeWleP2AO
lSqjgLULzmaUf+7/IgZGUPe1Fgb109Quk9TgeKRN6X8+Mmt6
-----END CERTIFICATE-----
Generated at Fri Apr 25 19:57:22 2025 by rpki-client