Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/71725cb4-8e2a-3585-8def-3d8ea84dfcf7.roa
File: 71725cb4-8e2a-3585-8def-3d8ea84dfcf7.roa (raw, json)
Hash identifier: HH6x6yBjcySU10K42FgM6eeLuIULp+mS3n21+jW1dEU=
Subject key identifier: 3B:F7:BE:C3:5C:FC:97:04:4D:C6:8A:E4:9B:EB:2D:E6:7E:14:F7:BF
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858484AAAD5383F90E9E2215D29A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/71725cb4-8e2a-3585-8def-3d8ea84dfcf7.roa
Signing time: Sun 22 Dec 2024 14:00:51 +0000
ROA not before: Sun 22 Dec 2024 14:00:51 +0000
ROA not after: Sat 22 Mar 2025 13:00:51 +0000
asID: 396550
IP address blocks: 2001:500:121::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4a:aa:d5:38:3f:90:e9:e2:21:5d:29:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 22 14:00:51 2024 GMT
Not After : Mar 22 13:00:51 2025 GMT
Subject: CN=f784c782-c0c0-432b-9dca-e09879b05135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:99:f1:84:83:83:bd:24:9b:a4:d9:f6:a6:74:
e6:10:42:50:e9:be:a6:c5:96:fb:6d:bf:a6:f8:90:
e2:4f:e2:06:01:9e:dc:23:4d:c4:be:52:b7:9c:4e:
37:74:c8:d5:dd:06:7c:83:cd:93:4b:8f:5e:62:73:
62:25:a1:b0:3b:9a:80:e4:2b:3d:21:b1:af:bd:30:
63:05:fb:75:2a:cf:63:93:13:4f:7a:ab:5f:f3:d8:
99:4f:0f:bd:93:64:77:57:5e:d1:cf:33:7a:8b:b0:
7b:7b:f2:ab:41:45:25:ff:b1:9f:a6:10:4f:8a:42:
3b:4e:9e:1d:65:8f:be:f9:b2:81:67:59:75:92:6a:
7e:47:6d:a1:80:d3:26:36:7c:04:c3:76:82:e3:6b:
c7:9f:80:ab:c9:c5:60:cb:39:5f:ca:80:d3:1c:ce:
d5:f1:4b:23:d8:65:fc:74:b9:05:23:0f:12:5f:e4:
0f:97:ee:c6:a9:57:02:b3:95:ba:bc:60:dd:7a:6c:
de:99:03:df:fc:d5:1c:c5:32:6a:90:5a:58:8e:b2:
5a:c6:8f:1d:56:6e:73:0f:94:12:eb:72:f8:26:31:
b8:06:17:61:85:8d:a8:f0:71:43:0e:d9:cc:75:2b:
7f:30:08:47:d9:ce:7d:db:56:ac:4c:cf:c0:a8:3f:
df:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F7:BE:C3:5C:FC:97:04:4D:C6:8A:E4:9B:EB:2D:E6:7E:14:F7:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/71725cb4-8e2a-3585-8def-3d8ea84dfcf7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:121:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:f0:e3:7c:5c:59:99:bc:60:c8:0a:b9:99:3f:b2:c9:21:98:
c7:75:c4:42:61:2b:41:5c:86:b6:5e:14:a3:b0:8b:0d:7b:17:
46:08:28:4e:6b:12:18:7c:92:47:8f:0f:43:4e:16:49:6a:ea:
b3:c3:c2:04:10:b4:dc:4a:d5:0c:c4:f6:f4:e5:d6:05:37:b8:
ae:5b:5d:07:c3:f2:5e:fa:02:d4:9b:b2:fa:10:9b:ee:f3:31:
9e:df:85:ec:bf:0b:53:8e:99:27:bb:79:4a:99:f6:2a:0a:55:
be:18:f9:25:dd:04:83:59:64:7b:f2:10:3e:04:96:82:5b:ac:
69:50:b4:32:4c:e9:a0:4e:73:82:ba:78:b5:8b:f8:c7:cb:70:
b7:ff:e4:42:42:42:d9:8d:d7:4e:46:37:18:5d:46:a0:bd:c8:
fa:76:aa:51:66:11:dc:c9:a2:cf:92:a8:2b:12:d7:e3:70:89:
bd:11:5e:b4:2b:7c:2f:fc:6e:f9:3d:f8:ef:a9:42:22:35:57:
34:d0:a2:a2:c0:66:1d:18:81:94:bf:a8:be:ae:2c:82:42:b9:
4d:3e:6a:92:c3:88:15:54:e8:56:a8:a4:49:8a:ef:71:20:70:
6d:9f:4e:d0:a9:71:df:b5:27:d2:7c:ae:95:d9:9f:63:65:bd:
8b:65:18:95
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEhKqtU4P5Dp4iFdKaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIyMjE0MDA1MVoXDTI1MDMyMjEzMDA1MVowLzEtMCsGA1UEAxMk
Zjc4NGM3ODItYzBjMC00MzJiLTlkY2EtZTA5ODc5YjA1MTM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5nxhIODvSSbpNn2pnTmEEJQ6b6mxZb7bb+m
+JDiT+IGAZ7cI03EvlK3nE43dMjV3QZ8g82TS49eYnNiJaGwO5qA5Cs9IbGvvTBj
Bft1Ks9jkxNPeqtf89iZTw+9k2R3V17RzzN6i7B7e/KrQUUl/7GfphBPikI7Tp4d
ZY+++bKBZ1l1kmp+R22hgNMmNnwEw3aC42vHn4CrycVgyzlfyoDTHM7V8Usj2GX8
dLkFIw8SX+QPl+7GqVcCs5W6vGDdemzemQPf/NUcxTJqkFpYjrJaxo8dVm5zD5QS
63L4JjG4BhdhhY2o8HFDDtnMdSt/MAhH2c5921asTM/AqD/fDwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFDv3vsNc/JcETcaK5JvrLeZ+FPe/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzE3MjVjYjQtOGUyYS0z
NTg1LThkZWYtM2Q4ZWE4NGRmY2Y3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAY8ON8XFmZvGDICrmZP7LJIZjHdcRCYStBXIa2
XhSjsIsNexdGCChOaxIYfJJHjw9DThZJauqzw8IEELTcStUMxPb05dYFN7iuW10H
w/Je+gLUm7L6EJvu8zGe34XsvwtTjpknu3lKmfYqClW+GPkl3QSDWWR78hA+BJaC
W6xpULQyTOmgTnOCuni1i/jHy3C3/+RCQkLZjddORjcYXUagvcj6dqpRZhHcyaLP
kqgrEtfjcIm9EV60K3wv/G75PfjvqUIiNVc00KKiwGYdGIGUv6i+riyCQrlNPmqS
w4gVVOhWqKRJiu9xIHBtn07QqXHftSfSfK6V2Z9jZb2LZRiV
-----END CERTIFICATE-----
Generated at Fri Apr 25 23:39:27 2025 by rpki-client