Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8038a86d-8c7e-3cb6-8f48-a3b209c1e3c4.roa
File: 8038a86d-8c7e-3cb6-8f48-a3b209c1e3c4.roa (raw, json)
Hash identifier: 7d4SrTg88BdNwbJS+KcWsRUmsgOILJDzvDldZjSlMrY=
Subject key identifier: AC:E7:E0:67:0D:60:BA:A5:11:00:3F:A0:EF:58:CD:B2:13:30:0E:FD
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858488DAB748252596BC2CFD4BC80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8038a86d-8c7e-3cb6-8f48-a3b209c1e3c4.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 36632
IP address blocks: 2001:500:7967::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:74:82:52:59:6b:c2:cf:d4:bc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=553a03fc-0b9c-432d-a53b-74074a2a81b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ce:35:69:03:97:f2:e1:97:53:82:bf:40:61:
4f:b9:f4:a6:30:92:d7:53:41:14:30:b4:84:19:69:
83:00:72:cb:20:28:b0:21:1f:48:e1:cc:bb:c0:c5:
1c:d7:3d:95:39:78:ab:65:cc:df:b6:a4:a4:8b:14:
3d:e8:91:f9:88:dd:cd:96:15:1d:b4:71:5f:cd:e2:
29:7a:b6:59:1b:52:ae:d7:75:7d:b2:3e:ea:3a:a0:
56:6e:02:b7:3d:18:11:b1:6e:aa:32:5a:3c:c8:8b:
6c:a8:72:8e:2e:de:fc:be:fc:2a:72:d8:80:ef:a1:
2f:d3:42:6e:2d:58:dd:0b:76:6b:9f:b6:a6:1d:af:
43:fa:ee:4d:a1:47:6a:09:bb:dd:9c:55:db:bc:35:
2d:7c:83:7d:25:ac:55:44:22:bb:c9:24:ff:93:b9:
e2:57:14:ed:b9:31:25:a1:ce:93:fc:08:4a:c6:bc:
b6:f2:7d:d8:18:c8:33:fe:f5:90:9b:28:c1:88:9b:
4c:59:c5:d5:2a:76:1b:45:0f:99:3e:d8:f5:42:2d:
46:02:5f:d2:8f:b4:01:04:d9:a2:c8:14:7d:74:05:
44:37:08:47:d6:e5:21:51:2a:43:95:3c:0b:83:99:
56:1f:6a:1e:fb:3d:84:5e:ce:7d:a6:2d:ea:e8:ec:
7b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E7:E0:67:0D:60:BA:A5:11:00:3F:A0:EF:58:CD:B2:13:30:0E:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8038a86d-8c7e-3cb6-8f48-a3b209c1e3c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:7967:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:d2:5c:54:3d:f7:2b:2d:07:f1:3b:76:2a:d7:db:0e:18:b8:
fd:59:69:f5:28:29:aa:20:6f:7d:4b:de:24:c3:8a:fc:66:67:
88:bc:63:52:ad:fc:d1:13:c2:e7:75:ef:1d:57:8c:82:04:e1:
c7:b4:32:81:21:17:9b:1e:b8:1d:ea:93:3a:6f:ae:a8:32:a8:
ce:de:d0:e5:61:29:c3:1c:da:53:c6:d2:9c:5e:90:7c:0f:54:
37:9b:5f:64:05:22:f6:81:d8:cf:61:57:1d:96:0b:b6:71:09:
b2:d5:12:73:de:2d:eb:92:76:bc:4b:94:bd:56:1e:a6:3a:46:
80:73:91:3a:78:0e:2d:c0:1e:30:82:76:d7:ac:01:ef:d9:f3:
97:a9:fb:69:0c:c4:46:af:9d:e4:4a:4a:50:11:d9:ad:e6:4e:
14:b8:9b:13:ee:85:1f:2b:45:bd:56:ea:22:71:55:e0:e3:95:
d5:16:73:b4:19:18:8a:62:de:d3:fd:00:0f:be:45:4a:9b:3d:
46:d0:1e:16:d3:3a:09:a2:1f:5f:eb:ae:84:73:5d:c0:c6:03:
eb:7c:e5:8f:4d:a2:97:8d:71:59:9d:bb:8d:68:73:1f:bd:ab:
db:18:6b:31:19:ee:1c:bb:0d:6d:9a:92:b9:de:4c:fe:b7:03:
ee:cb:da:02
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEiNq3SCUllrws/UvIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDExNTE0MDA1MVoXDTI1MDQxNTEzMDA1MVowLzEtMCsGA1UEAxMk
NTUzYTAzZmMtMGI5Yy00MzJkLWE1M2ItNzQwNzRhMmE4MWI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyM41aQOX8uGXU4K/QGFPufSmMJLXU0EUMLSE
GWmDAHLLICiwIR9I4cy7wMUc1z2VOXirZczftqSkixQ96JH5iN3NlhUdtHFfzeIp
erZZG1Ku13V9sj7qOqBWbgK3PRgRsW6qMlo8yItsqHKOLt78vvwqctiA76Ev00Ju
LVjdC3Zrn7amHa9D+u5NoUdqCbvdnFXbvDUtfIN9JaxVRCK7yST/k7niVxTtuTEl
oc6T/AhKxry28n3YGMgz/vWQmyjBiJtMWcXVKnYbRQ+ZPtj1Qi1GAl/Sj7QBBNmi
yBR9dAVENwhH1uUhUSpDlTwLg5lWH2oe+z2EXs59pi3q6Ox77wIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFKzn4GcNYLqlEQA/oO9YzbITMA79MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODAzOGE4NmQtOGM3ZS0z
Y2I2LThmNDgtYTNiMjA5YzFlM2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAHln
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAo0lxUPfcrLQfxO3Yq19sOGLj9WWn1KCmqIG99
S94kw4r8ZmeIvGNSrfzRE8Lnde8dV4yCBOHHtDKBIRebHrgd6pM6b66oMqjO3tDl
YSnDHNpTxtKcXpB8D1Q3m19kBSL2gdjPYVcdlgu2cQmy1RJz3i3rkna8S5S9Vh6m
OkaAc5E6eA4twB4wgnbXrAHv2fOXqftpDMRGr53kSkpQEdmt5k4UuJsT7oUfK0W9
VuoicVXg45XVFnO0GRiKYt7T/QAPvkVKmz1G0B4W0zoJoh9f666Ec13AxgPrfOWP
TaKXjXFZnbuNaHMfvavbGGsxGe4cuw1tmpK53kz+twPuy9oC
-----END CERTIFICATE-----
Generated at Fri Apr 25 19:53:56 2025 by rpki-client