Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/84aa086d-f756-36e9-857f-98338dd640eb.roa
File: 84aa086d-f756-36e9-857f-98338dd640eb.roa (raw, json)
Hash identifier: rjlCNr2bUpJ4h/7pJ54gXEVtFnw6/YO3QxsO2ZKLit0=
Subject key identifier: F9:82:FB:8C:59:50:AD:84:24:7E:99:C6:8C:AC:88:D7:BE:CD:C4:BB
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584842430BDB32A4A35296DB2378
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/84aa086d-f756-36e9-857f-98338dd640eb.roa
Signing time: Thu 19 Dec 2024 13:45:20 +0000
ROA not before: Thu 19 Dec 2024 13:45:20 +0000
ROA not after: Wed 19 Mar 2025 12:45:20 +0000
asID: 36621
IP address blocks: 2001:500:124::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:43:0b:db:32:a4:a3:52:96:db:23:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 13:45:20 2024 GMT
Not After : Mar 19 12:45:20 2025 GMT
Subject: CN=49c31747-6354-44b8-a41c-4bb4fa4ef305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c3:ab:82:e0:79:5d:36:a0:1d:14:84:00:52:
cc:aa:ca:c4:31:57:b2:fd:75:18:bd:73:05:cb:d0:
9c:44:06:b5:3b:7c:39:9c:79:b9:2b:09:8b:77:fd:
5f:dc:70:10:44:56:e8:27:37:64:c2:88:c1:4d:fc:
fc:bc:9d:6d:08:68:47:11:0d:17:56:66:8c:8f:d3:
f2:ec:ff:ee:52:ae:50:b0:31:6b:a1:14:1b:c3:a7:
28:13:f2:7d:73:5c:84:fe:61:fa:4a:46:d4:6c:bd:
72:80:e8:9b:6c:cb:80:92:b6:5a:e4:97:2a:a7:19:
ce:1f:f2:4e:6c:0e:d3:53:cd:88:4c:82:9c:94:a2:
fb:ee:c6:d6:ff:09:dd:94:6b:04:ee:9b:3f:89:67:
fa:b0:fa:fb:33:b4:46:34:68:22:19:8b:8a:80:8d:
ef:9c:af:33:f4:a1:be:20:93:ea:ef:e0:42:7c:c8:
aa:15:a2:eb:03:81:f1:d9:08:c5:38:ff:10:3a:a9:
29:b0:fe:f2:49:47:da:28:12:05:e6:cc:25:79:23:
5c:0f:89:9e:63:7e:ff:c9:61:bb:9a:32:26:47:6b:
69:30:1d:c7:86:3b:6a:5f:87:9e:d1:4e:25:5d:48:
0f:85:59:a1:b2:48:a8:bb:16:12:ff:db:7a:27:8b:
29:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:82:FB:8C:59:50:AD:84:24:7E:99:C6:8C:AC:88:D7:BE:CD:C4:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/84aa086d-f756-36e9-857f-98338dd640eb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:124:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:3f:0f:bc:e5:c1:65:c8:c4:84:4e:b4:9d:c3:b9:ba:2d:de:
3a:c2:71:50:08:e5:27:b0:68:36:42:27:35:55:e0:2f:fd:5a:
93:cc:89:e6:d9:0a:a7:ca:23:87:22:c8:89:10:13:af:00:96:
52:da:63:91:d9:76:20:54:51:93:4b:5b:77:b4:68:7d:0e:80:
52:7f:78:0b:8c:1f:40:c5:a4:4d:8b:d3:cd:78:d0:7c:15:83:
b1:f3:47:d3:38:5f:17:64:ed:54:7b:48:7d:b7:91:61:44:91:
44:2f:cd:e9:be:ee:fc:3c:68:42:04:85:1b:0f:f1:35:ed:d6:
66:f7:c3:16:b5:8e:4f:e0:ba:5d:c4:9a:ac:55:6c:f1:01:7f:
c4:72:4f:fa:9b:7c:0f:4d:95:64:c8:d0:ca:c6:3d:2c:76:a7:
39:ca:09:8a:b4:76:32:49:82:a8:a0:f9:52:5c:99:e2:8a:00:
15:48:e8:66:f8:da:6c:f6:d9:4b:51:8a:11:fa:99:53:31:c7:
ec:4f:f5:bd:f8:24:74:b6:2b:94:df:9a:6e:ff:cc:ae:0e:82:
16:b1:0e:79:3e:c6:fa:fd:d2:98:4d:b7:05:c9:ff:b2:8b:ba:
27:31:07:93:5d:a7:e6:16:4d:ab:08:b7:fb:b5:78:55:44:2b:
f6:54:fb:b8
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEhCQwvbMqSjUpbbI3gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIxOTEzNDUyMFoXDTI1MDMxOTEyNDUyMFowLzEtMCsGA1UEAxMk
NDljMzE3NDctNjM1NC00NGI4LWE0MWMtNGJiNGZhNGVmMzA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcOrguB5XTagHRSEAFLMqsrEMVey/XUYvXMF
y9CcRAa1O3w5nHm5KwmLd/1f3HAQRFboJzdkwojBTfz8vJ1tCGhHEQ0XVmaMj9Py
7P/uUq5QsDFroRQbw6coE/J9c1yE/mH6SkbUbL1ygOibbMuAkrZa5JcqpxnOH/JO
bA7TU82ITIKclKL77sbW/wndlGsE7ps/iWf6sPr7M7RGNGgiGYuKgI3vnK8z9KG+
IJPq7+BCfMiqFaLrA4Hx2QjFOP8QOqkpsP7ySUfaKBIF5swleSNcD4meY37/yWG7
mjImR2tpMB3HhjtqX4ee0U4lXUgPhVmhskiouxYS/9t6J4spuQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFPmC+4xZUK2EJH6ZxoysiNe+zcS7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODRhYTA4NmQtZjc1Ni0z
NmU5LTg1N2YtOTgzMzhkZDY0MGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEk
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAcPw+85cFlyMSETrSdw7m6Ld46wnFQCOUnsGg2
Qic1VeAv/VqTzInm2QqnyiOHIsiJEBOvAJZS2mOR2XYgVFGTS1t3tGh9DoBSf3gL
jB9AxaRNi9PNeNB8FYOx80fTOF8XZO1Ue0h9t5FhRJFEL83pvu78PGhCBIUbD/E1
7dZm98MWtY5P4LpdxJqsVWzxAX/Eck/6m3wPTZVkyNDKxj0sdqc5ygmKtHYySYKo
oPlSXJniigAVSOhm+Nps9tlLUYoR+plTMcfsT/W9+CR0tiuU35pu/8yuDoIWsQ55
Psb6/dKYTbcFyf+yi7onMQeTXafmFk2rCLf7tXhVRCv2VPu4
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:19:13 2025 by rpki-client