Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/938c1d1d-2e8b-36f9-9316-4ad040f22834.roa
File: 938c1d1d-2e8b-36f9-9316-4ad040f22834.roa (raw, json)
Hash identifier: ucg4I0nnOVYRE3fRtyd87Ovld1wFFhxAqnde/uZZQAE=
Subject key identifier: 08:00:4F:5F:AD:E8:4E:03:08:EA:6E:70:85:49:E6:1B:07:72:C7:D9
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848530B00F1B15B39CD44CF3AC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/938c1d1d-2e8b-36f9-9316-4ad040f22834.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 397204
IP address blocks: 2001:502:cbe4::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0b:00:f1:b1:5b:39:cd:44:cf:3a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=13c35e17-9a0d-436a-a374-584c8718f16a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:17:ca:d1:b0:98:0f:2a:e7:00:1b:bd:c3:5f:
bc:1a:55:17:ad:39:b9:cb:4d:ff:ce:0e:5b:75:dd:
97:89:d8:2d:f7:36:7c:6e:06:10:70:de:4c:be:f1:
8f:43:0f:58:60:37:ff:1a:08:5d:15:73:92:7a:ed:
35:12:c9:45:99:b1:53:c0:5b:a3:30:2e:cb:16:36:
23:d8:04:3c:c6:b2:95:b5:aa:be:c8:8b:dd:39:1a:
44:30:f4:aa:7e:c5:25:11:58:b5:c2:46:67:1e:1a:
c2:27:31:06:b3:27:c7:76:8c:2e:5d:84:63:2d:de:
4d:30:78:71:8b:5d:5b:d6:d8:30:ce:30:48:39:f4:
7a:05:eb:3c:35:98:2d:21:cc:a8:85:f3:fe:d4:37:
e5:f8:11:1c:ee:95:e6:a8:c7:23:09:33:8e:fa:4f:
b6:b3:0d:75:22:15:ae:19:ad:54:c1:c2:51:13:81:
ed:1f:7c:6f:54:59:17:b9:e1:63:69:6e:ca:56:97:
70:a4:4b:bb:76:cb:b5:3d:2c:1f:91:bb:a2:e1:af:
a4:e7:6a:a4:de:fa:84:c3:5f:48:e3:b8:b0:9d:70:
c8:cb:b0:5a:f9:9b:80:34:3e:05:ef:db:d8:4b:bd:
18:7f:1e:d7:97:55:d5:31:72:4d:2f:07:dc:11:03:
97:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:00:4F:5F:AD:E8:4E:03:08:EA:6E:70:85:49:E6:1B:07:72:C7:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/938c1d1d-2e8b-36f9-9316-4ad040f22834.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:cbe4:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:64:55:84:12:a8:18:24:76:12:3c:95:2b:0f:58:cf:fb:2e:
0b:00:bb:28:4d:2a:bd:e5:bd:a7:ed:76:c8:8a:31:ed:60:18:
51:e0:4f:f0:9b:39:a4:43:26:e0:b3:ca:bf:85:3f:81:ea:aa:
ae:f9:33:d7:3b:30:4d:45:b9:29:ba:20:9a:ae:24:aa:5f:f3:
ae:9e:3d:f1:9f:d0:aa:2d:9d:c6:b3:62:be:4f:56:a7:a1:a9:
8c:c5:3f:a6:f8:86:e6:0f:c2:96:52:31:e5:c4:98:d0:40:f3:
d4:4e:dc:37:c2:b1:77:31:54:32:74:87:ff:0e:4c:77:db:6c:
bd:e3:a3:70:c1:b1:60:37:e6:1e:37:2d:15:ff:ed:31:04:12:
58:97:24:2b:af:c2:91:69:09:99:13:9c:93:18:9f:0c:3a:c5:
42:ed:8f:9b:0a:37:b1:e1:d6:69:e3:c9:ae:39:b7:31:01:7b:
52:49:b9:0b:f8:4d:69:43:50:24:a7:fb:04:8c:85:02:23:36:
9d:c1:4f:76:6b:7c:a9:90:b7:31:09:05:b3:51:35:b2:c8:60:
cf:aa:47:21:bd:b8:c4:59:d3:d3:30:e3:93:ee:1c:86:9b:e8:
07:49:10:28:23:c8:19:dd:96:cd:7a:c9:77:4e:41:39:16:4a:
5d:40:50:a9
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEhTCwDxsVs5zUTPOsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIyNTE0MDA1MloXDTI1MDMyNTEzMDA1MlowLzEtMCsGA1UEAxMk
MTNjMzVlMTctOWEwZC00MzZhLWEzNzQtNTg0Yzg3MThmMTZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RfK0bCYDyrnABu9w1+8GlUXrTm5y03/zg5b
dd2Xidgt9zZ8bgYQcN5MvvGPQw9YYDf/GghdFXOSeu01EslFmbFTwFujMC7LFjYj
2AQ8xrKVtaq+yIvdORpEMPSqfsUlEVi1wkZnHhrCJzEGsyfHdowuXYRjLd5NMHhx
i11b1tgwzjBIOfR6Bes8NZgtIcyohfP+1Dfl+BEc7pXmqMcjCTOO+k+2sw11IhWu
Ga1UwcJRE4HtH3xvVFkXueFjaW7KVpdwpEu7dsu1PSwfkbui4a+k52qk3vqEw19I
47iwnXDIy7Ba+ZuAND4F79vYS70Yfx7Xl1XVMXJNLwfcEQOXAwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFAgAT1+t6E4DCOpucIVJ5hsHcsfZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTM4YzFkMWQtMmU4Yi0z
NmY5LTkzMTYtNGFkMDQwZjIyODM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAsvk
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAEZFWEEqgYJHYSPJUrD1jP+y4LALsoTSq95b2n
7XbIijHtYBhR4E/wmzmkQybgs8q/hT+B6qqu+TPXOzBNRbkpuiCariSqX/Ounj3x
n9CqLZ3Gs2K+T1anoamMxT+m+IbmD8KWUjHlxJjQQPPUTtw3wrF3MVQydIf/Dkx3
22y946NwwbFgN+YeNy0V/+0xBBJYlyQrr8KRaQmZE5yTGJ8MOsVC7Y+bCjex4dZp
48muObcxAXtSSbkL+E1pQ1Akp/sEjIUCIzadwU92a3ypkLcxCQWzUTWyyGDPqkch
vbjEWdPTMOOT7hyGm+gHSRAoI8gZ3ZbNesl3TkE5FkpdQFCp
-----END CERTIFICATE-----
Generated at Fri Apr 25 20:17:48 2025 by rpki-client