Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a21954b2-0798-340a-b778-6ba99256cc08.roa
File: a21954b2-0798-340a-b778-6ba99256cc08.roa (raw, json)
Hash identifier: +ZlQZJLdma9NZeqfFzWaVuTz7A9FV8d8QQz5kuszf+g=
Subject key identifier: E2:77:A7:80:A0:6E:22:39:9A:CF:37:8E:65:97:BC:58:60:CC:84:31
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848530AFFBB9FECC65A2495B380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a21954b2-0798-340a-b778-6ba99256cc08.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 396595
IP address blocks: 2001:502:cbe4::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0a:ff:bb:9f:ec:c6:5a:24:95:b3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=3f904fcb-6f99-4ec6-ad86-9ed26a690672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:83:86:8d:7f:58:cb:76:a3:97:62:90:b1:dd:
49:fc:24:5f:b1:e8:b5:fb:a6:dc:28:ef:8d:39:ac:
22:31:94:c3:1e:97:0f:96:f8:f2:ed:4e:6b:21:19:
e7:05:a1:b1:2d:53:a2:3b:00:2c:ee:31:ec:58:33:
ca:bb:04:1b:21:6c:c4:db:7f:76:48:07:90:5a:8c:
20:cd:7a:37:60:84:66:06:88:e6:d9:00:83:60:73:
70:26:a7:8f:0b:6c:4b:c4:5d:25:a1:cf:e7:69:98:
a1:5b:99:ac:2a:72:a9:3f:16:f7:9a:52:33:c8:7b:
38:f2:b6:af:c8:f1:c2:f2:a1:a5:e8:e5:4e:b2:f5:
c5:2e:65:7e:7c:14:11:1c:f6:f0:b6:8a:d8:f8:e3:
4f:07:49:99:a4:c7:1f:76:79:05:37:76:65:e4:0e:
7d:01:18:6c:cc:92:ac:3c:30:ce:0c:47:ae:59:ae:
bf:77:b6:90:1a:96:a3:85:af:cc:74:a9:ed:91:a6:
69:42:79:aa:04:09:b0:fb:2a:59:cc:83:52:ec:a2:
b1:4d:f5:fe:ea:c5:7f:3e:5c:1c:e6:15:84:19:ee:
0d:5a:36:c7:96:60:b1:9f:9f:cf:a7:68:7c:af:b0:
5b:a0:e7:e7:d7:76:a9:f7:c6:db:92:b7:5b:35:df:
44:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:77:A7:80:A0:6E:22:39:9A:CF:37:8E:65:97:BC:58:60:CC:84:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a21954b2-0798-340a-b778-6ba99256cc08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:cbe4:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:13:d0:35:08:d8:b2:b9:fd:34:54:da:03:4e:db:c6:02:6c:
6d:ca:60:9a:99:f9:5f:e2:7a:e9:ce:02:8d:dd:82:ad:5b:fd:
93:30:e3:12:9e:5d:54:80:1c:b8:3d:56:df:70:fc:b1:d9:61:
f0:ce:84:b0:44:9e:36:c0:6a:9a:fa:70:f4:1a:af:53:29:0f:
9b:ab:ed:f1:57:eb:61:64:99:8b:a3:df:e2:36:ea:93:e4:c8:
ab:11:c3:08:7b:ef:54:10:ed:ca:dd:e8:3b:3e:c0:c5:f5:e6:
1f:75:73:a1:16:29:ad:68:b0:cc:2e:75:4c:f2:ac:5f:b9:61:
97:71:aa:1a:0b:23:af:f7:5f:2c:03:ff:f7:1d:d9:7b:64:62:
0e:b9:c7:11:29:80:0d:d7:b6:f5:09:15:3a:dc:6f:67:0e:a0:
6f:34:8e:70:33:2a:ab:f9:35:77:21:74:f2:93:d9:f9:7c:9f:
d0:b2:4a:bb:0e:5e:e8:6b:f8:1f:37:9d:fa:e3:52:82:f1:76:
e7:54:2d:87:14:3b:34:82:de:10:3f:97:46:76:dc:5d:ed:b6:
2a:db:34:74:3a:af:e4:57:7a:4d:df:4d:ff:a1:ae:e4:65:d6:
fe:3d:9b:32:d1:f6:4a:cb:71:52:93:a1:72:6f:b6:52:bd:be:
87:8f:f3:3b
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEhTCv+7n+zGWiSVs4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIyNTE0MDA1MloXDTI1MDMyNTEzMDA1MlowLzEtMCsGA1UEAxMk
M2Y5MDRmY2ItNmY5OS00ZWM2LWFkODYtOWVkMjZhNjkwNjcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIOGjX9Yy3ajl2KQsd1J/CRfsei1+6bcKO+N
OawiMZTDHpcPlvjy7U5rIRnnBaGxLVOiOwAs7jHsWDPKuwQbIWzE2392SAeQWowg
zXo3YIRmBojm2QCDYHNwJqePC2xLxF0loc/naZihW5msKnKpPxb3mlIzyHs48rav
yPHC8qGl6OVOsvXFLmV+fBQRHPbwtorY+ONPB0mZpMcfdnkFN3Zl5A59ARhszJKs
PDDODEeuWa6/d7aQGpajha/MdKntkaZpQnmqBAmw+ypZzINS7KKxTfX+6sV/Plwc
5hWEGe4NWjbHlmCxn5/Pp2h8r7BboOfn13ap98bbkrdbNd9EcQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFOJ3p4CgbiI5ms83jmWXvFhgzIQxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTIxOTU0YjItMDc5OC0z
NDBhLWI3NzgtNmJhOTkyNTZjYzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAsvk
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQABE9A1CNiyuf00VNoDTtvGAmxtymCamflf4nrp
zgKN3YKtW/2TMOMSnl1UgBy4PVbfcPyx2WHwzoSwRJ42wGqa+nD0Gq9TKQ+bq+3x
V+thZJmLo9/iNuqT5MirEcMIe+9UEO3K3eg7PsDF9eYfdXOhFimtaLDMLnVM8qxf
uWGXcaoaCyOv918sA//3Hdl7ZGIOuccRKYAN17b1CRU63G9nDqBvNI5wMyqr+TV3
IXTyk9n5fJ/Qskq7Dl7oa/gfN53641KC8XbnVC2HFDs0gt4QP5dGdtxd7bYq2zR0
Oq/kV3pN303/oa7kZdb+PZsy0fZKy3FSk6Fyb7ZSvb6Hj/M7
-----END CERTIFICATE-----
Generated at Sat Apr 26 00:47:21 2025 by rpki-client