Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a58683c3-cfdf-35b6-a395-75b53b3ee675.roa
File: a58683c3-cfdf-35b6-a395-75b53b3ee675.roa (raw, json)
Hash identifier: wNW1Kh+zXwQ42TcjKfX9Jk4jh0RFaWxKCXrWMjn48J0=
Subject key identifier: 20:5E:25:F2:A5:9A:37:1F:7C:97:A5:E6:55:9A:6C:9C:68:6B:96:D9
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858483720142D3D569C80B3209C80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a58683c3-cfdf-35b6-a395-75b53b3ee675.roa
Signing time: Sun 15 Dec 2024 14:00:53 +0000
ROA not before: Sun 15 Dec 2024 14:00:53 +0000
ROA not after: Sat 15 Mar 2025 13:00:53 +0000
asID: 396581
IP address blocks: 2001:500:123::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:37:20:14:2d:3d:56:9c:80:b3:20:9c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 15 14:00:53 2024 GMT
Not After : Mar 15 13:00:53 2025 GMT
Subject: CN=ee19ccd1-5465-4901-9b11-ff8042d63837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d9:45:44:46:2d:93:da:ca:c6:03:76:df:25:
ab:b0:f5:02:1a:01:54:3d:2f:09:37:dc:61:93:7b:
58:f7:40:6f:64:be:ca:09:a1:29:65:43:04:74:5b:
be:93:7e:28:60:76:95:b4:15:bf:31:9c:05:61:27:
f3:a5:58:c2:0c:48:4d:49:c1:62:e0:c1:20:41:fa:
6f:40:79:53:8d:84:fd:a8:60:42:b7:b9:4c:3d:b2:
af:43:2d:16:0e:ad:59:ae:33:95:3c:21:54:c7:d5:
66:8d:2b:76:6a:20:52:00:5a:fe:7a:83:29:60:6f:
00:4a:b4:41:86:54:ed:20:37:c9:3e:b7:3c:25:36:
12:98:05:41:8d:f2:80:b0:d2:79:7f:f1:d4:e6:29:
cf:4c:d6:1a:c6:b3:83:a1:7f:e5:e9:63:4c:91:ec:
bb:66:60:db:88:27:3a:13:e9:72:60:2f:d8:b0:cf:
c9:33:ca:a5:5b:f2:c6:a5:7d:a5:9f:2b:fe:40:ed:
11:1f:cd:2e:2c:87:8c:3d:9c:bc:22:13:c5:8a:c3:
01:46:66:74:6e:36:14:dd:bd:5c:7e:90:d4:47:6a:
3f:7d:ce:5c:7f:b5:e4:e9:fb:43:03:7d:3b:aa:06:
ec:a7:56:d3:65:d2:8c:4b:45:8d:c3:62:37:c2:7f:
10:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:5E:25:F2:A5:9A:37:1F:7C:97:A5:E6:55:9A:6C:9C:68:6B:96:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a58683c3-cfdf-35b6-a395-75b53b3ee675.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:123:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:7c:ab:eb:d7:d3:41:db:64:1c:39:5b:0c:19:7a:17:84:61:
c3:1c:6c:b9:dc:50:85:1a:46:a6:aa:a1:0a:fe:6d:68:0d:f0:
51:1a:68:8d:2b:9d:71:2b:c3:99:02:49:a1:36:8b:8f:77:f8:
fc:50:7c:f6:5f:01:1c:70:88:2f:8f:41:7d:ba:df:19:12:9b:
64:45:9f:87:37:75:42:92:4f:ce:34:17:c9:da:3c:66:af:d3:
8c:f8:a3:3f:76:74:21:92:8d:c9:28:6f:0f:6d:6d:72:cc:b2:
c1:17:00:d7:8c:e6:3d:ce:f4:5b:3e:62:b9:97:f2:15:8f:32:
6b:ca:d6:c6:df:23:55:78:3b:b6:66:98:79:20:c7:5e:40:3c:
da:66:e7:a4:ad:a7:40:34:f2:c6:65:55:a3:56:e8:ad:ae:9c:
9e:4c:d1:4c:f3:45:32:92:d8:5e:8e:f6:3c:34:23:f2:5c:02:
4a:8f:69:86:a3:7f:2b:9e:b9:58:cf:c9:ba:b3:fd:6d:5a:f1:
cf:6f:ec:22:bf:05:ed:16:42:de:ae:ac:6f:92:0c:fb:9f:a0:
f8:80:cb:77:df:f7:09:a5:90:ef:53:19:14:31:db:50:9f:94:
00:ee:84:1b:b4:e9:c9:da:43:ff:38:d8:99:3e:4d:12:55:26:
95:7f:14:f8
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEg3IBQtPVacgLMgnIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIxNTE0MDA1M1oXDTI1MDMxNTEzMDA1M1owLzEtMCsGA1UEAxMk
ZWUxOWNjZDEtNTQ2NS00OTAxLTliMTEtZmY4MDQyZDYzODM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitlFREYtk9rKxgN23yWrsPUCGgFUPS8JN9xh
k3tY90BvZL7KCaEpZUMEdFu+k34oYHaVtBW/MZwFYSfzpVjCDEhNScFi4MEgQfpv
QHlTjYT9qGBCt7lMPbKvQy0WDq1ZrjOVPCFUx9VmjSt2aiBSAFr+eoMpYG8ASrRB
hlTtIDfJPrc8JTYSmAVBjfKAsNJ5f/HU5inPTNYaxrODoX/l6WNMkey7ZmDbiCc6
E+lyYC/YsM/JM8qlW/LGpX2lnyv+QO0RH80uLIeMPZy8IhPFisMBRmZ0bjYU3b1c
fpDUR2o/fc5cf7Xk6ftDA307qgbsp1bTZdKMS0WNw2I3wn8Q0wIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFCBeJfKlmjcffJel5lWabJxoa5bZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTU4NjgzYzMtY2ZkZi0z
NWI2LWEzOTUtNzViNTNiM2VlNjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCVfKvr19NB22QcOVsMGXoXhGHDHGy53FCFGkam
qqEK/m1oDfBRGmiNK51xK8OZAkmhNouPd/j8UHz2XwEccIgvj0F9ut8ZEptkRZ+H
N3VCkk/ONBfJ2jxmr9OM+KM/dnQhko3JKG8PbW1yzLLBFwDXjOY9zvRbPmK5l/IV
jzJrytbG3yNVeDu2Zph5IMdeQDzaZuekradANPLGZVWjVuitrpyeTNFM80Uykthe
jvY8NCPyXAJKj2mGo38rnrlYz8m6s/1tWvHPb+wivwXtFkLerqxvkgz7n6D4gMt3
3/cJpZDvUxkUMdtQn5QA7oQbtOnJ2kP/ONiZPk0SVSaVfxT4
-----END CERTIFICATE-----
Generated at Mon May 12 04:25:48 2025 by rpki-client