Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af2d6988-7f75-3dfe-8840-3008d86b3dcd.roa
File: af2d6988-7f75-3dfe-8840-3008d86b3dcd.roa (raw, json)
Hash identifier: So7W4ZDkMnM3n8goWzCEBLhbUgbrmd9G4L039xR4W2M=
Subject key identifier: 9D:9A:01:23:4D:F2:FC:13:2A:88:E9:F0:1A:CD:4B:01:3E:97:7F:9C
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858484AAAD2CB8B7E6FBAE322CF40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af2d6988-7f75-3dfe-8840-3008d86b3dcd.roa
Signing time: Sun 22 Dec 2024 14:00:51 +0000
ROA not before: Sun 22 Dec 2024 14:00:51 +0000
ROA not after: Sat 22 Mar 2025 13:00:51 +0000
asID: 396616
IP address blocks: 2001:500:121::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4a:aa:d2:cb:8b:7e:6f:ba:e3:22:cf:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 22 14:00:51 2024 GMT
Not After : Mar 22 13:00:51 2025 GMT
Subject: CN=4cb95395-58b6-414e-9be2-238072a6292a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:43:8c:d1:d1:68:88:3c:1c:9a:26:43:38:69:
3f:b7:53:5f:d3:72:25:32:52:95:de:b4:97:70:86:
6f:3e:8f:da:ae:a5:4a:ef:60:63:20:82:78:04:a8:
6a:4b:9d:06:59:10:1a:28:62:4c:38:81:c4:0e:74:
b4:f5:5a:89:61:4f:de:3a:a7:26:6c:2a:9f:6d:45:
65:2c:60:9c:db:69:30:19:c3:1f:02:16:96:ff:40:
7e:63:c9:cf:30:0f:eb:44:ba:31:35:d4:b4:8d:f6:
60:fc:92:49:d9:75:21:c6:6a:32:ad:42:66:62:2b:
60:1c:8f:ad:77:28:85:5e:d7:10:21:7a:ba:f6:61:
68:69:9a:e4:6f:87:b7:ad:62:d7:c6:8d:89:2a:33:
72:86:15:33:a7:b9:6d:f9:9b:25:86:8f:06:a6:ba:
df:57:9f:cf:d8:60:0d:cb:40:2a:22:76:1c:6e:d9:
6b:9a:40:b9:d0:17:65:8f:03:7d:cc:4f:8f:f8:f0:
0f:d7:85:6f:04:3c:17:56:53:31:dc:c3:9f:c4:85:
c8:ab:61:e2:9e:11:81:49:65:7c:e1:e6:4e:cb:b4:
c4:57:41:25:2d:31:04:05:58:c5:0f:db:49:1a:2a:
d1:a8:d4:3b:cc:44:e8:bf:cf:ac:dc:a5:bf:ae:57:
16:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:9A:01:23:4D:F2:FC:13:2A:88:E9:F0:1A:CD:4B:01:3E:97:7F:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af2d6988-7f75-3dfe-8840-3008d86b3dcd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:121:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:49:8b:d2:fa:32:95:7b:a2:52:33:09:aa:2d:83:d1:da:be:
56:a5:6d:be:6a:bd:06:15:aa:dd:23:59:1b:51:e4:bb:cc:d5:
91:64:d1:62:44:3d:23:fb:ed:f3:f3:5f:63:8d:1c:32:c9:71:
e4:53:04:1c:f5:25:d6:51:88:fe:bc:bf:ba:b1:74:33:86:e8:
ab:dc:03:39:91:6f:57:42:dc:16:e2:a9:9b:64:6e:df:74:b1:
b8:e6:ba:91:08:be:9a:cc:e8:ea:1c:58:96:df:45:06:94:1d:
1c:1f:ff:05:6d:57:3b:e9:1d:ba:81:d8:b3:c5:ac:05:19:4f:
d6:9b:6a:8c:9a:5b:a5:60:11:c1:6d:ad:fb:05:b8:13:06:9f:
fb:0f:e5:e1:4c:49:b7:2d:5f:28:97:f9:4d:9d:d9:db:7e:9a:
60:1f:91:ac:eb:fa:67:3e:38:75:25:65:de:50:5a:aa:4c:bd:
80:a0:5d:5a:24:1c:a8:61:8e:26:81:ff:34:ab:f4:c9:c3:6f:
af:f0:86:7a:31:46:37:0a:b0:95:7f:28:ba:73:c0:19:76:ae:
50:1e:7c:86:34:b5:5e:9c:47:45:e0:87:4e:c8:a6:b8:b4:ee:
ec:88:ba:01:a1:64:98:a7:8e:8f:64:c2:19:6a:54:8c:28:cb:
2e:89:7a:4b
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEhKqtLLi35vuuMiz0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIyMjE0MDA1MVoXDTI1MDMyMjEzMDA1MVowLzEtMCsGA1UEAxMk
NGNiOTUzOTUtNThiNi00MTRlLTliZTItMjM4MDcyYTYyOTJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkOM0dFoiDwcmiZDOGk/t1Nf03IlMlKV3rSX
cIZvPo/arqVK72BjIIJ4BKhqS50GWRAaKGJMOIHEDnS09VqJYU/eOqcmbCqfbUVl
LGCc22kwGcMfAhaW/0B+Y8nPMA/rRLoxNdS0jfZg/JJJ2XUhxmoyrUJmYitgHI+t
dyiFXtcQIXq69mFoaZrkb4e3rWLXxo2JKjNyhhUzp7lt+Zslho8GprrfV5/P2GAN
y0AqInYcbtlrmkC50BdljwN9zE+P+PAP14VvBDwXVlMx3MOfxIXIq2HinhGBSWV8
4eZOy7TEV0ElLTEEBVjFD9tJGirRqNQ7zETov8+s3KW/rlcWOwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFJ2aASNN8vwTKojp8BrNSwE+l3+cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWYyZDY5ODgtN2Y3NS0z
ZGZlLTg4NDAtMzAwOGQ4NmIzZGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBXSYvS+jKVe6JSMwmqLYPR2r5WpW2+ar0GFard
I1kbUeS7zNWRZNFiRD0j++3z819jjRwyyXHkUwQc9SXWUYj+vL+6sXQzhuir3AM5
kW9XQtwW4qmbZG7fdLG45rqRCL6azOjqHFiW30UGlB0cH/8FbVc76R26gdizxawF
GU/Wm2qMmlulYBHBba37BbgTBp/7D+XhTEm3LV8ol/lNndnbfppgH5Gs6/pnPjh1
JWXeUFqqTL2AoF1aJByoYY4mgf80q/TJw2+v8IZ6MUY3CrCVfyi6c8AZdq5QHnyG
NLVenEdF4IdOyKa4tO7siLoBoWSYp46PZMIZalSMKMsuiXpL
-----END CERTIFICATE-----
Generated at Fri Apr 25 20:40:00 2025 by rpki-client