Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af7ec802-b230-3708-b793-ea4415ac93d9.roa
File: af7ec802-b230-3708-b793-ea4415ac93d9.roa (raw, json)
Hash identifier: VmPi7HKUM810JDw2F2+D+xW2g6oN0l0Cr1ZeV0XYVuU=
Subject key identifier: 11:9F:35:FF:AB:9B:9C:49:9E:BB:4A:F6:29:2D:DB:65:87:65:B8:88
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584842430A82F82D4FCA3C2BC280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af7ec802-b230-3708-b793-ea4415ac93d9.roa
Signing time: Thu 19 Dec 2024 13:45:19 +0000
ROA not before: Thu 19 Dec 2024 13:45:19 +0000
ROA not after: Wed 19 Mar 2025 12:45:19 +0000
asID: 396564
IP address blocks: 2001:500:124::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:43:0a:82:f8:2d:4f:ca:3c:2b:c2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 13:45:19 2024 GMT
Not After : Mar 19 12:45:19 2025 GMT
Subject: CN=cef49817-d82a-4197-b877-ede8ca066a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:8d:30:48:72:7b:97:1e:f4:20:80:7d:9a:00:
01:87:84:3a:e2:c4:ab:5e:a3:d3:00:20:63:8a:e1:
c7:9a:78:59:45:69:a1:1a:e3:d9:f1:00:2e:81:11:
90:9b:12:86:28:a2:49:bb:3b:66:38:ad:d4:c0:3a:
3d:88:b5:04:b0:1b:4e:70:b4:8c:2f:83:d8:be:65:
99:fa:9f:8d:05:22:f1:b6:84:a5:ce:36:00:25:7b:
63:2f:c1:32:74:2c:e1:d1:b0:3a:27:30:4b:0d:53:
35:6f:f3:85:f1:e5:69:73:ce:9b:88:f6:db:a0:8b:
db:72:5f:d6:8b:76:12:17:29:98:aa:6b:b4:90:e9:
3e:80:b0:0a:2c:56:b2:5e:a8:59:7d:8b:04:6b:79:
6f:f5:f7:bd:34:26:cb:0d:b0:be:84:e5:de:30:c6:
ba:8e:61:5d:ff:8d:35:94:8a:60:1c:e3:85:dc:10:
a3:26:c0:32:38:05:b6:b8:a4:a6:bf:6a:71:90:ce:
a4:f9:68:5a:c7:6a:4b:38:83:c7:9d:4d:6e:a0:14:
fc:45:42:59:32:79:41:4a:3a:77:41:c2:ac:33:da:
29:f4:6a:51:f9:bc:eb:8f:9e:e5:fb:eb:8c:86:8e:
4b:65:73:ce:bf:f5:a9:da:07:99:d2:79:a1:77:28:
66:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:9F:35:FF:AB:9B:9C:49:9E:BB:4A:F6:29:2D:DB:65:87:65:B8:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af7ec802-b230-3708-b793-ea4415ac93d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:124:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:b2:79:79:e9:01:9e:f7:70:e3:b6:b2:7e:d9:10:4b:14:ba:
ff:92:30:b5:ab:6d:d6:bf:72:f2:43:71:c8:2f:9f:63:0f:8e:
1e:43:17:7d:66:0f:fa:ae:b6:1f:b5:dd:f9:d6:8d:c7:59:81:
b4:f2:4a:e0:11:b0:fa:12:b2:8c:6d:24:d7:be:5b:e2:dc:93:
14:d9:14:ff:6c:f7:9a:95:04:bc:9d:27:9e:1b:ea:5b:7d:7d:
11:f7:56:39:1c:3d:3e:fe:1e:ed:21:e3:e8:9c:e1:16:d7:93:
62:46:d7:bf:5f:89:29:68:02:02:f9:2e:ff:10:cc:e2:f5:40:
20:c1:86:99:44:89:7c:c7:52:16:76:f8:94:36:57:59:55:69:
6d:c6:e4:c6:b8:1c:bc:03:d8:ac:88:27:8c:4c:aa:4a:de:45:
d5:06:3a:75:d0:ca:be:88:27:4e:63:b5:03:a0:d6:c7:92:7d:
9b:71:43:c2:c2:ab:6f:e0:44:73:bc:db:98:2a:a6:cc:9a:ad:
01:cd:60:19:c5:02:73:62:bd:fe:c4:02:fc:1b:db:14:e5:9f:
e7:9b:90:7f:3d:b0:56:ba:9d:a7:c7:f4:e8:99:e4:6b:3a:02:
0b:3b:5a:d0:cc:ee:f1:84:37:e8:c4:6a:96:ba:14:cc:0d:64:
24:c1:16:79
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEhCQwqC+C1PyjwrwoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIxOTEzNDUxOVoXDTI1MDMxOTEyNDUxOVowLzEtMCsGA1UEAxMk
Y2VmNDk4MTctZDgyYS00MTk3LWI4NzctZWRlOGNhMDY2YTg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Y0wSHJ7lx70IIB9mgABh4Q64sSrXqPTACBj
iuHHmnhZRWmhGuPZ8QAugRGQmxKGKKJJuztmOK3UwDo9iLUEsBtOcLSML4PYvmWZ
+p+NBSLxtoSlzjYAJXtjL8EydCzh0bA6JzBLDVM1b/OF8eVpc86biPbboIvbcl/W
i3YSFymYqmu0kOk+gLAKLFayXqhZfYsEa3lv9fe9NCbLDbC+hOXeMMa6jmFd/401
lIpgHOOF3BCjJsAyOAW2uKSmv2pxkM6k+Whax2pLOIPHnU1uoBT8RUJZMnlBSjp3
QcKsM9op9GpR+bzrj57l++uMho5LZXPOv/Wp2geZ0nmhdyhmFQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFBGfNf+rm5xJnrtK9ikt22WHZbiIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWY3ZWM4MDItYjIzMC0z
NzA4LWI3OTMtZWE0NDE1YWM5M2Q5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEk
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCRsnl56QGe93DjtrJ+2RBLFLr/kjC1q23Wv3Ly
Q3HIL59jD44eQxd9Zg/6rrYftd351o3HWYG08krgEbD6ErKMbSTXvlvi3JMU2RT/
bPealQS8nSeeG+pbfX0R91Y5HD0+/h7tIePonOEW15NiRte/X4kpaAIC+S7/EMzi
9UAgwYaZRIl8x1IWdviUNldZVWltxuTGuBy8A9isiCeMTKpK3kXVBjp10Mq+iCdO
Y7UDoNbHkn2bcUPCwqtv4ERzvNuYKqbMmq0BzWAZxQJzYr3+xAL8G9sU5Z/nm5B/
PbBWup2nx/TomeRrOgILO1rQzO7xhDfoxGqWuhTMDWQkwRZ5
-----END CERTIFICATE-----
Generated at Fri Apr 25 20:37:43 2025 by rpki-client