Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba5ca9f9-5ec6-3a35-acd1-aabe4bcb9101.roa
File: ba5ca9f9-5ec6-3a35-acd1-aabe4bcb9101.roa (raw, json)
Hash identifier: 8Wp1cbUhLJuw4lJUNci5vBsFeRAa3NHX5y+ZWIs4O8c=
Subject key identifier: EA:35:D4:CF:BC:AD:0A:D6:11:20:70:8B:E0:81:AB:88:63:EE:66:57
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584845157ED59676B3FA4C0B7AC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba5ca9f9-5ec6-3a35-acd1-aabe4bcb9101.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 36626
IP address blocks: 2001:500:122::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:7e:d5:96:76:b3:fa:4c:0b:7a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=3a234083-1f48-4ffa-97bf-28e8a239f904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f1:b9:f8:5e:c2:00:c0:40:38:d3:1f:c2:01:
a7:e6:87:a2:85:f5:02:01:e7:c4:e8:a5:b0:ed:da:
d9:7a:ed:5f:39:f3:52:30:db:74:ee:9c:85:a7:57:
62:5b:88:ad:6d:3c:f9:e5:87:e7:98:0f:46:ac:56:
ca:26:89:f8:d8:d2:1f:b9:67:86:db:9e:e6:28:eb:
94:65:bf:9b:a2:cf:d4:66:52:6c:f8:31:99:08:68:
8d:8b:19:13:6a:c8:ab:c0:8f:79:40:c0:9b:cf:f0:
47:89:fc:06:ac:02:d4:b4:74:04:9c:ff:f8:b7:ff:
b2:21:5b:69:b6:cc:ad:60:66:df:9a:35:54:54:f0:
60:2f:1b:d6:2d:d2:23:5c:c1:80:5a:87:9c:9d:b4:
e6:6a:39:fd:9e:fe:11:d3:71:f5:e8:e2:a4:07:67:
56:b6:e4:98:cf:2b:64:27:f9:0f:83:6a:67:52:8d:
b4:59:89:94:77:10:fa:bf:90:d7:35:5c:c4:80:f0:
17:13:e4:8b:ab:22:15:fe:a6:4f:7d:eb:de:d8:f4:
5d:8f:a9:69:46:b7:25:5a:f3:6a:aa:d7:6f:92:85:
a0:69:d1:52:94:20:80:81:a3:bf:4f:cd:0b:35:6e:
48:89:40:13:59:63:97:08:e8:50:23:21:39:99:f7:
49:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:35:D4:CF:BC:AD:0A:D6:11:20:70:8B:E0:81:AB:88:63:EE:66:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba5ca9f9-5ec6-3a35-acd1-aabe4bcb9101.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:122:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:b5:65:c5:93:1b:d0:c9:30:0e:f4:aa:58:06:70:b5:30:13:
a6:cd:75:3c:b5:04:a3:21:21:c2:4b:d2:a7:51:de:91:47:b5:
80:88:81:fb:7c:99:a1:d9:74:2d:8b:ac:9d:b7:a6:4d:85:56:
72:b9:99:0f:1b:7e:cb:66:3a:7d:dd:c4:6c:f0:cc:71:6d:15:
b5:64:b0:8d:98:5e:45:cc:71:c1:f6:42:d8:be:47:79:49:a2:
4d:af:4f:6a:e9:3e:80:1d:8d:a3:cf:cf:dd:53:47:95:d0:02:
ab:7a:82:c9:f3:38:3d:7d:8c:ec:38:90:7f:70:27:a3:fc:66:
a7:53:ed:08:51:25:93:04:67:28:ef:2a:ef:2f:d8:6c:65:38:
6e:3f:eb:0c:7d:29:d5:8e:0d:20:87:ed:15:c5:fd:3e:d0:5b:
af:d8:02:86:5f:6e:a7:ef:dd:77:b3:2d:ed:ed:98:24:3e:30:
cf:bb:e9:df:d6:b6:e1:51:07:05:d6:7a:be:ca:0d:45:c4:ff:
2a:f8:7f:e4:ef:f3:54:7c:4d:d2:5b:b7:2e:49:aa:53:3c:f0:
c2:86:f7:52:a2:37:16:22:22:f5:85:52:81:ab:b7:9f:41:80:
0f:64:6c:d0:f8:aa:45:11:0d:c7:f4:e8:a6:00:d9:12:91:02:
0a:ca:99:2f
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEhFFX7Vlnaz+kwLesAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIyMDE0MDA1MVoXDTI1MDMyMDEzMDA1MVowLzEtMCsGA1UEAxMk
M2EyMzQwODMtMWY0OC00ZmZhLTk3YmYtMjhlOGEyMzlmOTA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/G5+F7CAMBAONMfwgGn5oeihfUCAefE6KWw
7drZeu1fOfNSMNt07pyFp1diW4itbTz55YfnmA9GrFbKJon42NIfuWeG257mKOuU
Zb+bos/UZlJs+DGZCGiNixkTasirwI95QMCbz/BHifwGrALUtHQEnP/4t/+yIVtp
tsytYGbfmjVUVPBgLxvWLdIjXMGAWoecnbTmajn9nv4R03H16OKkB2dWtuSYzytk
J/kPg2pnUo20WYmUdxD6v5DXNVzEgPAXE+SLqyIV/qZPfeve2PRdj6lpRrclWvNq
qtdvkoWgadFSlCCAgaO/T80LNW5IiUATWWOXCOhQIyE5mfdJuQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFOo11M+8rQrWESBwi+CBq4hj7mZXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmE1Y2E5ZjktNWVjNi0z
YTM1LWFjZDEtYWFiZTRiY2I5MTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEi
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCwtWXFkxvQyTAO9KpYBnC1MBOmzXU8tQSjISHC
S9KnUd6RR7WAiIH7fJmh2XQti6ydt6ZNhVZyuZkPG37LZjp93cRs8MxxbRW1ZLCN
mF5FzHHB9kLYvkd5SaJNr09q6T6AHY2jz8/dU0eV0AKreoLJ8zg9fYzsOJB/cCej
/GanU+0IUSWTBGco7yrvL9hsZThuP+sMfSnVjg0gh+0Vxf0+0Fuv2AKGX26n7913
sy3t7ZgkPjDPu+nf1rbhUQcF1nq+yg1FxP8q+H/k7/NUfE3SW7cuSapTPPDChvdS
ojcWIiL1hVKBq7efQYAPZGzQ+KpFEQ3H9OimANkSkQIKypkv
-----END CERTIFICATE-----
Generated at Fri Apr 25 20:03:16 2025 by rpki-client