Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bdfcedba-ab31-35fb-b0d2-97d0c84a93d0.roa
File: bdfcedba-ab31-35fb-b0d2-97d0c84a93d0.roa (raw, json)
Hash identifier: z5VEK2C7zZENwqYYpzTi/e5OZWoTp+EIaMjx3IW6JUs=
Subject key identifier: 9E:17:C3:26:85:BD:7C:5D:A2:0B:C4:DF:C7:E2:86:6F:7C:8E:2C:70
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848372014F2088A4E611ACED700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bdfcedba-ab31-35fb-b0d2-97d0c84a93d0.roa
Signing time: Sun 15 Dec 2024 14:00:53 +0000
ROA not before: Sun 15 Dec 2024 14:00:53 +0000
ROA not after: Sat 15 Mar 2025 13:00:53 +0000
asID: 27544
IP address blocks: 2001:500:123::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:37:20:14:f2:08:8a:4e:61:1a:ce:d7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 15 14:00:53 2024 GMT
Not After : Mar 15 13:00:53 2025 GMT
Subject: CN=25af23dc-469a-4a3a-a70f-57a33e3750b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:66:97:fb:f3:6e:7b:3b:56:5b:70:8d:19:14:
90:fb:88:11:df:00:2c:7e:d0:dd:ae:27:d8:15:6f:
de:4c:0b:31:a9:57:e8:08:f6:64:7a:d2:41:ba:6a:
fb:78:67:60:0c:e2:de:6e:fb:c6:de:e6:5c:20:c2:
39:d4:a3:ba:13:ad:81:a9:27:d5:3f:a3:2a:b6:ab:
e8:05:c2:20:53:6a:47:58:78:61:06:d0:b5:22:99:
e8:54:ec:cf:94:e6:cf:ae:37:76:64:9e:85:2f:cf:
b0:47:06:a8:07:7c:2a:f1:17:6f:5d:6e:a6:8f:8f:
2e:cd:26:d6:5a:d1:75:57:d1:fc:c4:dc:3a:21:8f:
2e:a5:6a:93:f2:b0:e5:62:9b:4c:12:66:73:e4:f7:
c0:62:77:01:e7:cc:3c:17:1e:1d:c8:94:96:ae:18:
9a:e6:85:6f:c7:81:f3:61:9d:db:05:1a:ea:3d:be:
61:95:26:95:50:e7:6e:e4:46:d0:43:c7:0e:53:43:
6b:57:ec:74:f1:b7:b5:e8:69:ee:55:a4:2b:aa:82:
db:b4:cf:5f:16:97:f6:db:b7:83:38:f2:8f:26:e2:
93:8d:55:ed:7f:cc:81:41:62:56:17:ea:b7:96:ff:
57:c1:16:36:d2:96:76:25:84:53:65:b3:c9:6d:dc:
99:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:17:C3:26:85:BD:7C:5D:A2:0B:C4:DF:C7:E2:86:6F:7C:8E:2C:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bdfcedba-ab31-35fb-b0d2-97d0c84a93d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:123:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:64:37:a7:d4:c8:be:fa:c1:41:f3:a3:e6:47:52:24:6f:2f:
3e:4a:e4:c0:1a:55:d6:19:25:f4:54:eb:94:d6:1d:5b:b1:cc:
43:89:73:58:03:e0:6f:b0:d3:33:77:ab:30:7d:1e:b7:b1:91:
89:b2:8d:ab:64:2a:68:1c:e7:98:e9:2f:f2:45:ab:ad:a3:f3:
3d:45:68:bb:78:a9:c8:d4:fb:87:8f:e0:c0:96:e1:93:43:78:
3b:20:d4:53:70:14:cd:28:b3:00:9a:3e:96:91:b2:9c:58:9c:
92:39:15:fb:3a:bb:c8:0a:bd:19:b5:e4:aa:07:9c:5c:75:21:
d3:48:13:d0:c7:b5:55:04:47:55:19:85:49:30:20:26:48:2a:
36:a7:6f:e4:87:0f:c0:5b:dd:a9:bd:1b:aa:3b:ba:b4:16:d4:
16:b9:5f:56:6a:04:f7:87:39:35:c7:4d:8b:67:11:07:64:8f:
25:71:e9:ab:fd:19:6b:d7:8c:84:68:3b:12:dd:81:32:3f:b0:
57:3a:43:db:65:39:14:50:b8:0e:bf:23:62:ee:93:f5:4b:e8:
2d:24:be:ef:c6:a3:ac:a3:29:a8:9e:24:42:60:ce:6e:f7:6b:
cc:a7:a9:e2:13:0e:9a:0e:8c:43:f3:c0:0b:6f:79:e0:55:46:
74:ed:cc:67
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEg3IBTyCIpOYRrO1wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIxNTE0MDA1M1oXDTI1MDMxNTEzMDA1M1owLzEtMCsGA1UEAxMk
MjVhZjIzZGMtNDY5YS00YTNhLWE3MGYtNTdhMzNlMzc1MGIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWaX+/NueztWW3CNGRSQ+4gR3wAsftDdrifY
FW/eTAsxqVfoCPZketJBumr7eGdgDOLebvvG3uZcIMI51KO6E62BqSfVP6Mqtqvo
BcIgU2pHWHhhBtC1IpnoVOzPlObPrjd2ZJ6FL8+wRwaoB3wq8RdvXW6mj48uzSbW
WtF1V9H8xNw6IY8upWqT8rDlYptMEmZz5PfAYncB58w8Fx4dyJSWrhia5oVvx4Hz
YZ3bBRrqPb5hlSaVUOdu5EbQQ8cOU0NrV+x08be16GnuVaQrqoLbtM9fFpf227eD
OPKPJuKTjVXtf8yBQWJWF+q3lv9XwRY20pZ2JYRTZbPJbdyZwQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFJ4XwyaFvXxdogvE38fihm98jixwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmRmY2VkYmEtYWIzMS0z
NWZiLWIwZDItOTdkMGM4NGE5M2QwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQA9ZDen1Mi++sFB86PmR1Ikby8+SuTAGlXWGSX0
VOuU1h1bscxDiXNYA+BvsNMzd6swfR63sZGJso2rZCpoHOeY6S/yRauto/M9RWi7
eKnI1PuHj+DAluGTQ3g7INRTcBTNKLMAmj6WkbKcWJySORX7OrvICr0ZteSqB5xc
dSHTSBPQx7VVBEdVGYVJMCAmSCo2p2/khw/AW92pvRuqO7q0FtQWuV9WagT3hzk1
x02LZxEHZI8lcemr/Rlr14yEaDsS3YEyP7BXOkPbZTkUULgOvyNi7pP1S+gtJL7v
xqOsoymoniRCYM5u92vMp6niEw6aDoxD88ALb3ngVUZ07cxn
-----END CERTIFICATE-----
Generated at Fri Apr 25 19:36:10 2025 by rpki-client