Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf917705-e4d9-304f-b106-ae96a02b19bc.roa
File: bf917705-e4d9-304f-b106-ae96a02b19bc.roa (raw, json)
Hash identifier: VFMtRqd1S8OqrKhvbuECBue9bIQ8r8gy+pTh6waiBzs=
Subject key identifier: A8:E0:B4:DB:36:A3:CC:38:67:55:DF:BE:41:15:F1:4E:06:5E:64:37
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858482C1BA968064898CDF16541C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf917705-e4d9-304f-b106-ae96a02b19bc.roa
Signing time: Wed 11 Dec 2024 15:18:11 +0000
ROA not before: Wed 11 Dec 2024 15:18:11 +0000
ROA not after: Tue 11 Mar 2025 14:18:11 +0000
asID: 396616
IP address blocks: 2620:0:5050::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2c:1b:a9:68:06:48:98:cd:f1:65:41:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 11 15:18:11 2024 GMT
Not After : Mar 11 14:18:11 2025 GMT
Subject: CN=1399e6e7-bb58-42c6-871b-7eb41c1bcfc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a2:5c:7f:7c:e3:4f:6b:2d:92:c9:3b:14:01:
76:64:ac:6c:69:20:7c:4c:ad:13:b4:1d:5e:fa:e4:
ec:97:64:71:01:2d:75:de:d8:d6:62:35:c6:e8:ee:
70:89:3e:19:85:e6:a5:81:a8:6c:bc:f6:82:49:7e:
f7:6e:d8:79:48:e4:01:d5:f9:ba:bb:cf:28:84:d3:
cb:d1:f6:15:69:7d:ec:e7:b5:c3:2d:f4:1f:5b:86:
ca:6b:8d:73:a7:42:2b:b8:85:77:eb:f8:c6:60:ba:
b5:4b:60:a3:67:58:83:e9:da:1e:5a:9a:e2:80:73:
b2:23:d2:95:7e:11:93:33:38:14:34:b0:eb:26:db:
15:76:39:36:0d:9f:93:e2:b8:ee:12:1a:fe:0f:90:
c8:f4:67:07:36:4d:a3:77:b7:25:aa:41:e8:66:6e:
fa:e8:b9:12:ce:d5:9f:76:dd:0e:ca:42:1b:f9:53:
9f:76:04:f9:fc:11:ac:c8:21:1e:e9:ea:a8:69:1c:
cd:9e:0b:af:8d:37:c0:00:08:3c:86:d5:86:c0:12:
72:cc:d0:12:c2:9f:95:b2:bf:8f:96:f3:75:5f:dd:
6d:aa:ac:8c:cc:eb:cb:78:14:e1:d2:fb:66:d1:98:
05:aa:d7:14:10:02:4e:c0:48:01:64:5f:2a:da:a9:
f2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E0:B4:DB:36:A3:CC:38:67:55:DF:BE:41:15:F1:4E:06:5E:64:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf917705-e4d9-304f-b106-ae96a02b19bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:0:5050:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:dd:1b:2f:ba:9e:09:d9:1f:27:3d:f5:a4:e0:2a:ec:9b:cf:
d1:f7:08:1a:fa:72:67:20:18:dc:a7:56:4f:15:50:06:17:8e:
a8:9f:4d:fe:2b:4c:f0:7b:4c:1b:bd:6a:83:d4:d6:65:8f:f3:
c6:56:f4:4e:86:97:94:99:7f:e2:07:5c:0b:9d:00:51:d3:f5:
a8:7e:16:d3:fb:c8:f7:51:ab:10:93:5b:9a:7b:57:5d:37:90:
bc:0d:66:34:bd:fb:2b:e9:0a:11:a1:d7:ea:88:cf:5d:b0:d2:
2c:66:d6:84:8a:fc:96:a2:85:b5:22:45:d2:94:55:69:ec:71:
14:f3:af:3a:1b:1a:a6:bd:33:49:08:6e:73:35:55:2b:ef:a8:
4d:83:64:51:2c:d6:8b:04:e2:71:4d:a0:5b:8c:71:38:60:fd:
5e:ea:17:4b:2a:5a:04:81:d8:e1:0c:eb:6a:48:5b:2c:07:1c:
d7:a6:c8:f8:22:ff:90:39:46:c8:63:82:8a:d4:27:82:44:df:
e3:25:c5:cf:f5:55:dd:98:0b:84:64:b5:dd:85:5a:e3:54:ba:
ed:e4:8a:e6:3d:5d:78:fa:9d:63:d5:41:a1:8e:3f:20:1b:a9:
e9:28:3e:42:ea:f9:ed:51:a0:6a:89:2c:e9:e7:01:3e:a2:dd:
dd:2c:94:30
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEgsG6loBkiYzfFlQcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIxMTE1MTgxMVoXDTI1MDMxMTE0MTgxMVowLzEtMCsGA1UEAxMk
MTM5OWU2ZTctYmI1OC00MmM2LTg3MWItN2ViNDFjMWJjZmM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqJcf3zjT2stksk7FAF2ZKxsaSB8TK0TtB1e
+uTsl2RxAS113tjWYjXG6O5wiT4ZhealgahsvPaCSX73bth5SOQB1fm6u88ohNPL
0fYVaX3s57XDLfQfW4bKa41zp0IruIV36/jGYLq1S2CjZ1iD6doeWprigHOyI9KV
fhGTMzgUNLDrJtsVdjk2DZ+T4rjuEhr+D5DI9GcHNk2jd7clqkHoZm766LkSztWf
dt0OykIb+VOfdgT5/BGsyCEe6eqoaRzNnguvjTfAAAg8htWGwBJyzNASwp+Vsr+P
lvN1X91tqqyMzOvLeBTh0vtm0ZgFqtcUEAJOwEgBZF8q2qnyfQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFKjgtNs2o8w4Z1XfvkEV8U4GXmQ3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmY5MTc3MDUtZTRkOS0z
MDRmLWIxMDYtYWU5NmEwMmIxOWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAAFBQ
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQB93Rsvup4J2R8nPfWk4Crsm8/R9wga+nJnIBjc
p1ZPFVAGF46on03+K0zwe0wbvWqD1NZlj/PGVvROhpeUmX/iB1wLnQBR0/WofhbT
+8j3UasQk1uae1ddN5C8DWY0vfsr6QoRodfqiM9dsNIsZtaEivyWooW1IkXSlFVp
7HEU8686GxqmvTNJCG5zNVUr76hNg2RRLNaLBOJxTaBbjHE4YP1e6hdLKloEgdjh
DOtqSFssBxzXpsj4Iv+QOUbIY4KK1CeCRN/jJcXP9VXdmAuEZLXdhVrjVLrt5Irm
PV14+p1j1UGhjj8gG6npKD5C6vntUaBqiSzp5wE+ot3dLJQw
-----END CERTIFICATE-----
Generated at Fri Apr 25 23:53:26 2025 by rpki-client