Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d403863d-f5b5-3aa4-ba7f-7152f7d233ab.roa
File: d403863d-f5b5-3aa4-ba7f-7152f7d233ab.roa (raw, json)
Hash identifier: POdi2BbrHjBzc0irhMeLe1CWQqi8NeB/Ty+OiuZ0MTU=
Subject key identifier: 2A:83:A9:6A:4F:E5:DB:A7:E6:C0:F9:6B:3C:CB:5E:36:D8:36:72:83
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858488DAB7195240D26910C73DD80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d403863d-f5b5-3aa4-ba7f-7152f7d233ab.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 36616
IP address blocks: 2001:500:7967::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:71:95:24:0d:26:91:0c:73:dd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=7afd7e23-c5c0-4fe4-9524-7a5f6d2a6425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:87:2b:64:56:0d:47:cb:cb:db:ef:62:dd:7b:
3a:d6:9a:8f:f9:95:ab:3d:83:97:68:b0:62:c7:5d:
98:d4:80:16:c4:0e:5b:85:c9:6f:d4:5f:5b:ee:8b:
d6:52:3c:00:58:7c:a2:a1:1e:24:38:68:4c:67:c9:
c9:01:a4:83:ed:14:87:21:f7:f5:89:c9:dd:e7:7e:
0e:fe:65:df:c0:b1:4b:43:f9:e6:9a:d7:bf:c3:76:
80:13:70:33:4a:62:9c:ad:07:ea:18:3e:d9:2c:74:
6d:65:b4:56:6e:6a:ad:32:bb:da:f0:bd:cf:9d:c4:
7b:f7:b6:cf:78:1a:af:53:a3:ce:d9:48:07:0f:16:
8c:e8:d6:41:38:b0:63:ad:de:ac:62:4c:fa:fa:fd:
db:a6:dd:ad:3c:0b:db:ea:62:63:b4:36:a4:99:72:
cf:9f:49:40:f0:84:e8:86:ad:bd:10:86:1c:5a:6c:
f7:dc:89:b4:d3:56:0c:d8:4c:28:cf:60:39:43:1d:
ed:52:fc:2c:01:ca:85:dd:39:be:f9:27:c0:0d:16:
6e:64:da:84:19:94:f2:61:5a:bb:c1:ed:3e:10:3f:
7c:fb:de:dd:7c:4a:70:ea:09:2e:0b:1d:8d:45:6c:
da:8d:35:91:02:10:f2:d7:c1:cd:2b:14:02:e9:e7:
4d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:83:A9:6A:4F:E5:DB:A7:E6:C0:F9:6B:3C:CB:5E:36:D8:36:72:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d403863d-f5b5-3aa4-ba7f-7152f7d233ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:7967:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:fc:69:c7:0b:37:a3:a6:7e:de:45:e7:22:fa:d5:cc:6a:eb:
1f:5b:50:a7:41:0a:f3:8f:ff:57:3d:7d:3d:74:04:c7:19:4b:
e3:fc:e6:77:3c:d7:5c:3c:10:0d:22:91:7c:5d:75:21:f7:04:
71:7e:c3:c3:28:01:45:5b:c2:c7:dd:f8:a2:6b:39:94:3a:9a:
ab:22:99:85:41:9e:a9:f5:bd:ab:0e:01:ea:84:4f:1c:40:a7:
69:c4:59:e2:60:b3:40:84:4b:68:7c:e6:43:e3:84:4b:c8:71:
10:7f:90:a7:90:35:19:2d:19:00:e3:2d:4b:d9:1e:38:9c:84:
20:bd:5c:0f:61:9b:08:1e:c6:ef:cc:c4:95:5c:44:9a:23:73:
6a:86:85:f6:1c:ae:73:85:9b:59:47:e1:09:3d:12:23:69:df:
4d:34:b6:4c:50:03:f3:a6:af:d8:13:47:a5:ad:f4:17:d3:c4:
39:54:ca:ec:47:5f:1d:e6:02:54:51:f5:59:cb:28:22:fc:d7:
6d:30:bd:08:61:02:dd:31:a2:32:2a:15:49:be:18:c9:88:9a:
12:40:57:0e:b4:d1:8f:40:1f:46:4a:61:81:52:66:03:c1:dc:
5c:fc:6e:80:e4:c0:03:0e:a9:05:d0:39:51:62:7b:e5:09:6b:
ee:db:0a:6f
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEiNq3GVJA0mkQxz3YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDExNTE0MDA1MVoXDTI1MDQxNTEzMDA1MVowLzEtMCsGA1UEAxMk
N2FmZDdlMjMtYzVjMC00ZmU0LTk1MjQtN2E1ZjZkMmE2NDI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IcrZFYNR8vL2+9i3Xs61pqP+ZWrPYOXaLBi
x12Y1IAWxA5bhclv1F9b7ovWUjwAWHyioR4kOGhMZ8nJAaSD7RSHIff1icnd534O
/mXfwLFLQ/nmmte/w3aAE3AzSmKcrQfqGD7ZLHRtZbRWbmqtMrva8L3PncR797bP
eBqvU6PO2UgHDxaM6NZBOLBjrd6sYkz6+v3bpt2tPAvb6mJjtDakmXLPn0lA8ITo
hq29EIYcWmz33Im001YM2Ewoz2A5Qx3tUvwsAcqF3Tm++SfADRZuZNqEGZTyYVq7
we0+ED98+97dfEpw6gkuCx2NRWzajTWRAhDy18HNKxQC6edN4QIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFCqDqWpP5dun5sD5azzLXjbYNnKDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDQwMzg2M2QtZjViNS0z
YWE0LWJhN2YtNzE1MmY3ZDIzM2FiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAHln
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCg/GnHCzejpn7eReci+tXMausfW1CnQQrzj/9X
PX09dATHGUvj/OZ3PNdcPBANIpF8XXUh9wRxfsPDKAFFW8LH3fiiazmUOpqrIpmF
QZ6p9b2rDgHqhE8cQKdpxFniYLNAhEtofOZD44RLyHEQf5CnkDUZLRkA4y1L2R44
nIQgvVwPYZsIHsbvzMSVXESaI3NqhoX2HK5zhZtZR+EJPRIjad9NNLZMUAPzpq/Y
E0elrfQX08Q5VMrsR18d5gJUUfVZyygi/NdtML0IYQLdMaIyKhVJvhjJiJoSQFcO
tNGPQB9GSmGBUmYDwdxc/G6A5MADDqkF0DlRYnvlCWvu2wpv
-----END CERTIFICATE-----
Generated at Fri Apr 25 19:55:50 2025 by rpki-client