Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e1f3192d-375b-3353-99ad-f1eac5769d8d.roa
File: e1f3192d-375b-3353-99ad-f1eac5769d8d.roa (raw, json)
Hash identifier: yfGqWbWnAAZ3x8IkHNyERaOXJHktwDKGhrpgqNVB2SQ=
Subject key identifier: 6F:8B:67:23:1C:3C:6A:49:ED:C7:8E:89:CF:A7:DB:7C:22:31:76:60
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584842431B6B2598747F0699DA80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e1f3192d-375b-3353-99ad-f1eac5769d8d.roa
Signing time: Thu 19 Dec 2024 13:45:27 +0000
ROA not before: Thu 19 Dec 2024 13:45:27 +0000
ROA not after: Wed 19 Mar 2025 12:45:27 +0000
asID: 396553
IP address blocks: 2001:500:125::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:43:1b:6b:25:98:74:7f:06:99:da:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 13:45:27 2024 GMT
Not After : Mar 19 12:45:27 2025 GMT
Subject: CN=70612d86-ace5-432b-96b3-20da508a21ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:53:39:b6:6a:a8:42:05:a2:e4:21:15:bc:da:
75:cc:e7:91:24:a2:24:a4:f2:37:db:be:d3:4f:1a:
22:35:d0:73:cc:f4:fa:83:d3:ca:f6:0d:64:a1:5d:
e2:c3:44:21:f1:ae:b7:fd:9d:7a:f7:87:a7:2e:63:
1f:e1:e9:76:4f:6e:22:7d:97:f5:50:39:f0:99:e8:
6b:7f:10:75:46:a8:9f:af:dd:4b:c1:7c:40:f7:d2:
b1:90:54:50:52:06:78:72:db:ba:40:98:ef:75:43:
24:c6:ec:3f:00:9c:e4:0d:8f:31:49:2c:be:08:03:
54:bf:bd:a5:86:01:2a:ff:67:32:18:4a:e7:ae:17:
bd:a8:5e:a4:dc:39:0b:d1:bc:86:95:38:9c:ab:7f:
44:4f:af:59:2c:af:88:f4:b4:e1:94:c7:8a:db:ec:
27:42:cb:09:30:5a:78:e2:62:02:df:dc:44:06:3b:
30:28:d5:06:17:79:3d:78:a8:a4:64:1b:d4:45:76:
f7:c3:89:b1:dc:4e:b3:9a:b2:d7:50:91:25:c6:43:
56:1b:74:25:b5:f1:70:4a:d5:c5:f4:fe:97:6a:fa:
55:cb:f6:03:08:10:ae:3a:bc:47:eb:38:ef:5c:d6:
27:28:d9:78:e3:f7:12:cb:89:a7:8b:6d:93:c5:f9:
3f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:8B:67:23:1C:3C:6A:49:ED:C7:8E:89:CF:A7:DB:7C:22:31:76:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e1f3192d-375b-3353-99ad-f1eac5769d8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:125:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:3d:3c:9e:e0:fe:da:a1:a4:c1:f2:75:a9:b7:85:6d:22:0b:
26:c4:a6:bf:89:92:c2:10:31:0a:3d:2f:56:46:ba:64:d8:86:
69:ae:4a:b0:ef:f9:55:a0:c4:6a:73:f6:09:44:e7:45:58:2a:
4d:4b:7b:0a:5d:2a:45:59:bb:3f:18:56:6a:73:54:11:71:13:
ca:63:af:35:7d:43:d8:90:9d:58:b0:ef:50:08:ae:46:c4:4e:
c1:2e:1c:30:7a:4b:bc:a7:36:b7:b8:0a:5e:96:34:22:d3:c4:
52:d0:59:6b:f5:31:f9:d3:2f:59:e2:69:1e:63:5f:ee:75:5f:
bf:8c:87:ff:52:8c:df:d4:be:f3:7c:30:91:4d:82:ee:9b:0d:
d8:e2:90:68:f3:f0:f3:19:bb:b4:ee:df:b2:c7:0a:c1:95:99:
88:40:03:ba:da:5b:b4:51:05:71:a0:f6:4d:1b:58:0d:0c:af:
a0:28:ad:94:ac:9d:9c:11:df:1e:7a:b1:f1:c2:1b:2b:e8:69:
60:a1:25:d3:21:18:5a:e1:55:29:86:4c:ef:97:e7:79:7d:e4:
6f:ee:bf:fd:e8:23:41:71:ec:9a:b4:80:f7:40:cd:76:b0:d7:
e6:0f:e2:95:12:20:52:1e:7e:75:21:15:49:45:27:e1:18:50:
35:ce:a6:79
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEhCQxtrJZh0fwaZ2oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIxOTEzNDUyN1oXDTI1MDMxOTEyNDUyN1owLzEtMCsGA1UEAxMk
NzA2MTJkODYtYWNlNS00MzJiLTk2YjMtMjBkYTUwOGEyMWVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslM5tmqoQgWi5CEVvNp1zOeRJKIkpPI3277T
TxoiNdBzzPT6g9PK9g1koV3iw0Qh8a63/Z1694enLmMf4el2T24ifZf1UDnwmehr
fxB1Rqifr91LwXxA99KxkFRQUgZ4ctu6QJjvdUMkxuw/AJzkDY8xSSy+CANUv72l
hgEq/2cyGErnrhe9qF6k3DkL0byGlTicq39ET69ZLK+I9LThlMeK2+wnQssJMFp4
4mIC39xEBjswKNUGF3k9eKikZBvURXb3w4mx3E6zmrLXUJElxkNWG3QltfFwStXF
9P6XavpVy/YDCBCuOrxH6zjvXNYnKNl44/cSy4mni22Txfk/KQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFG+LZyMcPGpJ7ceOic+n23wiMXZgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTFmMzE5MmQtMzc1Yi0z
MzUzLTk5YWQtZjFlYWM1NzY5ZDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQB3PTye4P7aoaTB8nWpt4VtIgsmxKa/iZLCEDEK
PS9WRrpk2IZprkqw7/lVoMRqc/YJROdFWCpNS3sKXSpFWbs/GFZqc1QRcRPKY681
fUPYkJ1YsO9QCK5GxE7BLhwweku8pza3uApeljQi08RS0Flr9TH50y9Z4mkeY1/u
dV+/jIf/Uozf1L7zfDCRTYLumw3Y4pBo8/DzGbu07t+yxwrBlZmIQAO62lu0UQVx
oPZNG1gNDK+gKK2UrJ2cEd8eerHxwhsr6GlgoSXTIRha4VUphkzvl+d5feRv7r/9
6CNBceyatID3QM12sNfmD+KVEiBSHn51IRVJRSfhGFA1zqZ5
-----END CERTIFICATE-----
Generated at Sat Apr 26 00:40:30 2025 by rpki-client