Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e403e44c-01b0-30ee-99a9-83bf8a3cc187.roa
File: e403e44c-01b0-30ee-99a9-83bf8a3cc187.roa (raw, json)
Hash identifier: fLdWj5i0gFt6MDgnaBqM8TyigVnqfkPm2VCKzy4GJv0=
Subject key identifier: 60:22:A4:81:30:C8:71:FD:96:EB:51:98:00:57:25:38:A2:76:8E:96
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489E5E43E9246D6F195EDB5E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e403e44c-01b0-30ee-99a9-83bf8a3cc187.roa
Signing time: Tue 21 Jan 2025 13:34:32 +0000
ROA not before: Tue 21 Jan 2025 13:34:32 +0000
ROA not after: Mon 21 Apr 2025 12:34:32 +0000
asID: 396559
IP address blocks: 2001:503:39c1::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:5e:43:e9:24:6d:6f:19:5e:db:5e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 21 13:34:32 2025 GMT
Not After : Apr 21 12:34:32 2025 GMT
Subject: CN=89f846d0-a8eb-43e2-b4e3-2d3cb2cb3c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:39:49:d9:6d:57:e3:d4:06:1a:53:90:79:b5:
dc:f9:29:e3:48:e4:a7:a0:90:bf:5f:39:f6:ea:6a:
0b:20:c5:3c:c2:07:d8:e3:e7:59:57:f5:3c:84:2b:
ac:a4:9e:cc:cd:18:9c:62:4e:c0:fe:4a:46:99:0d:
32:b9:35:a3:33:09:c5:dd:81:f4:9d:fc:2a:08:7b:
cf:93:97:cb:2f:6e:37:2b:b1:4f:b0:6a:71:64:1f:
0d:cc:47:b8:30:35:69:be:d9:3f:0c:bb:31:29:db:
f5:5b:f6:a7:45:77:9a:a3:bd:28:cb:33:35:c1:d3:
d2:b3:e7:be:97:08:08:e9:ad:88:af:3e:6f:67:34:
cc:33:1c:e0:c9:d6:d1:09:b1:19:72:7e:b4:52:92:
7f:2a:14:99:be:75:90:16:8e:7f:58:2e:28:37:ac:
1e:df:eb:a1:7c:7d:83:19:fd:fc:f0:4c:59:35:1a:
71:98:dc:0b:89:34:ad:8f:77:2f:8b:2f:bb:e1:2c:
88:bd:94:28:3e:f7:49:cf:66:c4:3c:50:a3:35:ab:
b5:5a:e8:b6:76:49:0d:e5:99:0c:00:46:aa:f7:8c:
6c:25:8d:fe:0d:c8:8b:b0:10:ad:6f:d2:12:b4:38:
a3:46:b9:8e:5b:7a:17:ca:e4:d4:7e:ff:2a:9b:9d:
0a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:22:A4:81:30:C8:71:FD:96:EB:51:98:00:57:25:38:A2:76:8E:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e403e44c-01b0-30ee-99a9-83bf8a3cc187.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:39c1:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:bd:48:ba:37:37:39:8e:92:83:c7:46:83:05:dc:03:3b:b8:
c6:94:d0:e5:95:27:1c:b9:ac:4d:be:79:e2:25:d9:42:5f:35:
24:7e:c3:f1:a1:80:1c:4a:5a:62:ce:ca:30:11:cb:87:d5:e2:
08:d5:08:03:66:91:24:f2:d0:b0:fb:39:25:35:2d:a3:e4:08:
73:ef:58:5e:e8:ad:a0:1e:79:81:5a:47:71:ad:95:ad:5c:19:
a9:c0:79:29:5b:d4:18:d9:e7:6f:71:62:9c:66:54:ff:6b:71:
64:7f:64:06:92:a9:25:3a:05:4e:2d:61:e5:8f:f3:4d:4b:a5:
3f:1e:e4:4e:61:b6:2e:a0:b2:a7:cc:02:9f:26:be:8f:ca:36:
40:20:81:f0:22:a1:ec:f8:e4:60:87:e5:37:65:2e:12:cb:3f:
b8:ea:9a:4a:69:94:4c:20:77:58:45:3b:db:fb:83:4a:3f:0f:
5b:8f:a7:b1:cb:f3:7b:4d:85:08:69:ac:06:c5:b5:a0:fe:6e:
7e:d1:8a:a1:7e:a2:26:a9:36:81:20:fe:c7:7e:b2:bd:da:49:
41:dd:4f:f1:37:48:8f:cd:c7:2a:d2:ad:50:9a:f8:9c:26:f6:
aa:ef:72:7c:95:1d:a5:39:d3:3c:97:b2:b9:c1:c8:43:2b:3f:
51:22:3e:05
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEieXkPpJG1vGV7bXgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDEyMTEzMzQzMloXDTI1MDQyMTEyMzQzMlowLzEtMCsGA1UEAxMk
ODlmODQ2ZDAtYThlYi00M2UyLWI0ZTMtMmQzY2IyY2IzYzFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljlJ2W1X49QGGlOQebXc+SnjSOSnoJC/Xzn2
6moLIMU8wgfY4+dZV/U8hCuspJ7MzRicYk7A/kpGmQ0yuTWjMwnF3YH0nfwqCHvP
k5fLL243K7FPsGpxZB8NzEe4MDVpvtk/DLsxKdv1W/anRXeao70oyzM1wdPSs+e+
lwgI6a2Irz5vZzTMMxzgydbRCbEZcn60UpJ/KhSZvnWQFo5/WC4oN6we3+uhfH2D
Gf388ExZNRpxmNwLiTStj3cviy+74SyIvZQoPvdJz2bEPFCjNau1Wui2dkkN5ZkM
AEaq94xsJY3+DciLsBCtb9IStDijRrmOW3oXyuTUfv8qm50KOQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFGAipIEwyHH9lutRmABXJTiido6WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTQwM2U0NGMtMDFiMC0z
MGVlLTk5YTktODNiZjhhM2NjMTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAznB
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBLvUi6Nzc5jpKDx0aDBdwDO7jGlNDllSccuaxN
vnniJdlCXzUkfsPxoYAcSlpizsowEcuH1eII1QgDZpEk8tCw+zklNS2j5Ahz71he
6K2gHnmBWkdxrZWtXBmpwHkpW9QY2edvcWKcZlT/a3Fkf2QGkqklOgVOLWHlj/NN
S6U/HuROYbYuoLKnzAKfJr6PyjZAIIHwIqHs+ORgh+U3ZS4Syz+46ppKaZRMIHdY
RTvb+4NKPw9bj6exy/N7TYUIaawGxbWg/m5+0YqhfqImqTaBIP7HfrK92klB3U/x
N0iPzccq0q1QmvicJvaq73J8lR2lOdM8l7K5wchDKz9RIj4F
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:10:21 2025 by rpki-client