Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff43cd63-0c04-37a5-9b68-7ecd614eb2e0.roa
File: ff43cd63-0c04-37a5-9b68-7ecd614eb2e0.roa (raw, json)
Hash identifier: q2ueRbPQ+QVz3nIwNv6poocpPd1y8A2mD699aaAhT9s=
Subject key identifier: AF:C5:3B:1D:FB:64:49:02:6D:7F:EF:E5:E1:A7:63:52:F3:36:23:1F
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584858A046D9388AFD994F55CF80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff43cd63-0c04-37a5-9b68-7ecd614eb2e0.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 396547
IP address blocks: 2001:500:120::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:46:d9:38:8a:fd:99:4f:55:cf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=19cd961e-e18b-406c-a336-4adc9e5cb776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:aa:59:2c:c3:a7:70:1c:50:a1:a8:7b:f2:89:
34:dc:90:ed:5f:cc:75:36:33:f5:35:a9:86:03:b6:
0d:6a:64:43:ab:94:84:ae:0d:2f:42:c7:66:48:b0:
40:69:13:24:0e:9c:1c:da:8a:6d:c7:34:13:af:5d:
2c:1f:ec:73:e8:4e:5a:39:d8:9d:1d:f7:90:02:d1:
0c:82:63:50:87:45:ec:03:02:97:08:0d:11:0d:2a:
2b:49:db:8d:18:a1:e9:df:8e:fd:32:0c:57:95:be:
65:27:b0:d9:61:00:b6:a7:e6:bd:cd:f4:2e:29:01:
a9:f3:2b:9a:4f:db:42:70:0e:e8:65:5a:a3:06:42:
9a:32:d7:15:33:01:bd:94:f1:80:06:41:ee:f6:9a:
3e:5b:cc:e4:7d:c2:37:d5:6d:d3:24:a3:b9:aa:73:
0e:03:d5:82:bf:dc:c8:c2:9e:73:a8:76:8b:a9:c3:
40:2d:50:0c:93:8d:c3:ae:8c:2a:18:83:bb:3d:9b:
63:17:c4:9c:53:69:5f:f2:98:5c:05:a2:b7:b5:de:
34:5c:77:79:b2:9a:ee:f8:b3:1b:8b:1f:9f:b9:20:
ec:6b:1e:94:90:d2:30:e2:c3:c0:33:f3:26:4d:12:
cc:e5:bd:fa:dc:8f:1e:7f:d2:14:53:7b:8f:12:dd:
4d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C5:3B:1D:FB:64:49:02:6D:7F:EF:E5:E1:A7:63:52:F3:36:23:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff43cd63-0c04-37a5-9b68-7ecd614eb2e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:120:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:b4:64:1b:28:da:cc:0b:ad:c7:a4:b7:2f:cd:1c:0c:2f:65:
4a:82:9a:09:a8:a6:2d:26:71:44:cf:92:ec:34:6f:43:3b:85:
72:0d:d3:89:00:50:18:ad:54:83:c6:d7:74:13:9b:70:4d:1e:
a7:70:65:1e:39:b7:fd:27:02:31:a0:89:48:d3:c3:dd:8d:72:
08:be:f8:ce:32:67:94:82:8c:53:d7:08:29:0f:d7:91:a3:e1:
8a:de:11:df:f4:7e:9d:50:39:d9:af:00:51:e1:98:ea:c2:d4:
fc:0d:e2:50:c8:4d:be:56:c7:70:df:0b:56:9a:7d:74:fd:22:
b9:f3:ec:1a:95:e6:2b:6a:30:84:fb:01:a2:06:cd:87:df:93:
51:9e:ff:7c:44:de:2c:88:ee:ae:d7:c8:8f:40:71:07:bd:8e:
27:c0:a1:08:94:d9:e6:e3:4d:58:c2:e8:e1:95:23:84:2c:2f:
f6:8c:83:ec:ff:00:92:70:80:c5:aa:dd:54:96:f7:39:22:3a:
d0:40:95:e5:c5:75:99:4e:d8:5b:8f:49:e3:b3:55:0a:06:95:
fd:e8:ed:ea:a7:a8:5b:4e:4c:36:21:c2:1b:cc:8c:8a:46:18:
ad:f3:b6:68:20:e1:20:4c:61:4b:5e:26:3e:c7:00:89:17:98:
5f:2a:1d:f7
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEhYoEbZOIr9mU9Vz4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIyNzE0MDA1MloXDTI1MDMyNzEzMDA1MlowLzEtMCsGA1UEAxMk
MTljZDk2MWUtZTE4Yi00MDZjLWEzMzYtNGFkYzllNWNiNzc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqpZLMOncBxQoah78ok03JDtX8x1NjP1NamG
A7YNamRDq5SErg0vQsdmSLBAaRMkDpwc2optxzQTr10sH+xz6E5aOdidHfeQAtEM
gmNQh0XsAwKXCA0RDSorSduNGKHp3479MgxXlb5lJ7DZYQC2p+a9zfQuKQGp8yua
T9tCcA7oZVqjBkKaMtcVMwG9lPGABkHu9po+W8zkfcI31W3TJKO5qnMOA9WCv9zI
wp5zqHaLqcNALVAMk43DrowqGIO7PZtjF8ScU2lf8phcBaK3td40XHd5spru+LMb
ix+fuSDsax6UkNIw4sPAM/MmTRLM5b363I8ef9IUU3uPEt1NpwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFK/FOx37ZEkCbX/v5eGnY1LzNiMfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmY0M2NkNjMtMGMwNC0z
N2E1LTliNjgtN2VjZDYxNGViMmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEg
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBdtGQbKNrMC63HpLcvzRwML2VKgpoJqKYtJnFE
z5LsNG9DO4VyDdOJAFAYrVSDxtd0E5twTR6ncGUeObf9JwIxoIlI08PdjXIIvvjO
MmeUgoxT1wgpD9eRo+GK3hHf9H6dUDnZrwBR4ZjqwtT8DeJQyE2+Vsdw3wtWmn10
/SK58+waleYrajCE+wGiBs2H35NRnv98RN4siO6u18iPQHEHvY4nwKEIlNnm401Y
wujhlSOELC/2jIPs/wCScIDFqt1Ulvc5IjrQQJXlxXWZTthbj0njs1UKBpX96O3q
p6hbTkw2IcIbzIyKRhit87ZoIOEgTGFLXiY+xwCJF5hfKh33
-----END CERTIFICATE-----
Generated at Fri Apr 25 23:43:05 2025 by rpki-client