Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/068c6938-fc7b-3ab3-bcba-30d2a39d97ae.roa
File: 068c6938-fc7b-3ab3-bcba-30d2a39d97ae.roa (raw, json)
Hash identifier: HupMrm8ZADeUKeAnRliRf++cozNCfI/x4FmE6mLcm8s=
Subject key identifier: 61:5E:09:42:DD:8E:A3:30:0A:C3:9B:8C:3A:92:1D:A0:BC:53:D1:90
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584917DC177A1E5AF4B082D98D8E
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/068c6938-fc7b-3ab3-bcba-30d2a39d97ae.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 22547
IP address blocks: 2001:500:123::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:17:7a:1e:5a:f4:b0:82:d9:8d:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=309ad629-0b22-46c2-8f96-9dbf7d85f917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:fc:06:5d:b9:a3:a4:24:a2:9f:15:66:30:67:
53:ae:2e:65:7b:4b:a5:47:87:5a:fe:5d:1c:90:81:
37:b1:d4:58:00:d2:f5:ac:22:d9:b3:93:75:5e:14:
92:4b:87:9f:14:4f:aa:31:86:65:29:e6:93:e4:f6:
c6:17:46:e1:e6:1f:fb:0e:f1:4c:e5:0e:27:1c:21:
87:c8:fc:f1:b9:a9:cd:2a:fd:4d:8c:cb:b4:41:12:
22:a2:46:d6:e8:9b:d2:cf:f7:ce:c9:a3:29:6b:8b:
d4:2e:ab:53:38:81:ba:73:2a:15:8d:b3:4e:74:31:
46:64:16:7b:ec:53:2a:50:b4:42:22:38:6e:50:87:
d7:26:b4:fe:2b:19:f0:68:65:51:de:fd:a3:d9:a0:
ab:19:69:a9:93:fc:b4:75:bd:eb:a0:ac:77:2a:4e:
b8:3c:20:cc:aa:61:0b:6e:bf:ee:d5:fb:ae:eb:a8:
96:6d:84:31:94:ea:5d:9e:d0:34:91:78:94:6f:5b:
ce:5d:b3:e6:fa:31:eb:b7:11:c2:71:0e:9b:64:f7:
8d:d5:51:64:31:16:33:b8:5c:b7:60:31:d1:4b:1f:
53:51:ed:63:e6:06:8d:2c:46:da:ff:6c:d7:71:a2:
a3:55:96:8f:86:7b:82:b9:9a:ee:cb:32:7d:d6:cd:
bd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:5E:09:42:DD:8E:A3:30:0A:C3:9B:8C:3A:92:1D:A0:BC:53:D1:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/068c6938-fc7b-3ab3-bcba-30d2a39d97ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:123:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:f8:ed:04:6d:82:da:94:6d:7d:5d:c4:eb:fb:0b:9f:be:e5:
ed:d0:e5:91:18:34:c1:40:fa:95:f8:fe:9f:21:d2:bb:77:eb:
f6:d0:b4:a6:0c:b6:6a:5a:43:48:3a:8d:08:46:56:5e:a6:ca:
1a:2a:56:d2:92:2e:97:d9:28:6f:ef:a3:44:64:2d:f0:60:9c:
8b:a3:1c:73:3b:a5:c5:dc:4a:04:80:06:f3:21:ef:60:e9:94:
3f:df:ed:bc:6e:8f:79:e6:da:6e:99:4b:35:59:f0:ad:c5:41:
e0:88:9f:0b:7e:e5:65:f8:30:e7:3d:d6:73:9a:07:c7:98:43:
b5:52:32:28:6d:c2:e1:21:03:37:f7:92:fd:21:2c:38:cb:28:
38:c1:1d:fc:54:b8:47:71:96:72:c6:08:54:86:a7:1c:bc:97:
73:ef:d4:25:ae:51:a1:db:46:d7:be:f0:12:4e:f8:79:42:3a:
74:fd:10:33:90:d3:e7:c9:28:2f:f0:17:e5:ca:c5:c1:32:da:
0c:3a:34:6d:13:5e:43:55:51:0c:d0:6b:fd:37:a5:30:4e:f8:
21:31:2b:96:78:a7:b4:92:f9:55:9d:48:be:8d:94:f2:41:9a:
f8:ce:85:82:bf:5c:6c:10:7b:2f:36:8c:19:7b:4b:76:ea:85:
ad:0f:f8:e0
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkX3Bd6Hlr0sILZjY4wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk
MzA5YWQ2MjktMGIyMi00NmMyLThmOTYtOWRiZjdkODVmOTE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9/wGXbmjpCSinxVmMGdTri5le0ulR4da/l0c
kIE3sdRYANL1rCLZs5N1XhSSS4efFE+qMYZlKeaT5PbGF0bh5h/7DvFM5Q4nHCGH
yPzxuanNKv1NjMu0QRIiokbW6JvSz/fOyaMpa4vULqtTOIG6cyoVjbNOdDFGZBZ7
7FMqULRCIjhuUIfXJrT+KxnwaGVR3v2j2aCrGWmpk/y0db3roKx3Kk64PCDMqmEL
br/u1fuu66iWbYQxlOpdntA0kXiUb1vOXbPm+jHrtxHCcQ6bZPeN1VFkMRYzuFy3
YDHRSx9TUe1j5gaNLEba/2zXcaKjVZaPhnuCuZruyzJ91s29eQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFGFeCULdjqMwCsObjDqSHaC8U9GQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDY4YzY5MzgtZmM3Yi0z
YWIzLWJjYmEtMzBkMmEzOWQ5N2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAH+O0EbYLalG19XcTr+wufvuXt0OWRGDTBQPqV
+P6fIdK7d+v20LSmDLZqWkNIOo0IRlZepsoaKlbSki6X2Shv76NEZC3wYJyLoxxz
O6XF3EoEgAbzIe9g6ZQ/3+28bo955tpumUs1WfCtxUHgiJ8LfuVl+DDnPdZzmgfH
mEO1UjIobcLhIQM395L9ISw4yyg4wR38VLhHcZZyxghUhqccvJdz79QlrlGh20bX
vvASTvh5Qjp0/RAzkNPnySgv8BflysXBMtoMOjRtE15DVVEM0Gv9N6UwTvghMSuW
eKe0kvlVnUi+jZTyQZr4zoWCv1xsEHsvNowZe0t26oWtD/jg
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:48:12 2025 by rpki-client