Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b9b27e5-471f-3c09-aeb1-1b2773412efa.roa
File: 0b9b27e5-471f-3c09-aeb1-1b2773412efa.roa (raw, json)
Hash identifier: 99Xeia6tZbgSfcjKz3vk5QzJOaz+SHhL0MuNX339hSs=
Subject key identifier: 44:54:AB:97:87:83:0F:1B:AA:4D:CA:23:09:46:F0:7F:B4:F6:87:E0
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489BA0B8B36994D8A0DB91BC00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b9b27e5-471f-3c09-aeb1-1b2773412efa.roa
Signing time: Mon 20 Jan 2025 14:00:51 +0000
ROA not before: Mon 20 Jan 2025 14:00:51 +0000
ROA not after: Sun 20 Apr 2025 13:00:51 +0000
asID: 20362
IP address blocks: 2001:500:30ff::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9b:a0:b8:b3:69:94:d8:a0:db:91:bc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 14:00:51 2025 GMT
Not After : Apr 20 13:00:51 2025 GMT
Subject: CN=e2a7182d-1f67-4d3b-8c94-31380a40a934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7c:83:06:87:a9:75:1b:a6:13:91:01:e6:dc:
0d:a7:b0:6b:53:d4:ce:18:ac:b9:d0:7b:9f:12:4d:
46:8c:af:49:3b:b0:f6:49:5d:21:f1:b7:a6:7e:45:
ca:05:d9:d6:0b:22:16:65:0d:27:9e:01:1d:6a:9d:
9f:c5:76:b0:c8:93:ae:f6:5b:ad:49:8d:66:61:2f:
ea:7b:cb:e1:0d:ff:48:e8:a0:5e:f6:a9:cd:24:21:
33:b2:f8:9e:28:ee:d3:60:1f:28:ce:87:c6:0e:0d:
da:1c:de:78:d7:96:7c:6e:0b:a1:48:1d:d5:50:4f:
92:c1:17:e3:fe:3f:88:35:4a:5a:62:97:fb:b1:bc:
14:a5:b4:c9:42:b8:9f:e8:30:de:b6:f0:9b:3d:de:
1a:b9:3e:90:cf:22:57:1a:0d:31:60:01:45:f0:7e:
05:4c:c5:d6:18:d8:44:60:6b:47:bb:04:71:62:27:
3f:18:9d:7a:cb:63:e8:77:af:26:2c:67:19:ab:da:
0d:47:73:88:e2:f3:24:02:ea:86:3f:03:97:89:67:
6a:12:13:48:04:29:79:67:9e:40:c1:c5:41:b2:1a:
09:e3:2d:e6:72:58:9f:71:b4:16:d0:c4:3e:7a:3c:
39:37:f7:75:e7:e6:35:a4:2b:dc:fa:fc:2a:19:80:
69:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:54:AB:97:87:83:0F:1B:AA:4D:CA:23:09:46:F0:7F:B4:F6:87:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b9b27e5-471f-3c09-aeb1-1b2773412efa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:30ff:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:93:99:99:50:cf:60:af:47:9e:db:18:7b:c7:dc:aa:20:ce:
a4:bd:0d:43:29:3b:2e:38:d9:c9:70:a0:20:b3:46:87:f3:79:
38:11:e8:5d:50:d2:19:d4:c1:ac:29:11:9e:04:5a:16:d0:74:
46:f0:6b:d2:b6:c9:36:cb:a4:16:e9:8d:36:c8:ca:d4:17:0f:
77:ce:6c:11:d7:20:18:23:f4:09:52:08:58:0d:3b:98:42:52:
b1:3d:8a:86:fb:72:26:98:36:87:3c:37:4c:1c:e8:82:16:32:
b0:08:9e:1c:58:cd:c8:1a:a4:37:94:ca:be:88:2c:33:10:a5:
35:79:7c:df:92:25:a7:3c:4e:9c:2e:5d:f0:f3:eb:3d:a7:4a:
aa:f9:95:41:51:af:81:70:f1:fe:34:db:53:b9:c6:7f:58:1c:
4c:e0:b2:1a:55:ce:56:18:ab:3f:ba:d9:10:12:8c:25:9b:e2:
91:e2:f6:08:fa:fe:96:8b:e3:ff:a1:4d:17:f2:e3:e0:11:30:
0e:a7:8f:ba:69:ab:49:d5:5a:25:38:49:bd:9c:52:45:da:d8:
93:1d:91:7b:c9:bc:82:27:46:bc:dc:91:cf:19:25:e1:3c:68:
6b:31:49:3a:37:5d:5a:d2:96:ca:bc:b5:9a:ba:78:ff:6f:42:
32:6a:aa:d2
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEiboLizaZTYoNuRvAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDEyMDE0MDA1MVoXDTI1MDQyMDEzMDA1MVowLzEtMCsGA1UEAxMk
ZTJhNzE4MmQtMWY2Ny00ZDNiLThjOTQtMzEzODBhNDBhOTM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3yDBoepdRumE5EB5twNp7BrU9TOGKy50Huf
Ek1GjK9JO7D2SV0h8bemfkXKBdnWCyIWZQ0nngEdap2fxXawyJOu9lutSY1mYS/q
e8vhDf9I6KBe9qnNJCEzsvieKO7TYB8ozofGDg3aHN5415Z8bguhSB3VUE+SwRfj
/j+INUpaYpf7sbwUpbTJQrif6DDetvCbPd4auT6QzyJXGg0xYAFF8H4FTMXWGNhE
YGtHuwRxYic/GJ16y2Pod68mLGcZq9oNR3OI4vMkAuqGPwOXiWdqEhNIBCl5Z55A
wcVBshoJ4y3mclifcbQW0MQ+ejw5N/d15+Y1pCvc+vwqGYBpVQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFERUq5eHgw8bqk3KIwlG8H+09ofgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGI5YjI3ZTUtNDcxZi0z
YzA5LWFlYjEtMWIyNzczNDEyZWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFADD/
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQApk5mZUM9gr0ee2xh7x9yqIM6kvQ1DKTsuONnJ
cKAgs0aH83k4EehdUNIZ1MGsKRGeBFoW0HRG8GvStsk2y6QW6Y02yMrUFw93zmwR
1yAYI/QJUghYDTuYQlKxPYqG+3ImmDaHPDdMHOiCFjKwCJ4cWM3IGqQ3lMq+iCwz
EKU1eXzfkiWnPE6cLl3w8+s9p0qq+ZVBUa+BcPH+NNtTucZ/WBxM4LIaVc5WGKs/
utkQEowlm+KR4vYI+v6Wi+P/oU0X8uPgETAOp4+6aatJ1VolOEm9nFJF2tiTHZF7
ybyCJ0a83JHPGSXhPGhrMUk6N11a0pbKvLWaunj/b0IyaqrS
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:46:19 2025 by rpki-client