Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/152ea318-14d3-3b70-9370-be6873222de0.roa
File: 152ea318-14d3-3b70-9370-be6873222de0.roa (raw, json)
Hash identifier: tq/QB/jJWfSzs2fLD23P7T8O1lvS6OYbZXQhC0xd+7w=
Subject key identifier: 1D:C2:57:53:6D:CE:AE:F1:F7:A0:C8:EE:9E:71:E2:47:67:72:63:E8
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858493243F1B6D151B0B292468C40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/152ea318-14d3-3b70-9370-be6873222de0.roa
Signing time: Sat 15 Mar 2025 13:00:52 +0000
ROA not before: Sat 15 Mar 2025 13:00:52 +0000
ROA not after: Fri 13 Jun 2025 13:00:52 +0000
asID: 396551
IP address blocks: 2001:502:cbe4::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:32:43:f1:b6:d1:51:b0:b2:92:46:8c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 15 13:00:52 2025 GMT
Not After : Jun 13 13:00:52 2025 GMT
Subject: CN=f9f71537-e530-4007-9d53-513720a15979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a6:21:d6:d8:f7:15:d5:c3:94:08:30:87:e8:
6e:48:d3:73:1d:0f:f0:48:06:b3:63:7f:f7:a6:3b:
39:ae:77:fe:31:cc:42:b8:e9:29:66:f8:f7:89:07:
5d:4f:40:7f:37:a7:41:68:a7:65:f7:b4:ce:51:d4:
15:ce:bb:bc:65:0c:7d:1e:28:0f:12:aa:17:08:12:
84:e5:f9:b8:b5:62:1e:35:8d:c2:2d:80:b5:17:2c:
af:fc:e4:bd:a5:c0:8d:f7:d9:0e:c0:22:ec:e9:51:
71:06:d1:be:8b:c8:05:4d:df:73:98:22:d6:f8:65:
c1:e3:c0:43:9d:39:ed:49:b8:f9:53:81:1d:6f:87:
98:0c:ee:66:4c:4d:f4:90:ed:6c:a8:0e:6a:73:5e:
b0:a8:ef:fb:14:c1:d2:bf:bd:e3:1a:73:0d:04:72:
f3:d3:40:31:d1:17:78:86:d6:a5:e2:df:a1:af:41:
3f:2b:b2:4c:eb:ef:97:1c:e3:fb:b4:64:b1:00:f2:
4b:17:40:49:17:38:99:bf:17:e6:48:6b:97:41:37:
02:7a:ea:ed:32:1a:1a:75:e8:2e:dc:4a:e4:27:4e:
6f:be:29:33:1d:ea:eb:56:54:13:95:21:67:3e:d9:
9a:4b:41:87:1a:d3:d6:be:33:7e:28:c6:a8:8d:e1:
4d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C2:57:53:6D:CE:AE:F1:F7:A0:C8:EE:9E:71:E2:47:67:72:63:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/152ea318-14d3-3b70-9370-be6873222de0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:cbe4:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:2d:c8:d9:ae:9f:30:3c:01:38:c6:3e:26:b2:4d:54:50:c8:
09:7c:35:96:82:0b:8b:8e:89:74:1b:4e:5e:dd:0d:01:70:db:
59:08:6f:8b:77:58:8e:fc:39:4d:f9:82:55:ed:6c:e5:dc:11:
25:c3:00:44:0b:fd:24:b7:08:76:22:9d:03:52:8e:34:53:17:
75:80:97:3b:7f:d0:cc:c3:90:7f:6d:14:c1:0c:61:44:51:e0:
60:18:31:9c:89:07:9f:65:d2:4f:e6:74:78:18:b1:5e:e3:b1:
50:a0:f9:f5:79:66:30:14:c2:eb:e3:e7:a0:ee:9d:81:8c:34:
54:f9:6f:af:3e:28:b8:d4:7a:2b:b5:9c:b2:c6:c0:fd:57:79:
e3:5a:91:63:d8:55:a0:93:2b:d5:1f:38:50:e6:2d:9e:01:65:
32:9a:87:21:d7:41:2d:e4:06:f0:11:f3:55:e0:5a:96:95:cf:
d8:a5:0d:43:c4:49:96:67:96:a4:6b:5e:ce:4e:68:fc:cf:b4:
ab:1f:34:f2:e7:0f:a6:44:35:b3:a7:dc:74:aa:c8:8c:ed:21:
00:03:97:9a:fa:e3:42:92:41:74:a0:a3:21:df:6b:83:da:af:
00:54:b2:7e:db:c9:57:9a:52:ec:0f:a1:ef:29:d8:b1:fe:eb:
33:bb:99:c1
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkyQ/G20VGwspJGjEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMxNTEzMDA1MloXDTI1MDYxMzEzMDA1MlowLzEtMCsGA1UEAxMk
ZjlmNzE1MzctZTUzMC00MDA3LTlkNTMtNTEzNzIwYTE1OTc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqYh1tj3FdXDlAgwh+huSNNzHQ/wSAazY3/3
pjs5rnf+McxCuOkpZvj3iQddT0B/N6dBaKdl97TOUdQVzru8ZQx9HigPEqoXCBKE
5fm4tWIeNY3CLYC1Fyyv/OS9pcCN99kOwCLs6VFxBtG+i8gFTd9zmCLW+GXB48BD
nTntSbj5U4Edb4eYDO5mTE30kO1sqA5qc16wqO/7FMHSv73jGnMNBHLz00Ax0Rd4
htal4t+hr0E/K7JM6++XHOP7tGSxAPJLF0BJFziZvxfmSGuXQTcCeurtMhoadegu
3ErkJ05vvikzHerrVlQTlSFnPtmaS0GHGtPWvjN+KMaojeFNXQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFB3CV1Ntzq7x96DI7p5x4kdncmPoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTUyZWEzMTgtMTRkMy0z
YjcwLTkzNzAtYmU2ODczMjIyZGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAsvk
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBcLcjZrp8wPAE4xj4msk1UUMgJfDWWgguLjol0
G05e3Q0BcNtZCG+Ld1iO/DlN+YJV7Wzl3BElwwBEC/0ktwh2Ip0DUo40Uxd1gJc7
f9DMw5B/bRTBDGFEUeBgGDGciQefZdJP5nR4GLFe47FQoPn1eWYwFMLr4+eg7p2B
jDRU+W+vPii41HortZyyxsD9V3njWpFj2FWgkyvVHzhQ5i2eAWUymoch10Et5Abw
EfNV4FqWlc/YpQ1DxEmWZ5aka17OTmj8z7SrHzTy5w+mRDWzp9x0qsiM7SEAA5ea
+uNCkkF0oKMh32uD2q8AVLJ+28lXmlLsD6HvKdix/uszu5nB
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:40:08 2025 by rpki-client