Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b0f7c2a-ff51-3788-84ac-6f2def0e7c30.roa
File: 1b0f7c2a-ff51-3788-84ac-6f2def0e7c30.roa (raw, json)
Hash identifier: MBBa4S2OJaLowkfH76SC1atVzV60KlkNRuQtZkz1CtM=
Subject key identifier: 84:A5:54:16:39:B8:5F:70:A0:01:C9:1D:C5:1F:39:3C:48:DD:1A:51
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489BA0BE22FC453609DB0B3580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b0f7c2a-ff51-3788-84ac-6f2def0e7c30.roa
Signing time: Mon 20 Jan 2025 14:00:51 +0000
ROA not before: Mon 20 Jan 2025 14:00:51 +0000
ROA not after: Sun 20 Apr 2025 13:00:51 +0000
asID: 396590
IP address blocks: 2001:500:30ff::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9b:a0:be:22:fc:45:36:09:db:0b:35:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 14:00:51 2025 GMT
Not After : Apr 20 13:00:51 2025 GMT
Subject: CN=f8055857-5e94-41f0-82d6-6ede356f1cd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6c:ed:be:7b:a9:fa:42:7a:a4:54:4d:b7:ad:
f1:30:f3:9a:af:2f:48:44:1e:e9:d8:0e:86:3a:fd:
fb:df:37:15:72:29:b3:6c:45:99:b1:3b:4c:10:4b:
70:14:19:a5:6a:2a:b8:bf:77:db:56:14:ba:1a:5c:
2e:81:b9:3e:52:92:8a:1d:18:1a:c4:24:61:19:1a:
ee:f4:32:ac:fa:95:3b:b9:59:1c:9e:05:a4:8a:16:
ba:87:e7:67:2c:0e:b6:0e:72:92:35:37:4e:57:14:
96:59:4a:c4:5c:36:ca:2c:e9:3e:de:e6:97:0a:85:
e3:ec:a6:a9:88:27:5f:34:94:0e:30:35:20:6a:26:
e0:08:98:19:8c:f9:8e:ce:1c:3b:e5:8f:2c:aa:e1:
1d:7c:a9:91:1b:4f:08:14:26:25:9b:ca:71:67:6d:
8d:8d:f8:ea:c7:0e:f3:10:f4:c8:a4:22:3d:3d:28:
f3:64:c0:57:d7:53:f4:f1:0e:f1:1e:2a:1a:3c:63:
91:8e:9f:2a:ce:02:50:96:80:eb:ff:5f:89:8f:66:
b2:66:f3:fd:f2:67:88:2e:e9:fe:ec:13:78:8a:5c:
e3:31:62:3e:9e:c5:3a:35:9e:76:15:9b:96:69:0f:
de:d6:bc:1a:af:a3:75:ab:07:9f:09:72:b2:c9:c2:
62:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A5:54:16:39:B8:5F:70:A0:01:C9:1D:C5:1F:39:3C:48:DD:1A:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b0f7c2a-ff51-3788-84ac-6f2def0e7c30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:30ff:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:8c:c0:1d:5b:05:68:77:a7:be:93:28:c3:02:73:ed:cf:cf:
d0:33:73:26:de:31:ad:46:88:0d:9a:f4:2f:57:93:80:86:f9:
05:1d:29:88:16:f5:ed:34:11:d5:03:ab:05:1b:50:04:d5:12:
07:4a:f6:28:03:8b:9f:85:23:13:77:69:93:e8:dc:4c:f6:9b:
cc:0a:12:36:87:0e:4d:2c:3e:fc:90:da:2f:9a:0d:37:65:12:
7f:ce:08:a9:2c:13:da:7d:08:25:bd:02:f5:93:ec:77:f4:72:
f3:41:25:4e:60:27:1f:3d:b4:84:e5:b2:1f:f1:35:34:38:0b:
71:73:73:f2:e4:a1:ef:f4:93:c3:bb:39:a1:d6:5d:d0:6c:68:
fb:72:e8:7d:51:1c:cf:98:ab:18:74:0b:ec:3f:5a:cc:05:6e:
32:d8:15:8c:d4:fd:d2:df:8c:62:1d:b4:8e:37:ce:c5:48:bd:
d7:3a:ca:95:8a:7a:54:13:d3:cf:54:6b:98:f6:76:59:10:9d:
a2:5c:03:8e:5f:d8:dc:38:66:2f:a9:25:be:d5:90:f9:6a:18:
09:a1:c8:c1:fb:60:3f:46:40:3e:2e:05:12:fa:f0:83:03:d5:
8b:78:5d:a5:32:74:ac:25:3a:b6:5b:d6:67:bb:6b:09:07:df:
49:53:f4:d2
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEiboL4i/EU2CdsLNYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDEyMDE0MDA1MVoXDTI1MDQyMDEzMDA1MVowLzEtMCsGA1UEAxMk
ZjgwNTU4NTctNWU5NC00MWYwLTgyZDYtNmVkZTM1NmYxY2Q0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2ztvnup+kJ6pFRNt63xMPOary9IRB7p2A6G
Ov373zcVcimzbEWZsTtMEEtwFBmlaiq4v3fbVhS6Glwugbk+UpKKHRgaxCRhGRru
9DKs+pU7uVkcngWkiha6h+dnLA62DnKSNTdOVxSWWUrEXDbKLOk+3uaXCoXj7Kap
iCdfNJQOMDUgaibgCJgZjPmOzhw75Y8squEdfKmRG08IFCYlm8pxZ22Njfjqxw7z
EPTIpCI9PSjzZMBX11P08Q7xHioaPGORjp8qzgJQloDr/1+Jj2ayZvP98meILun+
7BN4ilzjMWI+nsU6NZ52FZuWaQ/e1rwar6N1qwefCXKyycJi1QIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFISlVBY5uF9woAHJHcUfOTxI3RpRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWIwZjdjMmEtZmY1MS0z
Nzg4LTg0YWMtNmYyZGVmMGU3YzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFADD/
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCTjMAdWwVod6e+kyjDAnPtz8/QM3Mm3jGtRogN
mvQvV5OAhvkFHSmIFvXtNBHVA6sFG1AE1RIHSvYoA4ufhSMTd2mT6NxM9pvMChI2
hw5NLD78kNovmg03ZRJ/zgipLBPafQglvQL1k+x39HLzQSVOYCcfPbSE5bIf8TU0
OAtxc3Py5KHv9JPDuzmh1l3QbGj7cuh9URzPmKsYdAvsP1rMBW4y2BWM1P3S34xi
HbSON87FSL3XOsqVinpUE9PPVGuY9nZZEJ2iXAOOX9jcOGYvqSW+1ZD5ahgJocjB
+2A/RkA+LgUS+vCDA9WLeF2lMnSsJTq2W9Znu2sJB99JU/TS
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:22:34 2025 by rpki-client