Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e38cf40-3a5b-3eb9-8ce4-8949800feb7b.roa
File: 1e38cf40-3a5b-3eb9-8ce4-8949800feb7b.roa (raw, json)
Hash identifier: XJ7ekzsYVc5n3j5pjbsaUSiDMZf8m9v3VoyZR6TVXJc=
Subject key identifier: 6A:40:42:02:FD:C1:C0:9A:9A:5D:B2:C6:A6:AF:B3:2F:97:60:5A:CF
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285849244E95B997392F6BD07BA680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e38cf40-3a5b-3eb9-8ce4-8949800feb7b.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 396580
IP address blocks: 2001:500:122::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:95:b9:97:39:2f:6b:d0:7b:a6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=43118952-5970-4ac4-ac9b-7ecaef440ee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ee:e7:29:73:3d:1b:cb:86:46:67:ae:e0:65:
60:ac:50:b9:71:0c:4b:13:d1:3d:bf:5a:e4:ea:b4:
cf:cb:aa:19:98:0f:46:d4:58:a5:1d:39:03:55:c4:
17:5d:5d:9b:bf:6f:23:0a:ff:28:72:3a:8c:85:b1:
2f:57:08:3a:cf:7d:24:e0:2c:57:ed:68:92:33:6b:
a1:c6:f2:71:10:d8:fa:c8:7d:ba:29:97:9f:c7:f1:
62:e0:3d:f7:fa:c4:8a:9e:42:81:f2:34:36:dc:3c:
a1:22:a3:0c:9d:46:e7:89:72:44:fb:00:aa:7b:2c:
33:e7:7e:09:56:90:79:36:94:5f:13:4c:17:59:88:
0a:ed:33:10:ef:1c:59:b2:58:4b:4a:e8:e5:c9:db:
78:02:25:a9:2c:53:ae:92:3a:8b:7b:ee:01:d2:be:
bf:23:c9:8c:b9:75:b0:14:2d:97:b0:6f:6c:93:1f:
ee:a9:ea:fa:ba:be:10:92:db:20:c0:1c:88:41:e6:
d8:9b:75:e3:01:73:08:a7:0b:6e:f4:fc:76:ad:0d:
ec:cf:28:2b:95:a9:d1:e6:e4:79:cf:16:de:8f:b9:
4f:2a:16:5b:b7:5c:5f:c6:d7:c7:08:ab:f6:9b:5b:
85:47:fa:08:fb:9c:4a:b2:72:7f:06:30:d9:17:7e:
6f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:40:42:02:FD:C1:C0:9A:9A:5D:B2:C6:A6:AF:B3:2F:97:60:5A:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e38cf40-3a5b-3eb9-8ce4-8949800feb7b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:122:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:56:68:87:7a:28:7b:bf:29:46:b2:8b:7a:46:01:c4:a3:04:
cf:f1:a2:05:9f:33:c4:4d:3d:7e:65:bd:3d:65:c4:ee:21:c8:
a4:eb:60:19:2a:13:ba:a9:ca:42:7d:7f:ab:98:1a:d5:8e:87:
84:29:89:5e:11:53:c9:91:8b:d0:35:29:79:84:72:e6:58:f6:
be:ca:a5:a8:d5:5f:bb:2f:68:3e:95:d8:9f:36:a5:66:af:4a:
60:83:f5:fe:8a:5a:de:26:27:72:de:60:c2:77:9b:35:00:47:
bb:18:8a:20:bc:a9:e6:30:9a:92:67:c3:ea:00:02:df:3a:b2:
fd:49:1e:00:09:75:ce:8d:69:26:e9:35:96:8b:ba:af:e5:4a:
d3:7b:db:e0:31:9d:ce:ea:1d:d0:d5:82:a8:55:79:57:32:a7:
dc:76:e1:5d:f2:f0:7a:8b:47:54:7c:0f:60:cf:18:fe:6e:5b:
6e:2b:fc:a0:e2:1b:b3:10:b7:c3:aa:b0:b3:f9:6d:92:87:76:
66:3a:69:92:e8:7b:dd:44:63:cd:7c:a5:65:77:e3:dc:43:8b:
73:89:12:8c:85:ef:71:0a:d3:de:df:24:5b:15:aa:fc:6b:a3:
46:4f:58:db:2a:d2:c0:39:9b:09:71:1b:94:43:9f:1b:3b:0f:
af:56:16:df
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkkTpW5lzkva9B7poAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk
NDMxMTg5NTItNTk3MC00YWM0LWFjOWItN2VjYWVmNDQwZWUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+7nKXM9G8uGRmeu4GVgrFC5cQxLE9E9v1rk
6rTPy6oZmA9G1FilHTkDVcQXXV2bv28jCv8ocjqMhbEvVwg6z30k4CxX7WiSM2uh
xvJxENj6yH26KZefx/Fi4D33+sSKnkKB8jQ23DyhIqMMnUbniXJE+wCqeywz534J
VpB5NpRfE0wXWYgK7TMQ7xxZslhLSujlydt4AiWpLFOukjqLe+4B0r6/I8mMuXWw
FC2XsG9skx/uqer6ur4QktsgwByIQebYm3XjAXMIpwtu9Px2rQ3szygrlanR5uR5
zxbej7lPKhZbt1xfxtfHCKv2m1uFR/oI+5xKsnJ/BjDZF35vaQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFGpAQgL9wcCaml2yxqavsy+XYFrPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWUzOGNmNDAtM2E1Yi0z
ZWI5LThjZTQtODk0OTgwMGZlYjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEi
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBpVmiHeih7vylGsot6RgHEowTP8aIFnzPETT1+
Zb09ZcTuIcik62AZKhO6qcpCfX+rmBrVjoeEKYleEVPJkYvQNSl5hHLmWPa+yqWo
1V+7L2g+ldifNqVmr0pgg/X+ilreJidy3mDCd5s1AEe7GIogvKnmMJqSZ8PqAALf
OrL9SR4ACXXOjWkm6TWWi7qv5UrTe9vgMZ3O6h3Q1YKoVXlXMqfcduFd8vB6i0dU
fA9gzxj+bltuK/yg4huzELfDqrCz+W2Sh3ZmOmmS6HvdRGPNfKVld+PcQ4tziRKM
he9xCtPe3yRbFar8a6NGT1jbKtLAOZsJcRuUQ58bOw+vVhbf
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:43:24 2025 by rpki-client