Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23ada0bf-d49e-3d2b-8dca-4af0fdfb5698.roa
File: 23ada0bf-d49e-3d2b-8dca-4af0fdfb5698.roa (raw, json)
Hash identifier: F4LzjVQINFzCQypYCjO+wZDVzkOIefO78oUV9pR33QI=
Subject key identifier: EF:13:10:AE:73:2B:F5:9E:48:05:4C:38:AB:A6:98:6E:06:80:51:13
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858488DAB75EE132606E814E59980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23ada0bf-d49e-3d2b-8dca-4af0fdfb5698.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 396565
IP address blocks: 2001:500:7967::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:75:ee:13:26:06:e8:14:e5:99:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=7d9a7ac7-a6ed-4482-b49e-cad02a0b7552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:39:66:b9:f3:97:da:1e:68:54:cc:33:1a:58:
60:fc:dc:a1:c1:a3:8b:af:33:3e:82:32:fc:e5:25:
b3:82:5d:14:4d:5c:ff:1b:d7:94:65:52:cf:ed:c5:
70:e6:b5:ca:40:cc:02:94:4d:7f:be:f5:b2:16:c7:
cf:59:3e:f4:2c:8c:91:0e:1f:8e:f2:6e:8c:1f:b7:
4b:53:41:f5:33:d6:fa:f3:b7:56:c6:f8:8b:b1:0c:
51:96:ee:07:4f:07:bf:2d:b4:b7:e8:74:a5:73:8b:
7b:3e:16:b3:84:09:27:56:81:bb:a8:49:01:63:18:
2f:9c:d5:11:bf:54:8c:c2:19:51:ba:ab:39:f6:ba:
2e:49:78:f5:f3:5c:1b:36:40:92:a7:50:42:95:d4:
95:86:cb:ba:31:e3:b3:d8:4a:42:69:5c:10:8b:2c:
b5:ce:1e:a4:a7:a1:11:de:7c:ab:5b:3a:4e:fb:21:
40:d8:65:c7:70:05:4d:e8:2e:ea:91:2c:04:91:a2:
da:72:ca:5a:f1:a2:b3:bc:a5:9d:36:6e:9d:4f:e5:
aa:e0:20:3a:ca:af:8f:24:c4:b2:0a:f6:6c:a1:a5:
e7:ca:9e:49:e7:5b:a9:8b:14:66:b1:f6:a7:61:74:
5b:70:18:d2:84:42:58:b8:d6:df:39:8c:cb:f7:f8:
9f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:13:10:AE:73:2B:F5:9E:48:05:4C:38:AB:A6:98:6E:06:80:51:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23ada0bf-d49e-3d2b-8dca-4af0fdfb5698.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:7967:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:2a:ff:c8:df:59:cd:c7:28:68:ed:01:3d:2c:be:c2:b3:17:
24:d3:03:3f:8b:e8:4a:0e:f1:dc:a0:1b:a0:5b:3b:7f:38:da:
a9:28:6b:f4:22:bf:71:09:6a:6f:14:4e:44:a6:54:51:60:79:
0d:cf:02:0c:5f:00:b6:d6:22:6b:00:de:85:d2:37:ff:ac:cc:
70:47:03:3e:66:07:53:1d:19:68:9e:18:a6:2e:80:21:b9:68:
f5:92:12:62:9c:bc:eb:ae:9e:3f:7e:18:36:bc:5d:2b:15:9f:
cf:07:b1:b8:b7:8d:b7:75:28:11:d4:73:8a:b6:39:80:f4:25:
84:15:65:95:fa:e5:1a:36:09:1f:65:ab:e8:a5:27:d6:2a:71:
fe:e5:23:9c:58:96:e2:ab:27:ec:a4:e1:b9:71:19:d8:c7:95:
fc:9b:a1:84:55:5c:0b:68:cf:a8:9a:e4:37:aa:bc:55:8f:74:
a8:f0:c9:cc:ee:04:b7:11:52:10:70:86:3d:18:6f:52:49:8e:
14:b6:13:e2:b0:5c:17:5a:e0:6a:06:c4:fe:67:e3:df:db:12:
0f:ac:be:ce:8f:92:db:9f:28:0e:7f:ff:44:e3:8b:f7:5d:50:
a3:59:14:a2:d0:7a:3e:c1:e8:29:5b:f8:a3:dc:9d:b5:47:b0:
4e:44:22:6f
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEiNq3XuEyYG6BTlmYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDExNTE0MDA1MVoXDTI1MDQxNTEzMDA1MVowLzEtMCsGA1UEAxMk
N2Q5YTdhYzctYTZlZC00NDgyLWI0OWUtY2FkMDJhMGI3NTUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjlmufOX2h5oVMwzGlhg/NyhwaOLrzM+gjL8
5SWzgl0UTVz/G9eUZVLP7cVw5rXKQMwClE1/vvWyFsfPWT70LIyRDh+O8m6MH7dL
U0H1M9b687dWxviLsQxRlu4HTwe/LbS36HSlc4t7PhazhAknVoG7qEkBYxgvnNUR
v1SMwhlRuqs59rouSXj181wbNkCSp1BCldSVhsu6MeOz2EpCaVwQiyy1zh6kp6ER
3nyrWzpO+yFA2GXHcAVN6C7qkSwEkaLacspa8aKzvKWdNm6dT+Wq4CA6yq+PJMSy
CvZsoaXnyp5J51upixRmsfanYXRbcBjShEJYuNbfOYzL9/ifoQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFO8TEK5zK/WeSAVMOKummG4GgFETMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjNhZGEwYmYtZDQ5ZS0z
ZDJiLThkY2EtNGFmMGZkZmI1Njk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAHln
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAEKv/I31nNxyho7QE9LL7Csxck0wM/i+hKDvHc
oBugWzt/ONqpKGv0Ir9xCWpvFE5EplRRYHkNzwIMXwC21iJrAN6F0jf/rMxwRwM+
ZgdTHRlonhimLoAhuWj1khJinLzrrp4/fhg2vF0rFZ/PB7G4t423dSgR1HOKtjmA
9CWEFWWV+uUaNgkfZavopSfWKnH+5SOcWJbiqyfspOG5cRnYx5X8m6GEVVwLaM+o
muQ3qrxVj3So8MnM7gS3EVIQcIY9GG9SSY4UthPisFwXWuBqBsT+Z+Pf2xIPrL7O
j5LbnygOf/9E44v3XVCjWRSi0Ho+wegpW/ij3J21R7BORCJv
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:41:49 2025 by rpki-client