Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/24047a38-5dd2-34d7-a4f0-b7f5a6af961e.roa
File: 24047a38-5dd2-34d7-a4f0-b7f5a6af961e.roa (raw, json)
Hash identifier: ezGizfFmchcXLHklGMd9RIUloVKP89DJijL66h0X0Gg=
Subject key identifier: 98:8B:6D:D7:30:CD:50:7F:93:B5:E5:08:99:91:CE:88:C7:AE:08:05
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183F56BBECEADF4E6073A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/24047a38-5dd2-34d7-a4f0-b7f5a6af961e.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 397198
IP address blocks: 2001:500:125::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:f5:6b:be:ce:ad:f4:e6:07:3a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=c631ac3f-73d9-45d3-bfde-73cc201dc179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ad:2a:0b:06:e4:9d:b3:ad:3d:68:07:87:5c:
e2:5e:c5:9e:c8:53:07:9c:37:f3:49:76:85:43:34:
48:e8:ca:dd:ed:f8:e3:03:44:dd:09:45:d6:f1:a5:
f9:e4:79:45:4b:10:4d:b9:15:64:28:33:7f:e4:ad:
80:81:55:41:ce:68:a7:b6:b3:7f:14:54:e0:f6:2a:
0b:03:e3:0e:7a:8c:90:62:d2:60:e4:d0:51:8c:2c:
61:74:1d:81:c1:0e:6a:01:91:bb:36:a9:3c:80:a4:
9e:4a:d4:ee:3a:d2:05:28:73:89:70:cc:64:47:fb:
a0:e1:d0:a6:8b:91:88:a0:05:4e:90:5e:2c:75:fa:
5c:6f:a6:95:e8:30:07:2d:fa:95:e0:c7:1f:f8:98:
14:5e:2e:ed:60:dc:3a:9b:7e:d9:f1:b0:a0:8e:88:
0e:8c:03:58:28:14:0a:3f:c2:a3:41:6f:a8:10:5b:
f7:cd:14:4b:f1:7e:e2:8a:60:59:d1:23:c7:ae:a0:
09:05:58:8d:7a:23:01:89:31:88:74:e4:e8:f7:6b:
98:15:85:f9:fd:7d:85:84:5f:29:96:8a:30:83:79:
16:df:f6:cf:47:97:d2:02:d0:10:7a:da:a9:7b:36:
af:a7:c4:64:1e:79:02:d5:61:25:9e:72:68:60:7d:
4e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:8B:6D:D7:30:CD:50:7F:93:B5:E5:08:99:91:CE:88:C7:AE:08:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/24047a38-5dd2-34d7-a4f0-b7f5a6af961e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:125:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:07:fd:04:92:4e:f2:48:87:85:cb:63:09:0e:c0:5f:9b:61:
69:e4:45:33:1d:49:82:f7:1f:1b:9d:57:88:8b:77:7b:3a:ce:
a8:6e:79:8e:7b:5e:74:dd:cc:9d:cf:ab:78:89:8b:ab:1d:62:
1a:79:8e:43:8a:c7:19:39:ce:c9:e6:e2:b9:95:34:74:9e:33:
03:c2:fe:59:e1:5a:c2:81:83:62:2c:6d:2b:74:a1:f9:32:92:
5f:d5:19:b1:22:eb:d4:9d:73:f6:2e:09:7f:75:8d:62:12:4b:
55:4d:5e:b3:a6:08:94:aa:2d:94:0d:0f:04:52:e0:c9:f5:bc:
aa:62:1a:03:e1:66:02:a2:c8:64:cc:34:18:74:62:d1:3c:8e:
f2:55:a5:a9:f1:ba:1a:77:90:cb:ef:8a:21:03:b3:27:ee:02:
f0:3f:d6:59:a2:91:32:ca:29:71:bf:09:ea:28:3b:cf:86:b4:
08:2d:5b:5c:ea:2d:98:e8:40:81:8a:c1:13:2d:8f:ac:6f:29:
cf:7f:08:7e:be:24:a9:45:ed:82:fb:11:44:14:6a:e5:8f:b0:
73:4b:6a:67:6a:c0:36:96:ce:a2:f1:9f:59:10:27:b9:26:0c:
25:eb:be:df:12:d5:63:a3:0e:ed:79:7f:3f:3e:30:58:6f:7a:
b5:8e:c3:41
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkhg/Vrvs6t9OYHOoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk
YzYzMWFjM2YtNzNkOS00NWQzLWJmZGUtNzNjYzIwMWRjMTc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhK0qCwbknbOtPWgHh1ziXsWeyFMHnDfzSXaF
QzRI6Mrd7fjjA0TdCUXW8aX55HlFSxBNuRVkKDN/5K2AgVVBzmintrN/FFTg9ioL
A+MOeoyQYtJg5NBRjCxhdB2BwQ5qAZG7Nqk8gKSeStTuOtIFKHOJcMxkR/ug4dCm
i5GIoAVOkF4sdfpcb6aV6DAHLfqV4Mcf+JgUXi7tYNw6m37Z8bCgjogOjANYKBQK
P8KjQW+oEFv3zRRL8X7iimBZ0SPHrqAJBViNeiMBiTGIdOTo92uYFYX5/X2FhF8p
loowg3kW3/bPR5fSAtAQetqpezavp8RkHnkC1WElnnJoYH1OMwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFJiLbdcwzVB/k7XlCJmRzojHrggFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjQwNDdhMzgtNWRkMi0z
NGQ3LWE0ZjAtYjdmNWE2YWY5NjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAdB/0Ekk7ySIeFy2MJDsBfm2Fp5EUzHUmC9x8b
nVeIi3d7Os6obnmOe1503cydz6t4iYurHWIaeY5DiscZOc7J5uK5lTR0njMDwv5Z
4VrCgYNiLG0rdKH5MpJf1RmxIuvUnXP2Lgl/dY1iEktVTV6zpgiUqi2UDQ8EUuDJ
9byqYhoD4WYCoshkzDQYdGLRPI7yVaWp8boad5DL74ohA7Mn7gLwP9ZZopEyyilx
vwnqKDvPhrQILVtc6i2Y6ECBisETLY+sbynPfwh+viSpRe2C+xFEFGrlj7BzS2pn
asA2ls6i8Z9ZECe5Jgwl677fEtVjow7teX8/PjBYb3q1jsNB
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:01:19 2025 by rpki-client