Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a85e5af-726e-3fc4-a7dd-ee94a828a998.roa
File: 2a85e5af-726e-3fc4-a7dd-ee94a828a998.roa (raw, json)
Hash identifier: aRhehsjkUeXupNbOQpqgYt5fMlLFjb0dtZQvhstYowM=
Subject key identifier: 4C:45:A2:E4:63:91:D7:5F:59:BC:3A:66:F8:EE:4E:47:39:A8:8B:CE
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584917DC14B6B0B4180CF0D58DA0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a85e5af-726e-3fc4-a7dd-ee94a828a998.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 396553
IP address blocks: 2001:500:123::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:14:b6:b0:b4:18:0c:f0:d5:8d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=888c6cbc-0a06-46a1-821b-8b42e8fdcf12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c9:1b:3a:8c:e6:c3:e1:c8:ab:51:c7:92:58:
fc:39:b9:97:54:37:19:1e:82:2e:6d:b2:d3:e4:33:
4c:06:8f:b8:cb:ec:5f:20:24:63:d5:1d:63:81:ec:
77:24:b7:27:8a:99:05:a6:71:e2:d8:65:c7:57:92:
29:62:dd:ce:3d:3a:3b:38:1c:50:b9:84:36:92:7e:
5d:49:dd:df:7b:66:d5:9b:71:07:4e:bd:10:ba:b5:
52:ff:f7:54:ac:1b:67:54:4b:9a:07:30:42:e4:e3:
98:0a:13:96:d9:f9:05:60:1e:4f:3d:5e:a1:83:98:
dd:95:b5:61:8c:af:c5:6a:98:14:b9:2f:ce:d8:14:
69:72:90:b1:13:8d:64:ec:6f:16:2c:d8:7c:fe:7a:
ed:ba:39:70:fd:25:7f:d3:3f:10:9c:d8:ee:e9:a8:
ae:73:79:36:39:9d:fb:eb:e1:5c:ad:cf:6d:d5:9e:
b9:f2:fc:40:11:5b:04:4d:e3:7f:08:6e:bc:34:e0:
a2:fd:24:03:9d:6f:49:03:6b:67:67:85:2d:e4:6f:
f5:e4:de:5b:fc:a1:e3:34:4e:31:53:8f:07:10:e7:
8a:b0:96:2f:68:c6:b9:3f:7f:c6:99:3e:7d:b2:d6:
03:4e:15:84:56:d9:53:f9:8f:95:c3:41:22:c0:01:
be:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:45:A2:E4:63:91:D7:5F:59:BC:3A:66:F8:EE:4E:47:39:A8:8B:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a85e5af-726e-3fc4-a7dd-ee94a828a998.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:123:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:9a:b5:d0:26:1b:22:e4:8b:66:1d:1d:8c:63:9d:7c:96:9c:
3f:04:ed:eb:8c:2f:1d:4b:65:a7:eb:a7:2d:60:b4:65:65:45:
44:71:66:4a:ea:4a:4a:31:79:af:92:d7:a3:f6:33:c1:3d:9d:
f5:06:54:65:e9:28:58:d9:de:93:f7:63:d7:16:a3:cf:8b:f4:
52:6e:a9:b2:70:8e:73:59:52:93:1d:c2:ca:ce:c8:2e:d9:48:
e5:27:08:a9:75:a1:ac:17:3e:0d:1d:8e:68:c8:d5:70:57:93:
23:f4:13:57:0f:47:8d:59:29:06:8e:8e:36:21:4a:44:33:d1:
fc:d9:d7:e9:a7:7b:53:4a:67:03:53:2b:2e:2e:e7:b3:7f:4e:
c1:a6:7e:83:23:70:da:88:3e:cd:50:34:12:52:ed:04:3f:a4:
db:97:8b:b9:64:a9:ad:48:cb:ff:e5:8b:27:20:55:fb:a9:b8:
7c:ef:14:14:d0:a9:34:25:62:80:2f:c8:07:08:08:fa:19:52:
4b:48:08:d0:68:fb:12:34:cd:2c:77:a2:25:00:12:43:25:6c:
d6:ff:21:73:33:2d:69:6f:60:71:a6:f4:82:40:2d:e2:71:74:
3a:5e:39:31:0e:48:87:82:d7:9a:b2:27:b7:06:36:8f:ee:ce:
f4:91:64:d7
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkX3BS2sLQYDPDVjaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk
ODg4YzZjYmMtMGEwNi00NmExLTgyMWItOGI0MmU4ZmRjZjEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyckbOozmw+HIq1HHklj8ObmXVDcZHoIubbLT
5DNMBo+4y+xfICRj1R1jgex3JLcnipkFpnHi2GXHV5IpYt3OPTo7OBxQuYQ2kn5d
Sd3fe2bVm3EHTr0QurVS//dUrBtnVEuaBzBC5OOYChOW2fkFYB5PPV6hg5jdlbVh
jK/FapgUuS/O2BRpcpCxE41k7G8WLNh8/nrtujlw/SV/0z8QnNju6aiuc3k2OZ37
6+Fcrc9t1Z658vxAEVsETeN/CG68NOCi/SQDnW9JA2tnZ4Ut5G/15N5b/KHjNE4x
U48HEOeKsJYvaMa5P3/GmT59stYDThWEVtlT+Y+Vw0EiwAG+twIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFExFouRjkddfWbw6ZvjuTkc5qIvOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmE4NWU1YWYtNzI2ZS0z
ZmM0LWE3ZGQtZWU5NGE4MjhhOTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQB2mrXQJhsi5ItmHR2MY518lpw/BO3rjC8dS2Wn
66ctYLRlZUVEcWZK6kpKMXmvktej9jPBPZ31BlRl6ShY2d6T92PXFqPPi/RSbqmy
cI5zWVKTHcLKzsgu2UjlJwipdaGsFz4NHY5oyNVwV5Mj9BNXD0eNWSkGjo42IUpE
M9H82dfpp3tTSmcDUysuLuezf07Bpn6DI3DaiD7NUDQSUu0EP6Tbl4u5ZKmtSMv/
5YsnIFX7qbh87xQU0Kk0JWKAL8gHCAj6GVJLSAjQaPsSNM0sd6IlABJDJWzW/yFz
My1pb2BxpvSCQC3icXQ6XjkxDkiHgteasie3BjaP7s70kWTX
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:51:44 2025 by rpki-client