Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/38ca83ae-77bb-3c0d-acc8-0c561cd584b8.roa
File: 38ca83ae-77bb-3c0d-acc8-0c561cd584b8.roa (raw, json)
Hash identifier: UWyCIg3YCtgrjiEhBrdM2oAaCnT3MCsHCVGUlhsMUd0=
Subject key identifier: E1:21:E1:72:7C:A2:04:48:1D:24:24:CF:08:96:8F:7B:DA:DC:59:42
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858490CB1539AFDB2FAA33E47F960
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/38ca83ae-77bb-3c0d-acc8-0c561cd584b8.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 211369
IP address blocks: 2620:0:5050::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:53:9a:fd:b2:fa:a3:3e:47:f9:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=0b1d0ac6-620d-4ac9-9fb4-765ef1412fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b2:00:fe:c6:8e:f9:c1:42:85:b2:11:e8:33:
ca:c2:f1:da:03:14:f4:e2:61:28:c3:a5:65:ac:86:
12:33:08:63:3f:2e:cc:d9:0b:0e:4a:2c:12:3b:b9:
10:c6:eb:ad:41:1f:b1:22:50:c0:9e:90:f1:cc:ae:
76:23:f2:74:37:07:aa:25:c2:3d:ac:52:c9:ab:0f:
11:c3:96:44:e7:c5:1f:3c:d7:b8:3d:5a:f2:24:25:
6c:ad:79:17:5e:64:9d:c8:01:c4:8f:79:92:f4:c8:
db:8b:b9:03:fd:56:47:76:ee:7d:5a:7e:ed:a2:6c:
70:ef:af:66:2a:21:5d:5d:39:0f:43:90:d3:1a:11:
ae:09:36:0f:78:82:7f:76:8b:5b:39:63:99:17:e0:
f2:c6:f7:d3:45:1c:1f:67:7b:23:07:be:3f:a0:36:
f5:50:4a:00:9a:e1:db:b3:5f:29:b2:1d:04:98:90:
88:2b:07:e4:ae:8e:ca:13:0b:c7:85:0d:dc:c5:4e:
6c:de:6e:b8:33:a7:89:4b:91:7a:e8:ef:f6:52:56:
46:13:1e:67:a5:fc:66:ce:3f:90:03:21:cd:4f:7b:
dc:df:47:da:79:ce:45:e1:43:72:c2:73:5d:6e:b7:
89:2e:94:9b:e6:24:ca:91:2d:b0:7d:36:07:e5:af:
25:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:21:E1:72:7C:A2:04:48:1D:24:24:CF:08:96:8F:7B:DA:DC:59:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/38ca83ae-77bb-3c0d-acc8-0c561cd584b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:0:5050::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:a4:4e:5f:be:83:30:35:75:f1:fb:ec:b3:cb:16:33:f5:96:
ab:28:d7:74:87:48:92:8b:ff:47:ad:ee:a9:47:a5:0b:d9:0a:
51:ac:c4:de:b5:21:a0:0b:be:a1:ca:f0:3a:e1:18:be:be:cd:
29:f4:c5:99:e7:85:c5:a8:aa:5b:74:f3:e4:4c:d1:bb:25:56:
06:90:04:a6:84:91:4b:98:48:02:01:9b:0e:b9:49:34:0d:5a:
59:29:5a:d8:c4:34:bd:cc:f2:5d:ab:2b:64:12:19:68:35:61:
35:32:b8:2c:c4:c3:6a:fe:7a:4f:e1:99:c9:57:e6:59:9c:bd:
d3:f1:b1:9f:67:d7:92:f2:2b:8a:68:39:d7:e2:4f:c0:11:69:
f6:ec:6a:29:e8:53:81:f8:4e:d1:cf:13:bc:a9:36:c0:51:f3:
26:2c:0e:74:3f:a9:07:40:3f:d3:6a:e6:1e:44:8a:76:b0:b7:
77:4f:82:7b:63:f1:8a:83:8d:ec:8f:df:50:91:a5:68:cb:3f:
1b:96:cb:7b:61:83:5c:84:b5:ba:70:bf:43:cd:e5:e0:de:bf:
63:4c:13:80:6d:4a:83:06:e4:08:e9:b4:fe:5d:1c:d1:83:24:
77:89:2e:96:6b:25:ae:37:1e:62:04:ca:dc:d2:89:cc:80:2c:
3c:d7:a4:29
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkMsVOa/bL6oz5H+WAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk
MGIxZDBhYzYtNjIwZC00YWM5LTlmYjQtNzY1ZWYxNDEyZmJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7IA/saO+cFChbIR6DPKwvHaAxT04mEow6Vl
rIYSMwhjPy7M2QsOSiwSO7kQxuutQR+xIlDAnpDxzK52I/J0NweqJcI9rFLJqw8R
w5ZE58UfPNe4PVryJCVsrXkXXmSdyAHEj3mS9Mjbi7kD/VZHdu59Wn7tomxw769m
KiFdXTkPQ5DTGhGuCTYPeIJ/dotbOWOZF+DyxvfTRRwfZ3sjB74/oDb1UEoAmuHb
s18psh0EmJCIKwfkro7KEwvHhQ3cxU5s3m64M6eJS5F66O/2UlZGEx5npfxmzj+Q
AyHNT3vc30faec5F4UNywnNdbreJLpSb5iTKkS2wfTYH5a8lzwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOEh4XJ8ogRIHSQkzwiWj3va3FlCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzhjYTgzYWUtNzdiYi0z
YzBkLWFjYzgtMGM1NjFjZDU4NGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAFBQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJmkTl++gzA1dfH77LPLFjP1lqso13SHSJKL/0et7qlHpQvZClGs
xN61IaALvqHK8DrhGL6+zSn0xZnnhcWoqlt08+RM0bslVgaQBKaEkUuYSAIBmw65
STQNWlkpWtjENL3M8l2rK2QSGWg1YTUyuCzEw2r+ek/hmclX5lmcvdPxsZ9n15Ly
K4poOdfiT8ARafbsainoU4H4TtHPE7ypNsBR8yYsDnQ/qQdAP9Nq5h5Einawt3dP
gntj8YqDjeyP31CRpWjLPxuWy3thg1yEtbpwv0PN5eDev2NME4BtSoMG5AjptP5d
HNGDJHeJLpZrJa43HmIEytzSicyALDzXpCk=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:08:12 2025 by rpki-client