Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/420e788d-42c4-34fa-845a-c7f6c1d45f0d.roa
File: 420e788d-42c4-34fa-845a-c7f6c1d45f0d.roa (raw, json)
Hash identifier: b7qLzUwK+9bsjEKCMN+4BXSJqdIU6d/TC4T2JVGK1p0=
Subject key identifier: 4C:05:67:95:3B:70:84:FA:FA:52:B4:44:D6:76:AF:59:55:2C:89:88
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584929E3D6D059CBDF5617953E20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/420e788d-42c4-34fa-845a-c7f6c1d45f0d.roa
Signing time: Wed 12 Mar 2025 13:00:53 +0000
ROA not before: Wed 12 Mar 2025 13:00:53 +0000
ROA not after: Tue 10 Jun 2025 13:00:53 +0000
asID: 397200
IP address blocks: 2001:500:121::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:29:e3:d6:d0:59:cb:df:56:17:95:3e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 12 13:00:53 2025 GMT
Not After : Jun 10 13:00:53 2025 GMT
Subject: CN=583eb368-5eae-4005-9906-7ad33184fefa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ad:e3:6c:57:75:60:ca:f2:98:85:c1:ff:4f:
70:50:bd:fa:b3:c8:e2:64:d0:3a:eb:13:1a:13:48:
2d:16:6b:49:73:53:6f:66:f4:5d:8d:88:64:3b:f4:
64:62:c6:ba:f9:ba:c6:8a:2c:fb:3c:f9:16:2b:51:
dd:15:05:1e:c3:72:49:c4:f1:16:c3:37:61:5f:9a:
21:a4:0e:74:3d:94:93:36:e3:c6:f5:47:28:ff:63:
32:49:1d:13:04:53:ed:27:50:64:7b:fc:d2:c3:90:
83:01:7d:7e:db:9e:65:fa:67:e9:79:89:52:9b:fd:
a6:b6:80:08:da:c3:34:b3:1e:ec:b3:49:cc:7a:f7:
07:88:1e:cf:72:ff:5b:b9:ce:99:34:f5:9d:42:c4:
a8:af:da:70:99:8f:28:3e:cf:47:af:82:68:a5:7e:
f0:7d:f6:7c:72:99:61:3b:00:f2:ac:a1:8e:2b:cf:
01:38:f2:d0:83:79:d6:cd:ea:9b:97:95:f4:16:0b:
36:d7:74:3a:d2:fd:28:1d:ef:1e:58:36:9d:07:06:
5e:04:c7:71:92:26:45:15:24:e3:60:a3:f4:7d:92:
31:28:2d:5f:69:19:25:1c:06:43:a1:0c:63:90:35:
91:5e:f9:96:cd:91:6f:09:67:7b:98:fd:16:ee:25:
2f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:05:67:95:3B:70:84:FA:FA:52:B4:44:D6:76:AF:59:55:2C:89:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/420e788d-42c4-34fa-845a-c7f6c1d45f0d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:121:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:35:60:72:9e:c9:3f:6c:a6:97:97:9f:de:0e:fa:2d:4f:eb:
79:c4:47:8b:28:f0:3d:30:50:08:64:32:0a:68:83:c2:9d:1f:
0f:88:f3:6c:92:e1:59:a1:41:a9:c2:0f:11:8e:0a:59:38:b9:
85:6e:27:3b:63:0f:06:c1:c6:25:a7:82:c6:d1:ed:0f:a4:4a:
b7:31:dd:75:97:41:51:b8:4e:01:c9:8e:68:5e:91:2d:7d:02:
dc:c6:8b:22:d8:7b:62:07:ee:c1:e9:e1:2f:d7:cd:fa:52:43:
e9:e1:f9:1a:14:f0:41:a2:44:b6:4d:76:c1:41:47:51:17:22:
f5:ab:27:9a:5c:9c:21:b8:0d:fa:52:0e:8d:2e:61:67:52:2e:
59:95:35:93:3c:45:39:15:26:66:3f:34:02:3d:71:b8:4f:e0:
99:b3:f4:bb:4e:7c:d2:c5:d7:38:a1:16:0b:cb:a9:de:c8:ca:
d8:8a:10:78:3a:9e:87:ac:cf:8f:3c:01:65:e9:34:cf:a9:b5:
ee:b2:4b:a5:0b:f3:08:32:50:5c:ad:b2:74:0b:93:75:78:cf:
1b:38:33:3e:e6:ec:23:0d:2a:b6:13:49:c3:f7:03:30:81:6b:
94:0f:4f:82:a0:85:ea:85:26:b2:12:5f:33:0a:6b:9d:0e:4b:
b2:09:df:4a
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkp49bQWcvfVheVPiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMxMjEzMDA1M1oXDTI1MDYxMDEzMDA1M1owLzEtMCsGA1UEAxMk
NTgzZWIzNjgtNWVhZS00MDA1LTk5MDYtN2FkMzMxODRmZWZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxK3jbFd1YMrymIXB/09wUL36s8jiZNA66xMa
E0gtFmtJc1NvZvRdjYhkO/RkYsa6+brGiiz7PPkWK1HdFQUew3JJxPEWwzdhX5oh
pA50PZSTNuPG9Uco/2MySR0TBFPtJ1Bke/zSw5CDAX1+255l+mfpeYlSm/2mtoAI
2sM0sx7ss0nMevcHiB7Pcv9buc6ZNPWdQsSor9pwmY8oPs9Hr4JopX7wffZ8cplh
OwDyrKGOK88BOPLQg3nWzeqbl5X0Fgs213Q60v0oHe8eWDadBwZeBMdxkiZFFSTj
YKP0fZIxKC1faRklHAZDoQxjkDWRXvmWzZFvCWd7mP0W7iUvBQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFEwFZ5U7cIT6+lK0RNZ2r1lVLImIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDIwZTc4OGQtNDJjNC0z
NGZhLTg0NWEtYzdmNmMxZDQ1ZjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQA0NWBynsk/bKaXl5/eDvotT+t5xEeLKPA9MFAI
ZDIKaIPCnR8PiPNskuFZoUGpwg8RjgpZOLmFbic7Yw8GwcYlp4LG0e0PpEq3Md11
l0FRuE4ByY5oXpEtfQLcxosi2HtiB+7B6eEv1836UkPp4fkaFPBBokS2TXbBQUdR
FyL1qyeaXJwhuA36Ug6NLmFnUi5ZlTWTPEU5FSZmPzQCPXG4T+CZs/S7TnzSxdc4
oRYLy6neyMrYihB4Op6HrM+PPAFl6TTPqbXuskulC/MIMlBcrbJ0C5N1eM8bODM+
5uwjDSq2E0nD9wMwgWuUD0+CoIXqhSayEl8zCmudDkuyCd9K
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:50:46 2025 by rpki-client