Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42570da3-d1a7-3ac7-93a6-a6a71c1f32e6.roa
File: 42570da3-d1a7-3ac7-93a6-a6a71c1f32e6.roa (raw, json)
Hash identifier: AqHLPDkaXYHBQGE8RAcRpENA6vGRurrwZs7etT0O5E4=
Subject key identifier: DA:42:0D:0E:92:A2:39:7D:0F:75:B7:C2:8E:5D:7C:54:8C:86:0B:07
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285849403985FF47EE0176A445A100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42570da3-d1a7-3ac7-93a6-a6a71c1f32e6.roa
Signing time: Thu 20 Mar 2025 13:00:53 +0000
ROA not before: Thu 20 Mar 2025 13:00:53 +0000
ROA not after: Wed 18 Jun 2025 13:00:53 +0000
asID: 396584
IP address blocks: 2001:501:8a29::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:40:39:85:ff:47:ee:01:76:a4:45:a1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 20 13:00:53 2025 GMT
Not After : Jun 18 13:00:53 2025 GMT
Subject: CN=4380e1b8-f2a7-46e8-bbb3-9c8e1744b085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:be:a7:3e:64:c1:15:02:22:df:4b:21:12:ae:
65:d1:8b:5c:96:8d:92:b6:e5:ef:c8:fb:59:c5:8a:
1b:9d:65:eb:99:4f:12:67:49:c9:92:b4:53:1d:48:
e2:d5:6a:7c:05:65:b0:8d:b7:cf:80:84:67:41:ae:
99:be:d4:85:6b:75:3f:12:b0:f8:91:c0:d5:74:4b:
06:21:56:bc:3c:be:b0:80:aa:65:aa:2e:6a:86:6b:
5b:a3:a7:a4:65:59:00:8c:85:3d:7b:82:ac:4a:c2:
7f:3a:8a:a4:89:f1:2d:73:7d:fa:4f:5a:15:b3:02:
65:31:49:07:1c:da:09:f1:9d:6a:31:5e:2a:ee:92:
17:21:16:0b:a2:d5:83:c2:72:a3:a4:b4:56:07:3e:
07:28:71:cc:38:8c:3c:1e:1e:a5:6a:45:d2:82:22:
19:b1:c0:1e:91:9a:32:1a:72:6d:12:79:0f:6a:47:
aa:ed:2f:0d:3e:1d:11:85:51:16:75:b2:d3:38:12:
c4:d0:31:67:ea:16:92:3c:99:f0:25:e6:af:e0:3e:
70:d3:7f:5b:a1:25:8c:d2:da:41:f9:5f:36:c1:ca:
cd:bf:8c:1f:0a:e2:df:a8:f9:65:c2:d2:b6:c4:28:
de:69:20:cc:3a:6a:a1:b4:f8:19:15:b5:67:73:9d:
c9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:42:0D:0E:92:A2:39:7D:0F:75:B7:C2:8E:5D:7C:54:8C:86:0B:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42570da3-d1a7-3ac7-93a6-a6a71c1f32e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:501:8a29:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:95:af:47:dd:8f:d0:6f:e8:a2:55:a4:b1:1e:f3:5e:f0:d4:
19:4a:79:d9:ed:46:01:eb:6d:6b:d5:0a:95:bf:91:04:1d:c2:
ce:23:bb:7a:58:33:c6:7c:c2:5b:14:1b:07:8d:3e:37:53:38:
a8:b7:44:fe:d7:e0:89:81:14:54:47:d8:67:61:aa:bd:c0:89:
7b:43:6b:2d:e3:e1:ae:ec:ff:b0:dd:67:2d:bb:35:20:9f:a0:
01:9a:41:e5:c3:e1:e4:01:7a:da:02:1c:0d:3e:1b:d1:99:0e:
51:7d:28:50:1b:5d:76:f7:ef:9a:78:35:8f:7a:d4:43:84:40:
41:e8:81:f5:5c:15:5b:dc:89:06:39:56:05:7d:01:95:31:7b:
e6:1e:7a:4d:40:3b:51:5a:77:75:85:c1:c6:4d:d4:62:61:e9:
5d:ee:e7:14:b8:c7:7c:ec:fa:23:ef:52:22:d8:8e:72:98:c6:
df:76:1c:46:4f:07:43:25:2a:70:48:64:f0:f3:5c:87:a4:e0:
dd:0f:86:12:91:6c:e5:40:86:75:53:72:e1:55:da:ec:2b:8b:
c9:df:2e:c2:03:9b:fe:67:3a:45:c6:c0:ae:64:49:13:5a:a6:
3f:6c:31:00:d6:24:f8:f0:03:d8:ea:fa:8e:2b:2e:c6:a0:3f:
f6:b3:e0:b5
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWElAOYX/R+4BdqRFoQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk
NDM4MGUxYjgtZjJhNy00NmU4LWJiYjMtOWM4ZTE3NDRiMDg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2b6nPmTBFQIi30shEq5l0Ytclo2StuXvyPtZ
xYobnWXrmU8SZ0nJkrRTHUji1Wp8BWWwjbfPgIRnQa6ZvtSFa3U/ErD4kcDVdEsG
IVa8PL6wgKplqi5qhmtbo6ekZVkAjIU9e4KsSsJ/OoqkifEtc336T1oVswJlMUkH
HNoJ8Z1qMV4q7pIXIRYLotWDwnKjpLRWBz4HKHHMOIw8Hh6lakXSgiIZscAekZoy
GnJtEnkPakeq7S8NPh0RhVEWdbLTOBLE0DFn6haSPJnwJeav4D5w039boSWM0tpB
+V82wcrNv4wfCuLfqPllwtK2xCjeaSDMOmqhtPgZFbVnc53JHQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFNpCDQ6Sojl9D3W3wo5dfFSMhgsHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDI1NzBkYTMtZDFhNy0z
YWM3LTkzYTYtYTZhNzFjMWYzMmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAYop
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAMla9H3Y/Qb+iiVaSxHvNe8NQZSnnZ7UYB621r
1QqVv5EEHcLOI7t6WDPGfMJbFBsHjT43Uziot0T+1+CJgRRUR9hnYaq9wIl7Q2st
4+Gu7P+w3WctuzUgn6ABmkHlw+HkAXraAhwNPhvRmQ5RfShQG1129++aeDWPetRD
hEBB6IH1XBVb3IkGOVYFfQGVMXvmHnpNQDtRWnd1hcHGTdRiYeld7ucUuMd87Poj
71Ii2I5ymMbfdhxGTwdDJSpwSGTw81yHpODdD4YSkWzlQIZ1U3LhVdrsK4vJ3y7C
A5v+ZzpFxsCuZEkTWqY/bDEA1iT48APY6vqOKy7GoD/2s+C1
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:58:42 2025 by rpki-client