Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43df424b-8041-30e0-bf83-a35ba1b54f1a.roa
File: 43df424b-8041-30e0-bf83-a35ba1b54f1a.roa (raw, json)
Hash identifier: Q0vo21AaER9pKklTEGoHcU3hos5t2gyrh8V8fiJWDdc=
Subject key identifier: 9E:94:4C:BB:B3:70:A6:3C:27:D6:23:F0:41:F8:9F:68:BF:62:65:D8
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848BFEB97B82A855AA538A68540
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43df424b-8041-30e0-bf83-a35ba1b54f1a.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 397203
IP address blocks: 2001:500:133::53/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:97:b8:2a:85:5a:a5:38:a6:85:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=1c71ca27-badb-4189-9c80-2fb817347a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f0:31:80:43:8b:4e:03:2b:aa:01:e3:50:d7:
89:15:ce:7a:1c:db:7c:97:a0:92:48:a4:3f:af:af:
2a:dc:b4:47:12:03:c8:b4:26:d0:c4:80:86:87:9a:
f5:c7:f9:e5:f0:2f:a4:eb:f2:2e:f5:af:65:53:d3:
51:71:c8:72:c8:8d:bb:d8:f0:1c:a1:46:97:d3:91:
eb:e2:ac:00:e1:41:34:9f:f8:f7:79:13:ec:bf:dc:
71:ce:90:dd:8f:84:ea:8d:0f:50:30:eb:95:8e:94:
46:7b:f2:89:8b:ef:59:6a:64:10:22:ec:c3:e9:56:
2a:96:79:3c:9c:c3:ef:26:8c:15:5c:c6:ff:7d:37:
4b:c7:4c:17:60:b3:ce:e2:71:9c:f8:15:b5:7a:97:
fc:6f:e3:a4:d2:de:5c:0e:d2:6a:b9:b9:31:46:8e:
1f:b2:d8:3f:ba:b5:a6:f2:4a:90:e4:12:b2:6b:4c:
8f:42:43:7f:ff:bc:df:62:21:cf:8e:8b:15:bc:5b:
5f:38:0a:04:52:4c:59:00:56:86:d5:9a:2c:95:39:
ef:d5:72:d7:56:86:62:4e:e0:25:76:38:53:d1:ac:
ba:ea:96:6d:cd:80:3e:df:74:0d:24:29:84:b8:e3:
9f:b2:d9:d8:e6:57:df:2c:93:43:bf:35:de:40:ea:
2a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:94:4C:BB:B3:70:A6:3C:27:D6:23:F0:41:F8:9F:68:BF:62:65:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43df424b-8041-30e0-bf83-a35ba1b54f1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:133:0:0:0:0:53/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:45:f7:98:60:8e:c3:fa:7e:45:41:47:7e:82:ce:ae:d3:b7:
06:0a:bf:ed:bb:eb:0c:20:c4:6d:bb:3a:a9:83:60:24:e1:de:
dc:52:1b:4c:c2:a2:71:7b:2a:cb:b5:a4:eb:9e:86:19:3a:cc:
e1:0e:ff:b4:3e:55:46:6e:4d:de:80:57:1c:a3:3e:18:46:a7:
a3:75:6f:e3:e1:4f:4e:fc:2e:39:93:7f:76:64:d6:3d:6c:8e:
35:19:55:79:41:1c:41:5b:78:78:a4:ba:4d:af:1f:bb:b5:3c:
39:ee:6b:1e:4c:0a:38:85:7d:2b:cc:1d:91:a0:6a:87:f6:3e:
24:4c:80:c4:44:59:3a:a3:91:0c:45:20:1d:87:1f:c3:b5:94:
46:bd:9b:0f:5f:a9:f4:91:91:7f:7d:ea:79:ea:c7:88:99:a6:
a6:a5:09:e7:83:0f:ac:a6:50:fb:ba:05:18:6b:ab:c9:17:64:
69:b9:a6:ec:4c:55:16:d1:d2:60:df:b7:93:f0:3f:ae:a0:75:
9d:57:cb:34:8f:f8:f1:6a:9b:dd:25:13:1d:13:2b:1e:6e:2b:
9b:94:d7:45:d1:56:d2:27:b6:09:66:c4:7c:10:87:1b:3f:fd:
26:83:00:fc:17:e6:41:bc:11:89:a4:51:38:05:aa:10:05:e8:
78:27:d0:37
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEi/65e4KoVapTimhUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk
MWM3MWNhMjctYmFkYi00MTg5LTljODAtMmZiODE3MzQ3YTgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufAxgEOLTgMrqgHjUNeJFc56HNt8l6CSSKQ/
r68q3LRHEgPItCbQxICGh5r1x/nl8C+k6/Iu9a9lU9NRcchyyI272PAcoUaX05Hr
4qwA4UE0n/j3eRPsv9xxzpDdj4TqjQ9QMOuVjpRGe/KJi+9ZamQQIuzD6VYqlnk8
nMPvJowVXMb/fTdLx0wXYLPO4nGc+BW1epf8b+Ok0t5cDtJqubkxRo4fstg/urWm
8kqQ5BKya0yPQkN//7zfYiHPjosVvFtfOAoEUkxZAFaG1ZoslTnv1XLXVoZiTuAl
djhT0ay66pZtzYA+33QNJCmEuOOfstnY5lffLJNDvzXeQOoqHwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFJ6UTLuzcKY8J9Yj8EH4n2i/YmXYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDNkZjQyNGItODA0MS0z
MGUwLWJmODMtYTM1YmExYjU0ZjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQB9RfeYYI7D+n5FQUd+gs6u07cGCr/tu+sMIMRt
uzqpg2Ak4d7cUhtMwqJxeyrLtaTrnoYZOszhDv+0PlVGbk3egFccoz4YRqejdW/j
4U9O/C45k392ZNY9bI41GVV5QRxBW3h4pLpNrx+7tTw57mseTAo4hX0rzB2RoGqH
9j4kTIDERFk6o5EMRSAdhx/DtZRGvZsPX6n0kZF/fep56seImaampQnngw+splD7
ugUYa6vJF2RpuabsTFUW0dJg37eT8D+uoHWdV8s0j/jxapvdJRMdEysebiublNdF
0VbSJ7YJZsR8EIcbP/0mgwD8F+ZBvBGJpFE4BaoQBeh4J9A3
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:41:26 2025 by rpki-client