Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43f53efc-515e-3e0e-aea2-dbf0a66c269b.roa
File: 43f53efc-515e-3e0e-aea2-dbf0a66c269b.roa (raw, json)
Hash identifier: rEiCI9mtzkWx36XKBm2ltXWxik6QVPkU0OPO8yz/CSM=
Subject key identifier: FE:D8:FF:F5:6A:0F:E4:99:BD:44:3A:72:21:F8:E9:F8:EF:39:5A:96
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858493243F234133357F44152A300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43f53efc-515e-3e0e-aea2-dbf0a66c269b.roa
Signing time: Sat 15 Mar 2025 13:00:52 +0000
ROA not before: Sat 15 Mar 2025 13:00:52 +0000
ROA not after: Fri 13 Jun 2025 13:00:52 +0000
asID: 20172
IP address blocks: 2001:502:cbe4::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:32:43:f2:34:13:33:57:f4:41:52:a3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 15 13:00:52 2025 GMT
Not After : Jun 13 13:00:52 2025 GMT
Subject: CN=d1c726fc-3f75-42ce-a309-6e4c54eaa07d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:29:bc:a3:b6:77:7c:bc:7e:94:eb:ba:7c:27:
ae:55:77:80:2b:09:fa:0d:5d:46:71:e9:df:6b:3b:
15:14:c6:05:41:c1:cc:57:a9:de:8b:eb:33:10:21:
ef:91:0e:6d:e2:9d:b0:ca:a7:05:79:53:08:fa:88:
56:da:37:9a:30:d3:f8:91:f1:60:39:59:48:99:85:
34:4b:c2:34:34:ec:db:f3:c5:04:25:bb:ca:d8:ed:
c2:a6:89:24:5d:55:db:17:0d:8d:82:29:fb:0d:2b:
8d:48:a0:b2:4b:72:6c:0b:fa:a9:92:7d:70:5f:61:
0c:00:26:d9:6f:69:2c:4c:75:27:c5:6a:1a:0e:6e:
04:8d:50:a4:63:b5:81:a3:a3:eb:f1:fe:af:ee:a2:
73:47:e8:18:fd:59:7d:c6:4a:86:c6:ae:3b:99:35:
ce:25:0b:d7:c0:ab:fa:3b:06:0d:01:2e:2b:03:19:
32:49:5a:8d:26:ca:ba:f5:3a:15:ee:9e:ce:93:31:
cc:96:c3:57:d0:32:3c:ad:db:be:9d:b8:1a:15:5a:
fb:9c:3d:15:9b:29:1a:f1:00:37:5c:e0:55:75:55:
80:6b:06:e2:2f:41:ec:aa:65:a6:3e:60:bd:e9:06:
ab:5d:53:8d:1f:78:9d:8f:6f:5d:7d:5c:ea:d1:33:
e1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D8:FF:F5:6A:0F:E4:99:BD:44:3A:72:21:F8:E9:F8:EF:39:5A:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43f53efc-515e-3e0e-aea2-dbf0a66c269b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:cbe4:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:a3:16:01:53:e1:e8:8b:6e:b9:69:db:02:dc:45:20:32:f9:
15:cb:74:12:3e:14:38:6b:d5:c4:76:43:6a:25:0c:58:d5:4d:
9a:9f:cd:8b:c5:e6:af:83:f8:38:72:1c:d1:da:d7:2c:81:ef:
35:b9:a9:bd:77:df:f7:ee:41:a2:e9:54:2e:25:98:80:87:00:
cb:70:c9:a4:31:e0:87:e7:b7:2d:42:c3:a4:ec:2c:6f:ce:26:
fc:79:5c:61:24:be:15:38:30:48:c3:82:46:60:bd:ec:92:be:
c2:8f:04:07:f2:91:a9:a0:bc:34:bb:c9:f1:fc:fd:8a:97:20:
be:11:6e:2c:94:e6:da:f8:bc:c0:74:4d:ec:b7:26:78:69:cc:
59:52:a0:93:4d:b3:8b:f9:1a:5d:36:12:95:06:06:3b:0f:41:
fa:0b:76:54:ee:f6:ce:6a:79:32:62:ab:de:68:ae:30:e6:75:
a6:18:bb:a8:12:00:47:9a:b8:3d:42:e0:12:b2:30:b1:81:9d:
5b:b3:78:0b:3c:fb:4d:50:31:28:11:8d:e4:fa:d0:94:7e:83:
63:0c:62:46:8c:cc:c7:4c:e0:04:6d:87:c8:d9:2b:f0:c1:28:
89:b6:c6:0f:9f:f1:49:52:a5:14:a1:19:9d:53:2f:6d:db:ec:
57:f4:2a:6d
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkyQ/I0EzNX9EFSowAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMxNTEzMDA1MloXDTI1MDYxMzEzMDA1MlowLzEtMCsGA1UEAxMk
ZDFjNzI2ZmMtM2Y3NS00MmNlLWEzMDktNmU0YzU0ZWFhMDdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkym8o7Z3fLx+lOu6fCeuVXeAKwn6DV1Gcenf
azsVFMYFQcHMV6nei+szECHvkQ5t4p2wyqcFeVMI+ohW2jeaMNP4kfFgOVlImYU0
S8I0NOzb88UEJbvK2O3CpokkXVXbFw2Ngin7DSuNSKCyS3JsC/qpkn1wX2EMACbZ
b2ksTHUnxWoaDm4EjVCkY7WBo6Pr8f6v7qJzR+gY/Vl9xkqGxq47mTXOJQvXwKv6
OwYNAS4rAxkySVqNJsq69ToV7p7OkzHMlsNX0DI8rdu+nbgaFVr7nD0Vmyka8QA3
XOBVdVWAawbiL0HsqmWmPmC96QarXVONH3idj29dfVzq0TPh8QIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFP7Y//VqD+SZvUQ6ciH46fjvOVqWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDNmNTNlZmMtNTE1ZS0z
ZTBlLWFlYTItZGJmMGE2NmMyNjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAsvk
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBHoxYBU+Hoi265adsC3EUgMvkVy3QSPhQ4a9XE
dkNqJQxY1U2an82Lxeavg/g4chzR2tcsge81uam9d9/37kGi6VQuJZiAhwDLcMmk
MeCH57ctQsOk7Cxvzib8eVxhJL4VODBIw4JGYL3skr7CjwQH8pGpoLw0u8nx/P2K
lyC+EW4slOba+LzAdE3styZ4acxZUqCTTbOL+RpdNhKVBgY7D0H6C3ZU7vbOanky
YqveaK4w5nWmGLuoEgBHmrg9QuASsjCxgZ1bs3gLPPtNUDEoEY3k+tCUfoNjDGJG
jMzHTOAEbYfI2SvwwSiJtsYPn/FJUqUUoRmdUy9t2+xX9Cpt
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:49:57 2025 by rpki-client