Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/499fca7e-36ec-37f1-a02c-1ba5710c78d4.roa
File: 499fca7e-36ec-37f1-a02c-1ba5710c78d4.roa (raw, json)
Hash identifier: 2Mj7apKrgtjQtSPAdYRGbXhdEIa9eQwwv2EIENJ7NoY=
Subject key identifier: 17:30:5E:EF:E0:B0:98:2C:F2:CB:FE:90:6E:CC:8D:10:62:2A:F3:A8
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183C6C05E86F1FF4515F1C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/499fca7e-36ec-37f1-a02c-1ba5710c78d4.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 397212
IP address blocks: 2001:500:125::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:c6:c0:5e:86:f1:ff:45:15:f1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=3c0190b2-218c-4fe4-adc9-72684908a489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:85:12:36:0e:1d:72:98:b9:50:78:1c:30:81:
4c:9e:08:5e:a1:92:74:d6:a4:e0:4f:df:f3:8b:29:
90:bf:5d:9c:c2:c8:03:b6:70:da:ff:50:ef:81:f2:
07:bb:cc:1d:e8:85:83:8b:f9:12:f0:c0:5b:3e:54:
a6:8e:b9:06:e8:3f:4a:c5:a7:f2:61:76:11:24:5d:
76:be:8e:9e:90:ec:73:ba:22:68:3a:1d:c2:4a:31:
16:36:51:e0:3b:88:a0:eb:97:59:9a:a4:62:e9:6f:
31:de:57:dc:bb:96:29:6c:4d:f1:0b:59:0f:5d:dd:
47:c3:43:1e:b4:82:2d:e1:0b:c8:fa:43:37:66:5e:
6f:17:bf:fe:01:69:e1:1f:a5:47:6d:bc:54:af:05:
85:62:e6:5f:11:e0:4d:5a:56:e7:e7:43:5c:bd:a2:
2e:ec:39:95:1d:7b:a5:15:3f:74:a6:d1:a5:bb:94:
4c:45:6f:4d:ff:6c:89:1b:00:35:6b:e7:9d:2a:32:
4f:01:23:c0:c7:21:c0:e0:6a:0d:45:c4:8e:a3:b3:
c8:eb:5c:67:9b:f1:b3:17:bd:65:89:86:ad:6c:95:
c8:de:5c:56:01:e2:da:75:d0:f4:2f:c5:6a:79:33:
a9:4c:48:b3:40:55:5a:10:12:3b:87:db:00:95:1d:
b5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:30:5E:EF:E0:B0:98:2C:F2:CB:FE:90:6E:CC:8D:10:62:2A:F3:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/499fca7e-36ec-37f1-a02c-1ba5710c78d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:125:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:5b:b5:b4:1b:53:56:e7:a9:96:42:ef:09:05:f3:96:06:73:
a7:a9:f1:67:13:67:1a:9f:8a:f7:2f:1a:bf:be:b0:b4:6f:7e:
2a:63:59:ca:e8:bd:92:03:ce:35:ad:67:9d:ae:90:39:f9:aa:
0e:96:13:59:7a:24:55:76:27:e6:4c:15:ef:9e:61:1b:d5:b2:
ff:ec:4c:f0:36:d8:0c:ba:b3:f0:34:26:f8:90:cb:63:76:cd:
02:f8:7d:b6:8a:7c:59:a4:82:d7:0d:b8:1f:73:f9:4b:d4:5b:
ba:d0:13:d7:9b:35:06:d0:ee:b3:e3:7d:1b:45:c6:84:91:ac:
40:21:d5:25:b2:ce:17:99:c6:f5:35:11:e7:ac:34:d6:42:86:
e7:bc:90:33:11:bd:7b:ff:48:42:64:92:0c:20:40:b3:8c:18:
8c:49:36:5c:ed:50:1c:bc:8a:75:f6:8f:64:a3:92:51:54:d9:
64:4f:e0:53:7a:be:53:2e:ab:c3:5f:0d:07:f3:55:d6:64:93:
8b:cb:57:78:b7:8d:8c:1f:61:ee:68:fb:bb:19:f7:a5:30:63:
88:b2:72:cb:a9:19:e9:db:e9:36:b3:d7:49:85:d6:d2:f8:85:
bc:7c:5a:5f:7f:52:6f:cf:1b:05:50:67:ad:5e:5c:d7:35:a1:
20:8c:c4:c0
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkhg8bAXobx/0UV8cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk
M2MwMTkwYjItMjE4Yy00ZmU0LWFkYzktNzI2ODQ5MDhhNDg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIUSNg4dcpi5UHgcMIFMngheoZJ01qTgT9/z
iymQv12cwsgDtnDa/1DvgfIHu8wd6IWDi/kS8MBbPlSmjrkG6D9KxafyYXYRJF12
vo6ekOxzuiJoOh3CSjEWNlHgO4ig65dZmqRi6W8x3lfcu5YpbE3xC1kPXd1Hw0Me
tIIt4QvI+kM3Zl5vF7/+AWnhH6VHbbxUrwWFYuZfEeBNWlbn50NcvaIu7DmVHXul
FT90ptGlu5RMRW9N/2yJGwA1a+edKjJPASPAxyHA4GoNRcSOo7PI61xnm/GzF71l
iYatbJXI3lxWAeLaddD0L8VqeTOpTEizQFVaEBI7h9sAlR21vQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFBcwXu/gsJgs8sv+kG7MjRBiKvOoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDk5ZmNhN2UtMzZlYy0z
N2YxLWEwMmMtMWJhNTcxMGM3OGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCsW7W0G1NW56mWQu8JBfOWBnOnqfFnE2can4r3
Lxq/vrC0b34qY1nK6L2SA841rWedrpA5+aoOlhNZeiRVdifmTBXvnmEb1bL/7Ezw
NtgMurPwNCb4kMtjds0C+H22inxZpILXDbgfc/lL1Fu60BPXmzUG0O6z430bRcaE
kaxAIdUlss4Xmcb1NRHnrDTWQobnvJAzEb17/0hCZJIMIECzjBiMSTZc7VAcvIp1
9o9ko5JRVNlkT+BTer5TLqvDXw0H81XWZJOLy1d4t42MH2HuaPu7GfelMGOIsnLL
qRnp2+k2s9dJhdbS+IW8fFpff1JvzxsFUGetXlzXNaEgjMTA
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:45:27 2025 by rpki-client