Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4af4d672-539e-3c35-a02b-55f7ff93290b.roa
File: 4af4d672-539e-3c35-a02b-55f7ff93290b.roa (raw, json)
Hash identifier: 2B2xMAZ8Wy9iYONfacnCGsstdv7pkkcJJAVqUTSOOA8=
Subject key identifier: ED:43:74:36:DC:FD:DE:33:39:67:C4:DD:93:02:10:B4:AB:73:F3:CD
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489E5E49169882A9717F8D7680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4af4d672-539e-3c35-a02b-55f7ff93290b.roa
Signing time: Tue 21 Jan 2025 13:34:35 +0000
ROA not before: Tue 21 Jan 2025 13:34:35 +0000
ROA not after: Mon 21 Apr 2025 12:34:35 +0000
asID: 396826
IP address blocks: 2001:503:39c1::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:5e:49:16:98:82:a9:71:7f:8d:76:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 21 13:34:35 2025 GMT
Not After : Apr 21 12:34:35 2025 GMT
Subject: CN=8d8d2caf-0564-4af1-8260-3060aa137043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:63:98:8e:e1:74:bd:68:b3:8e:8a:cf:f5:77:
14:56:12:b5:62:b2:64:d8:ac:21:db:e4:ef:69:8d:
d5:30:10:4f:b3:16:af:0f:27:65:fd:f4:04:7a:09:
9c:e5:4b:13:ac:c6:e0:b7:87:fa:a7:cc:24:a5:ef:
99:18:56:23:35:e4:9a:a6:6b:12:77:32:5a:a6:1d:
de:6f:9e:78:de:ee:fe:57:b8:62:c1:23:6f:d4:a7:
f4:58:2c:c8:0c:aa:fd:04:dc:fd:cc:a1:1d:1f:69:
47:b6:02:de:3c:16:39:c6:14:7a:ab:b4:59:eb:81:
b4:49:3a:14:33:0b:07:6a:d2:de:94:4f:8b:3f:1c:
8e:02:7d:bb:27:4e:21:0f:47:f1:a8:74:0f:b7:50:
05:0f:b7:de:d0:14:d7:c6:29:b9:48:26:2a:4c:e5:
a2:0c:0b:31:7d:22:6b:5e:33:65:54:a9:bc:3b:f4:
ae:fe:90:72:cb:a2:fe:6e:0b:40:aa:8a:5e:1e:fe:
df:ac:1b:bd:f3:e1:50:52:f2:ea:58:fc:9d:7d:c6:
96:68:34:fb:fe:77:a5:b5:2f:1d:ef:4e:a6:f4:13:
17:6e:41:b9:bd:e9:8b:9d:9e:68:f5:14:e6:6b:c2:
82:d0:7b:2b:da:b4:7d:40:d9:b7:52:d1:6e:34:02:
fe:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:43:74:36:DC:FD:DE:33:39:67:C4:DD:93:02:10:B4:AB:73:F3:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4af4d672-539e-3c35-a02b-55f7ff93290b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:39c1:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:c6:71:9b:3f:0c:d3:28:63:d1:0f:88:fb:92:dc:b0:51:e7:
78:2b:63:d4:ae:a2:42:7d:57:63:3e:bb:60:7d:3f:9b:0d:77:
a8:fb:ac:d8:26:18:b7:4e:31:f3:8f:dc:1a:e0:5f:b3:2f:17:
b3:98:0e:0e:24:54:28:51:4a:bc:34:bb:71:97:e7:44:d0:43:
d2:8f:c8:88:36:9d:df:3f:71:27:57:de:63:a3:5e:71:66:0d:
74:55:00:1e:24:57:ff:d9:fa:fd:49:ac:ef:19:0c:75:6a:04:
48:bb:c0:74:d5:1b:ec:f0:d3:02:aa:47:ba:62:fe:b8:9a:e3:
91:d2:12:7c:8c:eb:fc:45:af:40:31:65:32:13:50:54:d9:30:
d6:d7:d0:e8:2a:29:19:74:4f:b7:3a:cd:dd:18:82:14:67:89:
e2:f1:7c:44:55:30:45:75:0d:02:ae:86:64:c0:b9:ed:db:c0:
b1:b8:51:f0:43:0d:e2:74:86:10:94:34:2a:84:2b:10:0b:99:
72:b0:dd:c3:17:6d:87:96:43:f7:c4:48:49:05:8c:b8:a7:b1:
5c:64:a7:9b:63:62:9b:6e:10:57:95:08:50:32:31:45:ed:dd:
15:cc:13:c7:8f:9d:1b:89:29:4a:26:7b:9f:d8:16:f4:80:f7:
14:30:e0:e4
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEieXkkWmIKpcX+NdoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDEyMTEzMzQzNVoXDTI1MDQyMTEyMzQzNVowLzEtMCsGA1UEAxMk
OGQ4ZDJjYWYtMDU2NC00YWYxLTgyNjAtMzA2MGFhMTM3MDQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2OYjuF0vWizjorP9XcUVhK1YrJk2Kwh2+Tv
aY3VMBBPsxavDydl/fQEegmc5UsTrMbgt4f6p8wkpe+ZGFYjNeSapmsSdzJaph3e
b5543u7+V7hiwSNv1Kf0WCzIDKr9BNz9zKEdH2lHtgLePBY5xhR6q7RZ64G0SToU
MwsHatLelE+LPxyOAn27J04hD0fxqHQPt1AFD7fe0BTXxim5SCYqTOWiDAsxfSJr
XjNlVKm8O/Su/pByy6L+bgtAqopeHv7frBu98+FQUvLqWPydfcaWaDT7/neltS8d
706m9BMXbkG5vemLnZ5o9RTma8KC0Hsr2rR9QNm3UtFuNAL+uwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFO1DdDbc/d4zOWfE3ZMCELSrc/PNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGFmNGQ2NzItNTM5ZS0z
YzM1LWEwMmItNTVmN2ZmOTMyOTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAznB
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBMxnGbPwzTKGPRD4j7ktywUed4K2PUrqJCfVdj
PrtgfT+bDXeo+6zYJhi3TjHzj9wa4F+zLxezmA4OJFQoUUq8NLtxl+dE0EPSj8iI
Np3fP3EnV95jo15xZg10VQAeJFf/2fr9SazvGQx1agRIu8B01Rvs8NMCqke6Yv64
muOR0hJ8jOv8Ra9AMWUyE1BU2TDW19DoKikZdE+3Os3dGIIUZ4ni8XxEVTBFdQ0C
roZkwLnt28CxuFHwQw3idIYQlDQqhCsQC5lysN3DF22HlkP3xEhJBYy4p7FcZKeb
Y2KbbhBXlQhQMjFF7d0VzBPHj50biSlKJnuf2Bb0gPcUMODk
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:51:50 2025 by rpki-client