Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/55c8e5d8-07fc-3266-99e5-a03073b67cc1.roa
File: 55c8e5d8-07fc-3266-99e5-a03073b67cc1.roa (raw, json)
Hash identifier: tpo2VpaoF+Gxf8lC+FFKQj48xTfvKi0jWuaC/5T/Fsg=
Subject key identifier: 61:00:1A:08:4F:40:3B:82:06:8E:EB:76:68:2D:34:23:65:B2:FD:3A
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848C5733372924DF2AEA8493900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/55c8e5d8-07fc-3266-99e5-a03073b67cc1.roa
Signing time: Tue 04 Feb 2025 13:33:15 +0000
ROA not before: Tue 04 Feb 2025 13:33:15 +0000
ROA not after: Mon 05 May 2025 12:33:15 +0000
asID: 211369
IP address blocks: 2001:503:c27::2:30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:73:33:72:92:4d:f2:ae:a8:49:39:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Feb 4 13:33:15 2025 GMT
Not After : May 5 12:33:15 2025 GMT
Subject: CN=52cfd21a-c5f4-4880-99d9-64ebdb3b9f35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:eb:27:4c:60:5c:26:9c:2c:e2:ee:c4:0b:7f:
2f:15:99:43:1d:89:e2:b8:9e:9a:61:4e:12:3e:b8:
4a:30:53:d8:ee:f6:6e:f5:34:9b:31:4f:6a:7d:c9:
2b:c2:a4:19:8a:27:57:80:1d:17:25:6a:8d:c8:12:
43:1c:f2:74:e1:47:6d:13:5a:d3:28:97:d1:6a:8f:
21:57:9e:d5:0d:36:a7:b3:1d:6c:62:93:50:3c:be:
5c:b2:49:21:c2:5a:9a:e9:64:d4:34:f6:42:7c:a6:
9c:e7:f9:ac:00:7b:28:cd:35:16:36:56:ef:de:28:
c3:40:07:98:aa:b0:80:69:04:27:f4:06:44:a1:14:
96:39:01:63:f1:69:db:d4:2a:ff:3f:85:f9:81:40:
4b:09:17:3d:4e:76:d0:0f:4b:2b:bb:c4:31:43:a9:
5d:c2:61:60:07:16:bc:f9:65:69:7c:08:e1:52:df:
f5:2c:36:dd:7e:98:29:f2:38:32:ea:72:dd:04:7b:
d6:35:43:5d:c0:39:7d:82:7a:46:d1:7e:36:d4:a2:
0f:a0:e5:3e:9c:70:57:e1:f6:d9:1e:40:e3:1f:da:
3b:8d:24:d0:b8:dc:21:ff:52:f3:41:88:6c:b2:b7:
3d:3b:56:68:ad:7d:bd:76:29:e5:a9:09:ec:ad:a1:
c8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:00:1A:08:4F:40:3B:82:06:8E:EB:76:68:2D:34:23:65:B2:FD:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/55c8e5d8-07fc-3266-99e5-a03073b67cc1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:c27:0:0:0:2:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:95:ce:67:a0:f6:72:62:33:b4:dd:48:f7:27:04:13:33:9d:
ec:40:28:82:8c:bf:be:0b:e2:0d:fa:46:fb:66:c5:92:27:72:
95:27:40:74:ea:4d:12:d5:ea:5e:58:31:5a:7e:f4:15:ca:b0:
6f:a1:a7:7a:ea:d3:50:f8:2f:9b:54:c9:0d:05:b8:05:0a:56:
3e:cf:99:fc:85:40:37:42:40:89:24:f2:25:d1:4b:db:59:cf:
1f:5b:3f:b8:29:23:3a:62:8d:12:f0:2a:58:56:2e:46:d3:0e:
63:5b:2b:f6:24:b2:61:f8:bd:45:0f:c3:02:0f:84:f2:3e:2e:
01:82:27:5d:df:76:0f:a4:41:ae:a7:49:9f:d3:f4:44:ed:80:
60:e9:8a:a7:12:31:c6:5d:30:13:69:7b:26:9b:9e:29:46:79:
8c:88:06:cd:c7:8e:0c:b9:a3:9f:3b:dd:1c:f8:5f:57:de:db:
26:ae:e9:a4:3c:e8:aa:72:06:74:57:cb:f8:d2:0f:31:03:5d:
bf:49:e4:f5:21:40:1d:84:30:98:e7:9e:70:af:82:c5:e5:70:
89:67:db:15:a0:85:b2:a3:a3:e3:e7:d6:dc:ca:62:6f:16:ca:
cb:25:df:e7:9a:af:11:e2:5b:16:35:bf:43:8d:69:25:14:8a:
e8:bd:a1:d6
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEjFczNykk3yrqhJOQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDIwNDEzMzMxNVoXDTI1MDUwNTEyMzMxNVowLzEtMCsGA1UEAxMk
NTJjZmQyMWEtYzVmNC00ODgwLTk5ZDktNjRlYmRiM2I5ZjM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjusnTGBcJpws4u7EC38vFZlDHYniuJ6aYU4S
PrhKMFPY7vZu9TSbMU9qfckrwqQZiidXgB0XJWqNyBJDHPJ04UdtE1rTKJfRao8h
V57VDTansx1sYpNQPL5cskkhwlqa6WTUNPZCfKac5/msAHsozTUWNlbv3ijDQAeY
qrCAaQQn9AZEoRSWOQFj8Wnb1Cr/P4X5gUBLCRc9TnbQD0sru8QxQ6ldwmFgBxa8
+WVpfAjhUt/1LDbdfpgp8jgy6nLdBHvWNUNdwDl9gnpG0X421KIPoOU+nHBX4fbZ
HkDjH9o7jSTQuNwh/1LzQYhssrc9O1ZorX29dinlqQnsraHIqQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFGEAGghPQDuCBo7rdmgtNCNlsv06MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTVjOGU1ZDgtMDdmYy0z
MjY2LTk5ZTUtYTAzMDczYjY3Y2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAwwn
AAAAAAAAAAIAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAplc5noPZyYjO03Uj3JwQTM53sQCiCjL++C+IN
+kb7ZsWSJ3KVJ0B06k0S1epeWDFafvQVyrBvoad66tNQ+C+bVMkNBbgFClY+z5n8
hUA3QkCJJPIl0UvbWc8fWz+4KSM6Yo0S8CpYVi5G0w5jWyv2JLJh+L1FD8MCD4Ty
Pi4Bgidd33YPpEGup0mf0/RE7YBg6YqnEjHGXTATaXsmm54pRnmMiAbNx44MuaOf
O90c+F9X3tsmrumkPOiqcgZ0V8v40g8xA12/SeT1IUAdhDCY555wr4LF5XCJZ9sV
oIWyo6Pj59bcymJvFsrLJd/nmq8R4lsWNb9DjWklFIrovaHW
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:47:48 2025 by rpki-client