Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65565d5e-e7d7-3314-b630-071287409809.roa
File: 65565d5e-e7d7-3314-b630-071287409809.roa (raw, json)
Hash identifier: kKWifRovqgRE2JWKB6fxSpipR0MdMTrFBurBzamupfI=
Subject key identifier: 98:05:28:37:F1:23:FA:92:B1:E4:17:69:38:4F:29:D5:8A:9C:55:20
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285849393E9008D39B7F999979B000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65565d5e-e7d7-3314-b630-071287409809.roa
Signing time: Tue 18 Mar 2025 01:00:38 +0000
ROA not before: Tue 18 Mar 2025 01:00:38 +0000
ROA not after: Mon 16 Jun 2025 01:00:38 +0000
asID: 396587
IP address blocks: 2001:500:120::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:39:3e:90:08:d3:9b:7f:99:99:79:b0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 18 01:00:38 2025 GMT
Not After : Jun 16 01:00:38 2025 GMT
Subject: CN=134d4cda-575f-4253-a7c3-4ae8160de71c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d3:a0:25:10:09:8f:49:41:14:15:b2:fc:6b:
34:3b:c3:6a:6c:3e:2a:ff:54:0c:ca:cb:18:4f:6f:
12:6a:c1:b5:a9:34:37:57:17:0c:bc:8f:d1:4d:1b:
f0:b1:22:82:b9:e3:21:67:c2:ee:2f:20:cb:c9:0c:
65:54:7d:58:76:48:23:63:87:b9:b0:82:13:7d:27:
41:c4:f4:fe:d1:76:61:6a:b4:65:24:a0:cd:cf:0b:
3b:75:ef:73:6d:09:dc:7d:68:d3:01:50:05:c3:6e:
aa:40:bb:ab:cc:4c:63:19:0d:bc:f3:87:00:33:05:
1d:05:06:60:bf:d3:4e:8e:5a:f8:a1:1f:71:35:0d:
5a:e4:16:74:98:99:5a:d6:1d:6c:9b:02:21:46:0f:
26:bb:e3:fd:7b:4c:d6:0b:69:e7:4f:f7:a4:fe:56:
2c:53:10:1f:ed:0f:7e:80:aa:09:0e:c8:aa:dc:b7:
83:d6:8b:0b:51:21:7c:2c:8e:ec:63:38:19:59:6d:
15:02:05:84:42:6c:ac:d4:3b:ee:92:a4:16:92:ed:
52:25:79:a6:d2:e6:93:24:15:87:77:c4:fa:bc:58:
f6:32:76:ea:28:ca:01:ea:03:9a:4d:d5:41:1f:a4:
86:72:35:bd:71:2a:af:57:53:70:e2:f9:7b:71:e5:
33:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:05:28:37:F1:23:FA:92:B1:E4:17:69:38:4F:29:D5:8A:9C:55:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65565d5e-e7d7-3314-b630-071287409809.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:120:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:12:e4:c3:d3:c9:91:7c:7a:dc:16:1a:7a:f5:c4:23:e8:e0:
37:87:9b:5d:ff:2d:c2:78:9a:98:5b:54:48:b6:d2:4b:3f:3d:
44:16:3a:f0:ca:4d:21:a0:9e:0e:18:b9:6c:f9:ec:6c:94:54:
65:ca:91:2a:28:0d:71:d5:85:82:99:e7:ba:cb:d6:d5:3c:6e:
cb:f1:1f:06:7a:99:25:85:fa:83:23:c8:82:40:2f:9e:97:9a:
cc:7e:f5:e9:d9:ab:c3:92:23:58:23:dc:6d:34:a9:48:85:ef:
af:fb:9b:1a:c8:84:64:39:af:0d:4f:b5:82:46:6c:0e:2a:1b:
07:3a:43:79:0d:99:bb:44:57:8b:5a:b6:57:6d:a3:48:22:26:
61:5e:58:63:ae:96:1b:f6:97:2f:fa:66:62:18:3e:0c:e0:fb:
e6:6c:7a:80:1e:74:1e:92:f2:60:90:01:52:ef:86:20:8e:ed:
8b:33:a5:86:b4:26:6a:3a:db:67:97:96:99:5c:f0:86:82:ad:
20:b5:10:ae:1c:49:b9:4a:b0:8b:09:0a:05:79:f5:61:04:0e:
d5:ee:fd:52:1c:f1:ac:e8:ed:98:f5:86:01:f1:e0:18:92:15:
64:fb:fc:cd:e6:92:cf:14:e6:e8:a6:78:3c:9b:1b:29:d5:53:
95:46:a6:76
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEk5PpAI05t/mZl5sAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMxODAxMDAzOFoXDTI1MDYxNjAxMDAzOFowLzEtMCsGA1UEAxMk
MTM0ZDRjZGEtNTc1Zi00MjUzLWE3YzMtNGFlODE2MGRlNzFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9OgJRAJj0lBFBWy/Gs0O8NqbD4q/1QMyssY
T28SasG1qTQ3VxcMvI/RTRvwsSKCueMhZ8LuLyDLyQxlVH1YdkgjY4e5sIITfSdB
xPT+0XZharRlJKDNzws7de9zbQncfWjTAVAFw26qQLurzExjGQ2884cAMwUdBQZg
v9NOjlr4oR9xNQ1a5BZ0mJla1h1smwIhRg8mu+P9e0zWC2nnT/ek/lYsUxAf7Q9+
gKoJDsiq3LeD1osLUSF8LI7sYzgZWW0VAgWEQmys1DvukqQWku1SJXmm0uaTJBWH
d8T6vFj2MnbqKMoB6gOaTdVBH6SGcjW9cSqvV1Nw4vl7ceUzowIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFJgFKDfxI/qSseQXaThPKdWKnFUgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjU1NjVkNWUtZTdkNy0z
MzE0LWI2MzAtMDcxMjg3NDA5ODA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEg
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQA4EuTD08mRfHrcFhp69cQj6OA3h5td/y3CeJqY
W1RIttJLPz1EFjrwyk0hoJ4OGLls+exslFRlypEqKA1x1YWCmee6y9bVPG7L8R8G
epklhfqDI8iCQC+el5rMfvXp2avDkiNYI9xtNKlIhe+v+5sayIRkOa8NT7WCRmwO
KhsHOkN5DZm7RFeLWrZXbaNIIiZhXlhjrpYb9pcv+mZiGD4M4PvmbHqAHnQekvJg
kAFS74Ygju2LM6WGtCZqOttnl5aZXPCGgq0gtRCuHEm5SrCLCQoFefVhBA7V7v1S
HPGs6O2Y9YYB8eAYkhVk+/zN5pLPFObopng8mxsp1VOVRqZ2
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:25:38 2025 by rpki-client