Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65745f11-5df0-3bdf-82b0-b7b44174bd0e.roa
File: 65745f11-5df0-3bdf-82b0-b7b44174bd0e.roa (raw, json)
Hash identifier: sToNRsT5GWYpmCMTyXuOU/AVsCf+By7dzI0SXx7o8QE=
Subject key identifier: FA:38:6A:2D:EA:6C:05:66:05:53:3D:94:EA:E2:FE:C4:29:81:3C:ED
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848BFEB9814E180FFA1DA9DA580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65745f11-5df0-3bdf-82b0-b7b44174bd0e.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 36621
IP address blocks: 2001:500:133::53/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:98:14:e1:80:ff:a1:da:9d:a5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=c3e45328-0f28-4904-bcd0-2fe6ccd78a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a3:7e:5f:13:2e:22:02:3b:38:f0:f6:d6:15:
73:7f:7a:cd:a2:d7:2c:6c:f9:8b:df:6b:67:bd:ca:
8d:8c:31:8e:88:88:40:bb:62:3d:95:fe:13:3b:13:
f8:07:26:20:0f:47:5f:62:fa:8b:b5:68:43:12:ce:
84:04:09:06:78:92:f8:58:a4:ad:01:25:4c:d7:4f:
14:81:c1:b3:63:a7:7d:67:31:6c:4a:ef:8e:54:fc:
84:bf:43:47:56:5f:c1:e3:d5:cf:78:0b:97:bb:15:
76:1c:9f:12:7f:f3:bd:4f:b1:f2:3e:27:19:1f:3a:
e6:48:4d:ec:79:5f:03:f1:2c:6f:53:3d:ee:7d:c7:
96:5d:73:16:c4:3a:f8:72:3c:46:3f:1e:6e:d4:36:
38:8c:e4:c6:dd:29:75:ff:cb:4c:2e:11:be:a2:f3:
b6:43:ed:a7:a9:6d:7d:3a:7f:21:cd:da:53:0b:68:
a1:14:fc:16:96:dd:14:9b:02:4f:6a:09:db:4c:3d:
fd:05:6a:c2:cc:b9:93:4f:8d:48:7b:37:d1:e1:31:
69:17:6a:97:04:0f:97:dd:a4:8c:8b:ba:87:66:ca:
02:a0:1d:f5:15:2f:8c:55:33:4e:db:d5:10:42:b3:
73:a4:6d:da:6c:d2:94:b9:6f:27:d5:3f:48:9f:0c:
f4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:38:6A:2D:EA:6C:05:66:05:53:3D:94:EA:E2:FE:C4:29:81:3C:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65745f11-5df0-3bdf-82b0-b7b44174bd0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:133:0:0:0:0:53/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:a7:eb:77:ad:48:72:a6:a5:72:86:3d:ea:1c:c4:2a:c6:04:
f6:88:ed:10:55:d6:33:c0:6e:3e:08:58:81:67:2d:65:0b:b5:
66:b7:04:3d:ea:cc:cc:26:2b:47:9f:c9:4f:d7:18:0b:91:2b:
cc:2d:a7:67:2a:3d:1e:3a:7d:61:b4:d1:e7:55:33:36:82:48:
a1:56:3a:99:8a:18:7b:7b:f1:99:4e:49:41:54:10:42:9f:af:
d1:81:7d:33:71:a7:ba:63:5e:dc:66:f8:b1:97:76:19:a1:63:
9d:71:d5:c9:2f:88:65:03:0b:39:70:71:70:fe:39:a0:8c:2f:
54:bd:f2:0f:69:b7:c4:df:19:e2:9c:d2:07:cc:8d:ef:74:7a:
2e:f3:f0:2c:13:a3:cc:a9:37:d2:ac:5c:74:d2:c3:ed:49:63:
17:31:26:a5:c5:21:3b:c7:97:85:74:a9:c8:41:93:11:94:fe:
ab:e8:71:a1:00:69:a7:d3:1f:e7:3a:e3:ec:30:2f:74:a8:7e:
74:ef:7d:81:62:71:2e:55:72:6f:30:c8:e9:64:2a:d4:02:80:
13:45:75:a1:32:ca:3e:5e:90:56:33:cb:2d:a5:d6:b2:91:86:
92:6a:fa:83:2d:97:ef:32:ff:67:0c:ec:da:aa:3f:83:87:11:
ad:17:7c:bc
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEi/65gU4YD/odqdpYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk
YzNlNDUzMjgtMGYyOC00OTA0LWJjZDAtMmZlNmNjZDc4YTEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKN+XxMuIgI7OPD21hVzf3rNotcsbPmL32tn
vcqNjDGOiIhAu2I9lf4TOxP4ByYgD0dfYvqLtWhDEs6EBAkGeJL4WKStASVM108U
gcGzY6d9ZzFsSu+OVPyEv0NHVl/B49XPeAuXuxV2HJ8Sf/O9T7HyPicZHzrmSE3s
eV8D8SxvUz3ufceWXXMWxDr4cjxGPx5u1DY4jOTG3Sl1/8tMLhG+ovO2Q+2nqW19
On8hzdpTC2ihFPwWlt0UmwJPagnbTD39BWrCzLmTT41IezfR4TFpF2qXBA+X3aSM
i7qHZsoCoB31FS+MVTNO29UQQrNzpG3abNKUuW8n1T9Inwz0/QIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFPo4ai3qbAVmBVM9lOri/sQpgTztMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjU3NDVmMTEtNWRmMC0z
YmRmLTgyYjAtYjdiNDQxNzRiZDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCdp+t3rUhypqVyhj3qHMQqxgT2iO0QVdYzwG4+
CFiBZy1lC7VmtwQ96szMJitHn8lP1xgLkSvMLadnKj0eOn1htNHnVTM2gkihVjqZ
ihh7e/GZTklBVBBCn6/RgX0zcae6Y17cZvixl3YZoWOdcdXJL4hlAws5cHFw/jmg
jC9UvfIPabfE3xninNIHzI3vdHou8/AsE6PMqTfSrFx00sPtSWMXMSalxSE7x5eF
dKnIQZMRlP6r6HGhAGmn0x/nOuPsMC90qH50732BYnEuVXJvMMjpZCrUAoATRXWh
Mso+XpBWM8stpdaykYaSavqDLZfvMv9nDOzaqj+DhxGtF3y8
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:54:13 2025 by rpki-client