Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/72ec868d-0488-3742-9ce7-620af34031b3.roa
File: 72ec868d-0488-3742-9ce7-620af34031b3.roa (raw, json)
Hash identifier: V+G4MFEwR+RYYkeIgTZd8LYgniwVjO2LgCBt+welcc0=
Subject key identifier: E6:A7:D7:9B:30:AC:27:BF:4C:E4:52:09:D6:23:B4:5D:AE:3B:81:D0
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584929E3D319862B666CF2C7BF80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/72ec868d-0488-3742-9ce7-620af34031b3.roa
Signing time: Wed 12 Mar 2025 13:00:53 +0000
ROA not before: Wed 12 Mar 2025 13:00:53 +0000
ROA not after: Tue 10 Jun 2025 13:00:53 +0000
asID: 396827
IP address blocks: 2001:500:121::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:29:e3:d3:19:86:2b:66:6c:f2:c7:bf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 12 13:00:53 2025 GMT
Not After : Jun 10 13:00:53 2025 GMT
Subject: CN=d86fd548-373e-4f45-b35e-b3c7cce9026c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:98:b8:33:94:fb:21:8d:a7:83:ef:e0:92:80:
91:45:48:b3:8c:9e:13:b7:f8:2c:0d:bd:e5:e5:5d:
d6:0b:db:94:18:13:2c:7f:2e:03:5c:df:f2:0d:89:
8d:5d:c9:71:ef:0b:a7:52:86:88:e9:21:2d:92:e9:
63:88:5b:c9:03:83:cc:12:44:12:78:84:7c:f8:ba:
a6:0d:0f:66:5d:be:6e:64:da:d1:c1:53:c3:f8:03:
ed:a4:90:4a:5d:53:c1:29:ef:57:4c:f4:6b:49:49:
e5:6e:5c:c5:02:46:1a:5c:16:56:5d:7d:9b:5f:ce:
d5:a4:e2:ae:86:9d:a1:53:ee:3d:e0:41:dc:ba:c8:
9e:e2:c3:51:85:c8:97:fc:e8:f3:f5:4b:0a:22:b4:
ab:99:df:fe:90:2d:29:53:48:52:8d:be:15:f0:ab:
61:0a:7b:dd:ca:62:8e:a0:31:e5:23:0f:1b:34:3b:
b8:f9:2c:dc:74:a7:f8:5c:27:30:c8:c8:af:ee:5b:
63:e3:cb:3c:81:1a:8e:0a:9e:2d:d0:14:24:a9:b7:
47:10:91:76:df:c6:90:4b:cb:29:2f:7e:f2:87:58:
f6:31:c2:1b:ea:f3:45:c8:db:15:5b:5b:74:d9:d9:
48:f0:62:a1:03:bf:c5:a2:c8:ca:5b:91:04:d6:22:
09:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A7:D7:9B:30:AC:27:BF:4C:E4:52:09:D6:23:B4:5D:AE:3B:81:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/72ec868d-0488-3742-9ce7-620af34031b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:121:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:44:13:bb:c8:d5:fd:e1:9d:c9:0c:23:e9:02:56:93:6d:97:
bb:ce:61:92:94:4b:18:27:78:68:61:79:97:f3:b8:4b:fd:26:
06:96:6a:0c:63:97:ee:7a:30:45:5c:57:42:3c:34:87:ac:bd:
6a:ff:93:2f:08:0c:d2:79:b6:67:11:44:7e:27:94:1a:69:b4:
4c:09:d2:1f:cd:70:dd:86:c4:6b:36:c2:ca:cd:3f:86:bc:b9:
dc:bd:e3:e0:49:40:3b:ca:cc:90:d7:dd:28:fc:18:fa:1b:d3:
22:68:96:40:73:8c:dc:70:66:b1:7c:b4:3f:0f:a0:10:66:45:
15:d6:2f:c1:05:27:ef:cf:ca:43:5a:4e:66:be:43:3e:70:9c:
88:21:71:4c:6f:77:9a:86:4b:8a:12:77:98:62:36:49:d7:ed:
17:70:75:3b:9e:66:f0:71:93:8b:45:20:1f:7f:45:2c:6b:4b:
0c:fa:86:a7:eb:b2:44:d6:e7:7a:08:a9:3e:d4:ea:44:b1:2e:
bf:cb:25:da:08:bb:ea:47:36:d5:46:1c:48:62:13:c6:09:76:
2f:cf:6d:21:7f:7d:6a:fb:27:ac:dd:e2:a9:5c:67:9b:7f:96:
2a:0b:45:99:1a:28:47:ec:6a:38:13:4a:cd:e3:ed:2c:82:63:
8d:33:13:50
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkp49MZhitmbPLHv4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMxMjEzMDA1M1oXDTI1MDYxMDEzMDA1M1owLzEtMCsGA1UEAxMk
ZDg2ZmQ1NDgtMzczZS00ZjQ1LWIzNWUtYjNjN2NjZTkwMjZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZi4M5T7IY2ng+/gkoCRRUizjJ4Tt/gsDb3l
5V3WC9uUGBMsfy4DXN/yDYmNXclx7wunUoaI6SEtkuljiFvJA4PMEkQSeIR8+Lqm
DQ9mXb5uZNrRwVPD+APtpJBKXVPBKe9XTPRrSUnlblzFAkYaXBZWXX2bX87VpOKu
hp2hU+494EHcusie4sNRhciX/Ojz9UsKIrSrmd/+kC0pU0hSjb4V8KthCnvdymKO
oDHlIw8bNDu4+SzcdKf4XCcwyMiv7ltj48s8gRqOCp4t0BQkqbdHEJF238aQS8sp
L37yh1j2McIb6vNFyNsVW1t02dlI8GKhA7/FosjKW5EE1iIJ+wIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFOan15swrCe/TORSCdYjtF2uO4HQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzJlYzg2OGQtMDQ4OC0z
NzQyLTljZTctNjIwYWYzNDAzMWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBKRBO7yNX94Z3JDCPpAlaTbZe7zmGSlEsYJ3ho
YXmX87hL/SYGlmoMY5fuejBFXFdCPDSHrL1q/5MvCAzSebZnEUR+J5QaabRMCdIf
zXDdhsRrNsLKzT+GvLncvePgSUA7ysyQ190o/Bj6G9MiaJZAc4zccGaxfLQ/D6AQ
ZkUV1i/BBSfvz8pDWk5mvkM+cJyIIXFMb3eahkuKEneYYjZJ1+0XcHU7nmbwcZOL
RSAff0Usa0sM+oan67JE1ud6CKk+1OpEsS6/yyXaCLvqRzbVRhxIYhPGCXYvz20h
f31q+yes3eKpXGebf5YqC0WZGihH7Go4E0rN4+0sgmONMxNQ
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:19:44 2025 by rpki-client