Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/74efe664-04d1-30c8-9f54-f6abe3e534a5.roa
File: 74efe664-04d1-30c8-9f54-f6abe3e534a5.roa (raw, json)
Hash identifier: KjeYhFR9l0TRQVqKtYecDRUfMu9OnXj4B3KlMIDgaig=
Subject key identifier: D5:F4:1F:C3:57:0C:87:57:8A:78:19:AA:EE:CE:D1:CE:67:3C:D8:54
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285849244E945D988258A5100B1000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/74efe664-04d1-30c8-9f54-f6abe3e534a5.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 396588
IP address blocks: 2001:500:122::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:94:5d:98:82:58:a5:10:0b:10:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=62e6909a-7cc1-4e40-8c04-10eecf476510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4d:4d:5b:83:3d:a2:6f:6c:e5:2a:7b:f5:98:
5f:bf:29:fb:12:fe:0b:84:eb:35:d8:1f:89:a1:17:
ed:8e:be:23:2d:cc:4f:b8:b5:a9:2d:0e:72:17:c2:
ed:58:8a:85:0e:f3:b7:0b:d0:47:21:a7:eb:1a:91:
c1:ef:1f:73:53:47:e1:8e:44:eb:96:72:08:26:74:
c8:30:af:91:00:86:9f:c0:b8:dc:e0:45:d6:a1:43:
33:e3:e6:7f:69:47:74:35:66:53:36:de:38:db:ad:
4a:ff:07:f4:2f:6e:22:41:24:dc:89:e2:4a:26:05:
da:f7:0f:7a:59:44:fc:9b:62:58:0c:56:c1:07:cd:
57:bf:fc:3f:ef:03:1f:d3:d5:b9:60:b2:b8:3a:55:
e5:17:3d:ef:83:bf:f0:db:fc:52:95:e4:ac:58:1a:
1f:b2:98:b5:6f:aa:d9:24:df:21:68:d2:60:c7:73:
07:8b:c6:92:ee:41:b2:6d:84:e9:72:08:f8:76:85:
92:b9:c7:c8:5f:07:93:35:8a:a5:13:50:90:17:db:
4c:cf:62:71:20:f5:68:af:25:8a:5c:8f:11:13:91:
fa:54:1d:1a:30:96:cf:6e:9b:20:f1:61:a5:0a:75:
5c:16:d7:59:80:83:82:9f:4d:fc:21:73:a3:41:fd:
59:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F4:1F:C3:57:0C:87:57:8A:78:19:AA:EE:CE:D1:CE:67:3C:D8:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/74efe664-04d1-30c8-9f54-f6abe3e534a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:122:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:c8:b4:d4:f1:7e:3c:fb:3a:f0:5d:1d:46:7f:ff:27:b3:fe:
20:1c:03:90:02:ce:42:16:3f:49:d9:db:fa:0e:03:4f:3f:86:
4a:b1:ea:59:a3:a8:25:58:26:8c:a9:ad:05:9a:13:f6:16:1f:
33:9d:a8:82:a6:a2:0c:95:e1:f0:cf:2e:da:80:fc:11:b7:3c:
11:48:f6:5b:f6:9a:48:59:72:f7:8e:5a:e3:6a:c0:6f:3a:85:
f5:87:a2:0c:84:69:f8:62:68:b5:2c:6a:ba:43:09:1f:9a:11:
c5:55:a0:4f:4b:7c:71:be:43:8f:da:ac:5b:d7:24:cc:c4:aa:
60:d7:a3:ec:b0:23:ef:9f:c1:16:61:21:70:8d:10:f9:c5:98:
c7:41:72:59:2a:77:a7:4f:7c:69:1b:06:ab:f8:89:59:cc:a0:
d1:c2:02:9e:5e:8a:e7:f1:ea:95:64:30:0a:9f:9b:46:a2:03:
df:03:83:12:9a:5f:aa:a2:35:1b:e2:54:6e:ac:46:5d:bf:3c:
56:fe:1e:74:b3:30:9b:eb:36:39:f8:35:02:79:83:40:28:f3:
c1:c5:44:79:1a:cc:09:9a:d0:8f:ab:6e:0f:d3:a7:09:65:cd:
e3:88:82:46:c7:d4:a4:06:ac:fd:97:00:04:43:3b:d9:50:2b:
3f:cf:87:76
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkkTpRdmIJYpRALEAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk
NjJlNjkwOWEtN2NjMS00ZTQwLThjMDQtMTBlZWNmNDc2NTEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsU1NW4M9om9s5Sp79Zhfvyn7Ev4LhOs12B+J
oRftjr4jLcxPuLWpLQ5yF8LtWIqFDvO3C9BHIafrGpHB7x9zU0fhjkTrlnIIJnTI
MK+RAIafwLjc4EXWoUMz4+Z/aUd0NWZTNt44261K/wf0L24iQSTcieJKJgXa9w96
WUT8m2JYDFbBB81Xv/w/7wMf09W5YLK4OlXlFz3vg7/w2/xSleSsWBofspi1b6rZ
JN8haNJgx3MHi8aS7kGybYTpcgj4doWSucfIXweTNYqlE1CQF9tMz2JxIPVoryWK
XI8RE5H6VB0aMJbPbpsg8WGlCnVcFtdZgIOCn038IXOjQf1ZlwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFNX0H8NXDIdXingZqu7O0c5nPNhUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzRlZmU2NjQtMDRkMS0z
MGM4LTlmNTQtZjZhYmUzZTUzNGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEi
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQA7yLTU8X48+zrwXR1Gf/8ns/4gHAOQAs5CFj9J
2dv6DgNPP4ZKsepZo6glWCaMqa0FmhP2Fh8znaiCpqIMleHwzy7agPwRtzwRSPZb
9ppIWXL3jlrjasBvOoX1h6IMhGn4Ymi1LGq6QwkfmhHFVaBPS3xxvkOP2qxb1yTM
xKpg16PssCPvn8EWYSFwjRD5xZjHQXJZKnenT3xpGwar+IlZzKDRwgKeXorn8eqV
ZDAKn5tGogPfA4MSml+qojUb4lRurEZdvzxW/h50szCb6zY5+DUCeYNAKPPBxUR5
GswJmtCPq24P06cJZc3jiIJGx9SkBqz9lwAEQzvZUCs/z4d2
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:07:15 2025 by rpki-client