Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/753a5fd3-7ead-3451-8a4a-8d52bc868907.roa
File: 753a5fd3-7ead-3451-8a4a-8d52bc868907.roa (raw, json)
Hash identifier: 1tvR6/k3oDKw+DH5HnMhXqnCyw8YDQ9X8F1KZoA3Qss=
Subject key identifier: F8:E6:58:70:3E:BF:21:75:E7:68:54:6D:52:A2:DE:0D:B5:57:DF:FF
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848BFEB9F56AA12734976DB0080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/753a5fd3-7ead-3451-8a4a-8d52bc868907.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 396543
IP address blocks: 2001:500:133::53/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:9f:56:aa:12:73:49:76:db:00:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=bd0b5955-d952-4ecc-9444-bc0e7cedbb9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c1:e6:48:ac:af:4a:bd:5b:b7:66:9d:66:b3:
02:3c:aa:56:dd:d3:8c:e7:15:fc:c5:67:2e:b0:d7:
35:7d:30:2d:bc:c0:6b:10:33:a6:c1:9d:3e:96:b7:
ee:3a:59:1e:22:04:45:01:8c:84:e5:ab:49:65:8a:
2b:ad:6c:5b:16:cb:92:9c:09:57:a2:18:84:81:61:
58:92:0e:bf:98:6f:b4:6a:cd:a9:05:ee:8f:cc:9d:
67:87:e8:e8:19:da:41:b2:ea:f6:e8:6b:29:04:f9:
ea:7b:66:b6:2f:44:84:cd:a6:ab:16:6c:b2:56:e2:
4f:7c:68:34:34:4e:2c:54:e8:84:df:96:bd:ec:f1:
c6:94:4b:58:ad:6e:1c:75:6e:c9:50:1b:6b:c3:52:
ee:6b:56:6d:05:00:0b:3f:98:a8:43:db:ea:b2:13:
c5:d4:9c:9c:4d:9c:a0:d9:35:17:ca:3a:63:14:95:
21:d9:9a:57:31:6b:24:1a:cd:6b:32:1e:0e:cd:75:
4c:5b:3c:a3:fd:8d:8b:61:9b:a6:c6:4a:29:1e:0d:
48:2a:6e:55:f8:a6:1f:2d:7c:12:1c:63:21:2b:21:
1e:9f:85:a1:0b:c7:07:51:cf:15:ae:1b:6d:04:60:
f5:c3:15:d2:24:2b:6b:5f:7a:14:7d:bb:65:29:eb:
47:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E6:58:70:3E:BF:21:75:E7:68:54:6D:52:A2:DE:0D:B5:57:DF:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/753a5fd3-7ead-3451-8a4a-8d52bc868907.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:133:0:0:0:0:53/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:c0:4a:b2:e4:47:cf:74:23:ce:df:e1:8c:07:a3:54:84:0f:
8b:86:83:0b:62:b8:a4:47:48:f7:03:59:1f:de:d0:f0:4e:11:
67:d5:e4:fa:2d:8b:66:ba:25:78:92:b4:82:ad:95:5d:2b:db:
56:c7:ec:e3:a3:5e:c4:d1:6d:fb:61:72:9c:90:31:1b:6b:c5:
13:6f:47:80:3b:9d:e6:af:4d:ae:62:28:98:0e:07:74:6b:60:
1a:30:8c:ad:c6:73:ec:82:3f:45:b9:53:2e:c4:58:af:60:1e:
0d:f7:af:1b:25:8e:7f:f1:c6:60:b0:cd:db:d6:74:59:21:76:
af:62:e9:99:97:d4:e7:03:9a:72:77:e5:94:90:c1:76:b2:7b:
df:50:29:93:4e:36:e4:f6:44:f9:8c:b4:8a:32:2f:96:e0:73:
cb:d3:ab:e4:95:d7:28:18:df:3f:63:a3:a5:dd:cf:42:18:10:
2e:cd:af:56:a3:ab:1f:cc:a0:8a:77:b3:a3:aa:20:e8:04:c9:
41:41:4f:35:23:32:9d:88:ea:1a:2c:ff:31:a1:9d:d8:97:d9:
f5:ab:c6:aa:39:34:ca:d1:f0:7e:80:3f:94:42:52:a3:03:58:
b5:6f:6f:a6:63:e8:3d:ea:6d:be:6d:bc:f2:da:9d:49:7f:62:
24:4e:c0:fb
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEi/659WqhJzSXbbAIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk
YmQwYjU5NTUtZDk1Mi00ZWNjLTk0NDQtYmMwZTdjZWRiYjlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcHmSKyvSr1bt2adZrMCPKpW3dOM5xX8xWcu
sNc1fTAtvMBrEDOmwZ0+lrfuOlkeIgRFAYyE5atJZYorrWxbFsuSnAlXohiEgWFY
kg6/mG+0as2pBe6PzJ1nh+joGdpBsur26GspBPnqe2a2L0SEzaarFmyyVuJPfGg0
NE4sVOiE35a97PHGlEtYrW4cdW7JUBtrw1Lua1ZtBQALP5ioQ9vqshPF1JycTZyg
2TUXyjpjFJUh2ZpXMWskGs1rMh4OzXVMWzyj/Y2LYZumxkopHg1IKm5V+KYfLXwS
HGMhKyEen4WhC8cHUc8VrhttBGD1wxXSJCtrX3oUfbtlKetH5QIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFPjmWHA+vyF152hUbVKi3g21V9//MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzUzYTVmZDMtN2VhZC0z
NDUxLThhNGEtOGQ1MmJjODY4OTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBawEqy5EfPdCPO3+GMB6NUhA+LhoMLYrikR0j3
A1kf3tDwThFn1eT6LYtmuiV4krSCrZVdK9tWx+zjo17E0W37YXKckDEba8UTb0eA
O53mr02uYiiYDgd0a2AaMIytxnPsgj9FuVMuxFivYB4N968bJY5/8cZgsM3b1nRZ
IXavYumZl9TnA5pyd+WUkMF2snvfUCmTTjbk9kT5jLSKMi+W4HPL06vkldcoGN8/
Y6Ol3c9CGBAuza9Wo6sfzKCKd7OjqiDoBMlBQU81IzKdiOoaLP8xoZ3Yl9n1q8aq
OTTK0fB+gD+UQlKjA1i1b2+mY+g96m2+bbzy2p1Jf2IkTsD7
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:07:37 2025 by rpki-client