Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7ca31914-0f37-3c03-b1ff-f04ddad7f88b.roa
File: 7ca31914-0f37-3c03-b1ff-f04ddad7f88b.roa (raw, json)
Hash identifier: BclNxIirXSAf8DDLmLYimiRr6w8Liaz64jXBzyuKs5w=
Subject key identifier: 5F:70:84:2B:A7:D2:F8:30:71:37:3F:18:72:A1:CE:EE:D3:F6:F4:86
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858490CB15F8F2922730E65CE1B60
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7ca31914-0f37-3c03-b1ff-f04ddad7f88b.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 32651
IP address blocks: 2620:0:5050::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:5f:8f:29:22:73:0e:65:ce:1b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=3d62a260-5e72-43e1-83f6-603255da2e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:da:fd:7e:9e:90:50:c0:f9:dd:e8:f9:c9:2d:
7e:7f:83:b0:69:ae:bc:b9:e2:73:a0:cc:7c:7d:67:
66:3f:e3:27:50:a1:1f:bb:80:d5:f3:1e:a4:02:57:
2c:6b:8c:58:f9:19:c7:2f:cf:5b:d9:a5:5d:f5:a1:
b6:db:a8:da:e8:03:65:19:13:35:76:36:7d:cd:a2:
07:da:cd:03:62:a3:a1:4f:08:53:b2:3b:3a:ee:e8:
3c:b7:45:0f:19:8c:c8:2a:5d:98:4e:13:3f:2a:f5:
f8:23:e6:ce:cc:d5:bc:f7:1a:6d:1d:c2:72:66:f1:
5b:aa:91:f4:62:ee:7f:c7:41:4f:48:3e:1c:02:f5:
8e:7d:f9:14:23:c3:5f:38:47:35:a3:cd:28:7b:81:
06:4a:15:6e:73:99:01:d2:73:84:9b:3b:ec:c3:ce:
f5:86:c6:b7:08:5d:e1:8e:06:28:b5:04:e1:57:be:
22:3e:02:e1:e6:1d:22:0f:34:4d:e3:a1:8e:db:30:
fc:34:7b:e8:6a:d8:ca:6b:76:17:16:5c:99:60:2a:
d0:69:1b:93:c3:ce:43:0a:70:c2:67:0c:d2:1f:a8:
e9:70:5c:43:18:37:de:fe:1d:4a:7e:f3:f9:bb:a4:
1c:1a:b8:6d:b4:c7:d8:42:20:bc:07:09:0d:bb:49:
15:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:70:84:2B:A7:D2:F8:30:71:37:3F:18:72:A1:CE:EE:D3:F6:F4:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7ca31914-0f37-3c03-b1ff-f04ddad7f88b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:0:5050:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:27:16:f4:b1:75:bc:c3:4c:5a:a2:f6:53:2f:bc:df:77:d6:
d1:5e:09:74:74:59:cc:36:34:16:7a:9e:9b:8e:01:77:c6:b9:
3b:83:69:78:12:29:15:de:2c:52:7f:f6:39:08:10:78:00:7e:
f4:05:53:6c:67:c5:d8:52:2a:c1:6f:9c:58:c4:ca:9f:e7:e3:
49:58:85:0c:a9:49:11:92:05:f2:cb:02:4d:ea:0b:71:a6:d0:
f0:0a:08:a7:7f:0b:b5:ce:e0:1c:c1:b1:ad:c2:01:4f:a0:a5:
c5:3d:35:00:c7:ed:aa:5d:98:67:02:44:e9:12:75:a4:3e:ec:
67:e4:91:6f:9d:88:6b:a2:6c:ed:08:9a:ff:a5:da:c2:a7:91:
4a:51:6e:88:ed:36:84:33:53:f6:6b:f2:e7:85:33:b5:bd:b0:
6f:bd:a7:f0:ac:a3:64:c7:49:91:46:38:7c:36:16:f8:2e:1f:
4f:15:60:97:78:d9:91:2b:d4:59:66:bd:c5:11:c7:97:49:60:
41:f4:64:60:a9:bf:5f:6c:fd:86:8d:17:35:41:58:0d:04:cf:
a8:1e:fc:1d:9c:16:ec:0d:f7:80:3b:ff:b4:b2:2e:f7:c5:16:
a2:dc:2e:05:fc:f0:5c:18:0a:b9:b9:32:fa:fa:c5:cb:20:f5:
b0:95:04:29
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkMsV+PKSJzDmXOG2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk
M2Q2MmEyNjAtNWU3Mi00M2UxLTgzZjYtNjAzMjU1ZGEyZTQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNr9fp6QUMD53ej5yS1+f4Owaa68ueJzoMx8
fWdmP+MnUKEfu4DV8x6kAlcsa4xY+RnHL89b2aVd9aG226ja6ANlGRM1djZ9zaIH
2s0DYqOhTwhTsjs67ug8t0UPGYzIKl2YThM/KvX4I+bOzNW89xptHcJyZvFbqpH0
Yu5/x0FPSD4cAvWOffkUI8NfOEc1o80oe4EGShVuc5kB0nOEmzvsw871hsa3CF3h
jgYotQThV74iPgLh5h0iDzRN46GO2zD8NHvoatjKa3YXFlyZYCrQaRuTw85DCnDC
ZwzSH6jpcFxDGDfe/h1KfvP5u6QcGrhttMfYQiC8BwkNu0kVewIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFF9whCun0vgwcTc/GHKhzu7T9vSGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvN2NhMzE5MTQtMGYzNy0z
YzAzLWIxZmYtZjA0ZGRhZDdmODhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAAFBQ
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAqJxb0sXW8w0xaovZTL7zfd9bRXgl0dFnMNjQW
ep6bjgF3xrk7g2l4EikV3ixSf/Y5CBB4AH70BVNsZ8XYUirBb5xYxMqf5+NJWIUM
qUkRkgXyywJN6gtxptDwCginfwu1zuAcwbGtwgFPoKXFPTUAx+2qXZhnAkTpEnWk
Puxn5JFvnYhromztCJr/pdrCp5FKUW6I7TaEM1P2a/LnhTO1vbBvvafwrKNkx0mR
Rjh8Nhb4Lh9PFWCXeNmRK9RZZr3FEceXSWBB9GRgqb9fbP2GjRc1QVgNBM+oHvwd
nBbsDfeAO/+0si73xRai3C4F/PBcGAq5uTL6+sXLIPWwlQQp
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:52:33 2025 by rpki-client