Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/83960fdd-a8b2-3bca-bdc1-b79610181557.roa
File: 83960fdd-a8b2-3bca-bdc1-b79610181557.roa (raw, json)
Hash identifier: KOFxj6m4xaQYhCq67LhJFm/aXLr4vq3szHOTzPVpzxs=
Subject key identifier: FE:AE:F7:E8:45:5C:75:9E:C1:E0:66:B4:24:11:A1:43:A4:38:93:E9
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489BA0BAA025CE1420F4DF69A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/83960fdd-a8b2-3bca-bdc1-b79610181557.roa
Signing time: Mon 20 Jan 2025 14:00:51 +0000
ROA not before: Mon 20 Jan 2025 14:00:51 +0000
ROA not after: Sun 20 Apr 2025 13:00:51 +0000
asID: 396574
IP address blocks: 2001:500:30ff::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9b:a0:ba:a0:25:ce:14:20:f4:df:69:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 14:00:51 2025 GMT
Not After : Apr 20 13:00:51 2025 GMT
Subject: CN=01dd225e-4692-4e1e-9aa3-6558027b6d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f8:d3:8f:08:c2:f5:8d:69:60:e6:05:b5:ab:
eb:28:bd:a8:1a:52:40:5c:e0:54:98:87:8f:7a:94:
0e:8f:e8:5c:ac:a3:6e:b8:ad:92:f5:09:e2:9b:6b:
80:78:bd:76:2c:64:69:70:6a:63:5c:84:85:33:68:
74:f0:4a:14:d5:eb:4f:9b:2a:15:18:c3:c2:8d:eb:
b8:22:50:36:90:56:38:6b:b2:03:69:ce:f0:a7:5c:
b9:b5:26:48:59:91:a2:24:0e:4e:cc:0c:64:44:bd:
cf:75:c2:58:3f:3a:ac:bd:0e:57:e7:d6:7f:ed:eb:
72:e3:49:4e:d2:9c:52:85:09:90:16:71:91:0f:cd:
fa:c4:05:0b:c2:97:e9:af:e1:ae:22:ee:e8:83:84:
7f:a0:a9:6b:82:06:15:f8:32:ba:54:10:93:3f:52:
29:cf:d9:ea:42:6d:c2:96:a0:23:ef:b7:ef:e0:52:
10:4d:0c:da:ff:59:e0:4f:a7:41:bd:bc:24:19:8d:
22:7c:a0:17:5f:45:07:be:91:e1:08:ea:31:34:c9:
72:b2:b6:67:3f:75:30:e6:36:62:a2:1f:6c:0c:c6:
a0:0e:4a:ec:1a:28:a7:e1:76:c5:7f:c6:46:5e:1f:
18:5f:19:e3:d2:0e:1e:58:94:3a:4b:fa:33:3b:fc:
6a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:AE:F7:E8:45:5C:75:9E:C1:E0:66:B4:24:11:A1:43:A4:38:93:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/83960fdd-a8b2-3bca-bdc1-b79610181557.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:30ff:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:93:ed:5b:ee:2b:8c:70:3e:ab:5c:b4:7c:44:c9:12:bc:28:
10:f3:a6:9c:93:f2:11:95:57:1e:21:9f:40:06:e5:d3:7d:2c:
c3:77:a5:8d:8d:af:73:4e:75:c2:d7:15:f1:cd:e6:73:55:3d:
fb:5f:31:b1:b4:c2:f2:43:50:a9:9c:12:55:a1:34:2c:1e:ae:
7d:8e:b4:0d:4c:85:36:8e:ca:88:35:77:94:20:a0:38:75:df:
d4:8a:0d:b3:f2:75:47:48:be:be:6a:e6:86:6f:5e:ef:12:d4:
b7:65:33:78:a1:62:d8:fe:12:65:c4:8f:5d:e3:ef:e1:70:da:
7a:6d:8a:d1:2f:35:da:d0:cb:a5:38:71:90:0f:58:c2:58:2a:
9b:96:44:8e:d1:4a:00:82:2d:92:b0:c9:62:46:00:46:c1:28:
75:ae:fb:9c:3f:4f:f8:ea:0f:07:2a:b5:41:7c:06:c5:b0:17:
63:48:e7:b7:41:d1:8b:09:c8:88:b8:06:b9:3a:c6:43:39:fe:
cc:01:3d:fb:fc:1f:87:71:35:cf:ce:9e:88:b6:98:28:55:70:
36:72:56:2b:61:4f:02:fd:5e:43:49:0d:2e:bd:87:1d:4c:ca:
e1:d2:28:f6:d1:3c:a1:99:34:ab:dd:44:ef:99:8e:cc:3f:00:
3b:0a:e5:71
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEiboLqgJc4UIPTfaaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDEyMDE0MDA1MVoXDTI1MDQyMDEzMDA1MVowLzEtMCsGA1UEAxMk
MDFkZDIyNWUtNDY5Mi00ZTFlLTlhYTMtNjU1ODAyN2I2ZDQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/jTjwjC9Y1pYOYFtavrKL2oGlJAXOBUmIeP
epQOj+hcrKNuuK2S9Qnim2uAeL12LGRpcGpjXISFM2h08EoU1etPmyoVGMPCjeu4
IlA2kFY4a7IDac7wp1y5tSZIWZGiJA5OzAxkRL3PdcJYPzqsvQ5X59Z/7ety40lO
0pxShQmQFnGRD836xAULwpfpr+GuIu7og4R/oKlrggYV+DK6VBCTP1Ipz9nqQm3C
lqAj77fv4FIQTQza/1ngT6dBvbwkGY0ifKAXX0UHvpHhCOoxNMlysrZnP3Uw5jZi
oh9sDMagDkrsGiin4XbFf8ZGXh8YXxnj0g4eWJQ6S/ozO/xqIQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFP6u9+hFXHWeweBmtCQRoUOkOJPpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODM5NjBmZGQtYThiMi0z
YmNhLWJkYzEtYjc5NjEwMTgxNTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFADD/
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCFk+1b7iuMcD6rXLR8RMkSvCgQ86ack/IRlVce
IZ9ABuXTfSzDd6WNja9zTnXC1xXxzeZzVT37XzGxtMLyQ1CpnBJVoTQsHq59jrQN
TIU2jsqINXeUIKA4dd/Uig2z8nVHSL6+auaGb17vEtS3ZTN4oWLY/hJlxI9d4+/h
cNp6bYrRLzXa0MulOHGQD1jCWCqblkSO0UoAgi2SsMliRgBGwSh1rvucP0/46g8H
KrVBfAbFsBdjSOe3QdGLCciIuAa5OsZDOf7MAT37/B+HcTXPzp6ItpgoVXA2clYr
YU8C/V5DSQ0uvYcdTMrh0ij20TyhmTSr3UTvmY7MPwA7CuVx
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:48:55 2025 by rpki-client