Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8e19bed1-16f5-3442-8477-29621a911c5e.roa
File: 8e19bed1-16f5-3442-8477-29621a911c5e.roa (raw, json)
Hash identifier: I/MiQmS/w3Q6yjzqKKz00A99wVRbNWJl1/WEkAsQm5Y=
Subject key identifier: 12:21:42:73:67:85:77:9E:58:05:40:12:F4:84:47:2B:0E:DD:86:7F
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848BA563824CB951F620031CD00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8e19bed1-16f5-3442-8477-29621a911c5e.roa
Signing time: Fri 31 Jan 2025 14:00:51 +0000
ROA not before: Fri 31 Jan 2025 14:00:51 +0000
ROA not after: Thu 01 May 2025 13:00:51 +0000
asID: 396570
IP address blocks: 2001:500:134::53/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ba:56:38:24:cb:95:1f:62:00:31:cd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 31 14:00:51 2025 GMT
Not After : May 1 13:00:51 2025 GMT
Subject: CN=96d6d801-faab-45c8-8a56-23b51ad39729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:11:b0:ff:7c:a1:7d:ee:f6:62:36:b1:bc:d0:
ee:30:44:37:a7:86:53:dc:a5:97:29:30:c2:58:cf:
6c:e9:cf:e5:d3:08:03:3f:3f:5f:05:8d:b9:a4:03:
69:a4:0c:c8:68:16:5f:32:46:06:6f:af:0d:39:22:
06:43:ea:fd:f3:a7:87:07:45:0e:2f:f9:a6:5c:88:
f8:5d:bd:bb:9e:41:57:b2:a3:f8:dd:42:23:f8:83:
01:46:56:cb:1c:88:e9:62:d1:b5:c5:6c:6b:d8:8c:
72:f7:72:4b:22:9b:d1:a3:24:04:f9:46:18:30:a8:
05:94:c5:21:26:47:30:13:d7:b8:7e:c9:9c:b1:fd:
f0:b1:29:77:1a:75:f2:8b:d2:5c:e9:e5:ea:57:f4:
cb:4f:79:4b:ae:4f:89:11:7d:f7:2b:02:a0:99:c0:
06:7f:d6:b7:a2:9b:aa:7b:87:3c:a7:f2:57:6b:c2:
2a:61:01:c4:ee:64:8d:df:68:b7:f8:d2:cd:0f:03:
66:86:19:13:96:f4:be:0b:45:01:97:26:e5:3a:10:
cc:c8:b2:b6:5e:8a:cc:30:82:f9:81:1f:e7:f5:31:
4b:c9:c7:9d:dd:97:ec:b9:fe:87:ab:d8:3b:7c:af:
78:45:76:7e:00:1f:7a:d7:54:de:30:e4:cf:2c:52:
9b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:21:42:73:67:85:77:9E:58:05:40:12:F4:84:47:2B:0E:DD:86:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8e19bed1-16f5-3442-8477-29621a911c5e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:134:0:0:0:0:53/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:37:ee:10:a1:4f:8c:04:1b:d3:97:a8:ae:e9:43:da:70:9e:
9f:80:55:e3:2a:a9:4a:4c:7c:74:f4:e0:00:06:77:17:d6:b4:
57:44:2e:5e:a5:40:1b:ac:6f:c3:e9:42:ab:34:07:04:1f:03:
9f:a2:ba:c8:3e:fa:bc:6a:b6:44:92:4d:53:11:86:5a:62:57:
b8:1b:86:9b:1b:ee:59:bf:18:10:e3:7a:fa:db:68:32:cb:2a:
88:98:88:ec:02:6a:0c:de:a4:fb:52:5f:15:fe:85:c2:7c:a9:
8d:31:43:be:c8:44:ea:39:d9:94:bb:6d:52:59:4d:eb:a9:2d:
d9:3e:e4:44:3f:66:50:3f:69:52:d5:69:e9:ad:f9:68:9a:cb:
e0:70:0b:bb:92:53:fb:8b:66:27:3f:2f:c7:65:94:e9:af:5e:
b8:b3:a4:54:aa:7f:7b:43:fd:bf:f0:28:bb:fb:b3:66:74:7f:
a5:b5:19:25:ee:2f:c1:5b:d8:30:f8:eb:bc:e2:1e:3d:29:8d:
f3:8c:1e:27:5b:3a:2c:65:c7:87:17:90:14:87:9a:d0:c3:a5:
7b:b3:e8:88:5f:76:c0:67:57:32:14:92:a0:a4:b8:4d:0a:04:
9b:ec:9c:19:39:22:60:be:85:ed:da:3c:00:ea:2b:98:33:06:
62:85:35:fd
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEi6Vjgky5UfYgAxzQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDEzMTE0MDA1MVoXDTI1MDUwMTEzMDA1MVowLzEtMCsGA1UEAxMk
OTZkNmQ4MDEtZmFhYi00NWM4LThhNTYtMjNiNTFhZDM5NzI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRGw/3yhfe72YjaxvNDuMEQ3p4ZT3KWXKTDC
WM9s6c/l0wgDPz9fBY25pANppAzIaBZfMkYGb68NOSIGQ+r986eHB0UOL/mmXIj4
Xb27nkFXsqP43UIj+IMBRlbLHIjpYtG1xWxr2Ixy93JLIpvRoyQE+UYYMKgFlMUh
JkcwE9e4fsmcsf3wsSl3GnXyi9Jc6eXqV/TLT3lLrk+JEX33KwKgmcAGf9a3opuq
e4c8p/JXa8IqYQHE7mSN32i3+NLNDwNmhhkTlvS+C0UBlyblOhDMyLK2XorMMIL5
gR/n9TFLyced3Zfsuf6Hq9g7fK94RXZ+AB9611TeMOTPLFKbzQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFBIhQnNnhXeeWAVAEvSERysO3YZ/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGUxOWJlZDEtMTZmNS0z
NDQyLTg0NzctMjk2MjFhOTExYzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE0
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBqN+4QoU+MBBvTl6iu6UPacJ6fgFXjKqlKTHx0
9OAABncX1rRXRC5epUAbrG/D6UKrNAcEHwOforrIPvq8arZEkk1TEYZaYle4G4ab
G+5ZvxgQ43r622gyyyqImIjsAmoM3qT7Ul8V/oXCfKmNMUO+yETqOdmUu21SWU3r
qS3ZPuREP2ZQP2lS1WnprflomsvgcAu7klP7i2YnPy/HZZTpr164s6RUqn97Q/2/
8Ci7+7NmdH+ltRkl7i/BW9gw+Ou84h49KY3zjB4nWzosZceHF5AUh5rQw6V7s+iI
X3bAZ1cyFJKgpLhNCgSb7JwZOSJgvoXt2jwA6iuYMwZihTX9
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:09 2025 by rpki-client