Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f8a7c74-9668-3e03-9ff9-2b590cbbffa3.roa
File: 9f8a7c74-9668-3e03-9ff9-2b590cbbffa3.roa (raw, json)
Hash identifier: v3GnPzhCuuOPm6MWHB1kpfyuOEJCf97DG7mMZ1fGt6g=
Subject key identifier: 88:9C:52:5F:F6:8B:0F:6B:DE:A5:8E:15:95:62:39:79:9B:12:0C:AD
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285849244E968CFDFBEC5BF04613B0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f8a7c74-9668-3e03-9ff9-2b590cbbffa3.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 36631
IP address blocks: 2001:500:122::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:96:8c:fd:fb:ec:5b:f0:46:13:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=3e755e18-c7d6-42a4-bec0-a6135a4ed5e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fe:ab:f3:63:d3:3d:e3:11:c5:97:a8:9d:03:
79:1e:27:51:a3:74:61:58:eb:a4:50:9e:a4:27:0b:
8a:dd:00:f0:10:21:57:1a:0a:f1:df:c9:20:42:48:
c9:9b:7a:79:16:e8:3b:4b:2a:4c:ac:95:53:6c:93:
31:d7:ef:28:c7:45:31:12:2a:d1:68:c2:69:4e:84:
95:7b:64:5c:60:c8:04:21:39:73:c3:50:b3:4b:54:
a8:28:71:f4:f2:d4:1d:e2:cb:c4:5f:e4:7d:da:36:
36:80:73:26:d6:ea:db:8c:62:3c:8d:39:79:fa:11:
2f:9d:4b:1d:de:10:dc:72:72:0a:0b:5b:8e:7b:22:
9b:34:d6:dd:85:37:de:67:c7:c3:f8:29:41:02:7a:
98:e3:08:16:2b:e6:46:65:47:8e:fe:1e:69:50:54:
4f:b7:21:11:9a:e0:b6:39:d4:29:a7:50:29:f3:8e:
48:3e:69:a0:1a:c7:ff:90:3e:29:c3:61:b6:b2:26:
ce:ae:0a:4b:7e:db:89:33:8a:f0:7a:07:ed:73:33:
20:40:74:fa:06:d1:b1:39:69:a3:d6:a3:b0:e8:b0:
c6:a9:9d:c9:12:36:91:8c:ed:70:96:9c:29:9a:d7:
0e:d0:88:b0:8f:dd:b5:52:ba:92:01:74:b2:55:f4:
3d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:9C:52:5F:F6:8B:0F:6B:DE:A5:8E:15:95:62:39:79:9B:12:0C:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f8a7c74-9668-3e03-9ff9-2b590cbbffa3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:122:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:09:23:fb:f2:5d:86:f9:8c:05:33:d9:12:f8:f0:a3:74:91:
82:59:da:50:06:50:4e:04:3d:25:c5:f6:87:9d:05:f7:a4:d8:
5c:ae:4a:06:b7:0b:24:ce:ba:92:90:b8:52:af:95:54:03:8f:
78:41:14:6f:ad:4c:64:61:90:a9:c4:9a:d4:87:38:dc:c7:ef:
9a:f9:d4:e5:80:1e:d3:d1:c9:a3:88:c1:bc:23:55:91:ce:48:
44:bc:01:ff:01:46:47:68:dc:c2:16:49:98:b0:98:e4:f1:7e:
47:c3:2b:46:eb:01:4f:62:69:0c:37:57:9a:f9:ec:bc:65:20:
6e:61:90:73:55:c8:1a:fe:10:d4:ff:b5:49:70:f6:82:98:e2:
76:44:0d:b2:c0:5b:76:ad:29:b5:43:99:7b:a2:7e:7f:82:b6:
ce:c5:be:fb:f2:37:48:39:a7:eb:c4:5f:77:ac:df:63:f7:78:
ea:9f:bb:e6:19:18:17:b8:5e:b5:cc:c1:1e:07:85:5e:cf:41:
d3:5e:fb:d1:bc:2b:86:89:44:d4:2b:1a:cb:da:da:23:1f:8b:
37:15:27:4b:ec:a1:70:99:18:47:a4:66:e8:a3:64:b0:e8:11:
93:e5:0a:64:ae:ee:b6:e8:cb:de:f7:ba:fb:56:af:d3:6e:51:
8a:6d:ec:56
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkkTpaM/fvsW/BGE7AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk
M2U3NTVlMTgtYzdkNi00MmE0LWJlYzAtYTYxMzVhNGVkNWU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAof6r82PTPeMRxZeonQN5HidRo3RhWOukUJ6k
JwuK3QDwECFXGgrx38kgQkjJm3p5Fug7SypMrJVTbJMx1+8ox0UxEirRaMJpToSV
e2RcYMgEITlzw1CzS1SoKHH08tQd4svEX+R92jY2gHMm1urbjGI8jTl5+hEvnUsd
3hDccnIKC1uOeyKbNNbdhTfeZ8fD+ClBAnqY4wgWK+ZGZUeO/h5pUFRPtyERmuC2
OdQpp1Ap845IPmmgGsf/kD4pw2G2sibOrgpLftuJM4rwegftczMgQHT6BtGxOWmj
1qOw6LDGqZ3JEjaRjO1wlpwpmtcO0Iiwj921UrqSAXSyVfQ9nwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFIicUl/2iw9r3qWOFZViOXmbEgytMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOWY4YTdjNzQtOTY2OC0z
ZTAzLTlmZjktMmI1OTBjYmJmZmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEi
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAvCSP78l2G+YwFM9kS+PCjdJGCWdpQBlBOBD0l
xfaHnQX3pNhcrkoGtwskzrqSkLhSr5VUA494QRRvrUxkYZCpxJrUhzjcx++a+dTl
gB7T0cmjiMG8I1WRzkhEvAH/AUZHaNzCFkmYsJjk8X5HwytG6wFPYmkMN1ea+ey8
ZSBuYZBzVcga/hDU/7VJcPaCmOJ2RA2ywFt2rSm1Q5l7on5/grbOxb778jdIOafr
xF93rN9j93jqn7vmGRgXuF61zMEeB4Vez0HTXvvRvCuGiUTUKxrL2tojH4s3FSdL
7KFwmRhHpGboo2Sw6BGT5Qpkru626Mve97r7Vq/TblGKbexW
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:06:34 2025 by rpki-client