Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a694c459-c92a-3a88-a116-67a536ce86ea.roa
File: a694c459-c92a-3a88-a116-67a536ce86ea.roa (raw, json)
Hash identifier: LPjdiAfXJVyNeQ7RVD59oYqddgT/zBHbamQFSis/PP8=
Subject key identifier: 97:D9:C8:0E:6B:4B:FE:AF:C8:2D:A2:0C:3C:A0:F1:26:37:B1:F9:3A
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183E3902E8E56C6220A3140
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a694c459-c92a-3a88-a116-67a536ce86ea.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 36620
IP address blocks: 2001:500:125::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:e3:90:2e:8e:56:c6:22:0a:31:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=b235a69b-fdc7-479a-9a98-e0102d2f4f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f9:0c:39:63:46:d3:65:e0:c4:df:f9:ca:54:
70:a1:5d:c3:10:ef:17:b4:73:e6:c1:5a:11:9b:49:
6f:2b:55:89:b4:c4:72:38:76:d0:56:68:9a:2a:41:
d9:bb:aa:61:28:b0:96:06:59:1b:a3:c8:01:8b:10:
d8:76:73:ed:b4:22:d6:0a:d8:02:1d:b4:c1:25:be:
e0:50:e3:73:f2:8f:db:cc:7f:97:c2:5b:4c:f8:68:
75:9a:90:1b:63:79:62:da:09:b9:cf:d3:80:57:d3:
77:b3:61:f0:6e:28:12:9d:42:71:20:23:5a:30:45:
3b:28:f5:5d:2e:86:2b:8e:c2:80:1c:24:bc:30:c5:
fa:70:d8:43:1c:0a:db:56:de:e6:17:99:4c:19:f5:
a1:7f:74:b1:c2:3f:71:a4:73:96:bc:c8:77:ca:30:
14:29:0d:11:ce:17:62:47:fa:d2:73:38:ea:54:bf:
d0:fb:9a:f9:c6:07:64:9c:39:9b:5b:1e:80:52:20:
e9:85:53:2e:17:46:3a:83:56:d8:6c:23:96:ba:92:
d5:29:7b:48:47:a6:bf:ed:40:ec:e6:70:84:16:33:
4a:88:12:79:74:15:4e:1c:07:42:6c:9a:ad:71:4f:
cf:0d:f5:a4:f2:90:d9:d3:25:d4:29:f9:3a:cc:68:
a9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D9:C8:0E:6B:4B:FE:AF:C8:2D:A2:0C:3C:A0:F1:26:37:B1:F9:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a694c459-c92a-3a88-a116-67a536ce86ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:125:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:cb:ae:ab:03:db:4d:e0:fd:ee:50:58:f1:fb:b6:fc:bc:b0:
6a:58:0a:48:46:a3:9e:25:c0:3c:8d:f5:f2:e8:78:ed:1d:c4:
02:b4:8c:9d:24:fe:db:09:c2:a0:a1:3e:c7:92:52:69:3e:ce:
b8:00:24:ec:e1:8c:f1:72:2e:b8:f2:86:67:7a:b5:26:f0:b3:
ea:f5:97:d5:60:f4:20:08:62:02:2e:08:e0:44:11:85:31:91:
08:a6:63:ac:57:53:6b:aa:bd:a4:1c:fc:8b:28:54:ba:5a:17:
47:f2:8c:6e:17:3b:f5:c8:29:35:41:46:17:f7:f8:ec:b4:b5:
58:af:b9:fb:c5:4f:a8:30:6e:67:1a:c7:03:b1:74:ab:28:0d:
c0:57:16:a4:f0:92:61:4e:ad:6f:ab:97:57:a9:60:c3:93:f8:
65:50:ad:ce:27:3e:3c:25:e5:00:80:db:d1:3c:40:33:a1:ae:
84:7a:d7:d7:88:74:f5:b2:5e:f8:8b:bd:68:2c:71:54:ee:ad:
1e:aa:3b:aa:ef:da:7d:58:52:0d:97:e0:e1:4c:d4:a3:a8:e4:
60:37:1e:87:d1:56:32:db:e9:a0:52:61:4d:d8:32:d9:2c:30:
20:35:21:14:b3:77:79:a3:20:e3:8a:d4:96:e9:ff:c0:f3:f4:
62:cf:83:57
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkhg+OQLo5WxiIKMUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk
YjIzNWE2OWItZmRjNy00NzlhLTlhOTgtZTAxMDJkMmY0ZjYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfkMOWNG02XgxN/5ylRwoV3DEO8XtHPmwVoR
m0lvK1WJtMRyOHbQVmiaKkHZu6phKLCWBlkbo8gBixDYdnPttCLWCtgCHbTBJb7g
UONz8o/bzH+XwltM+Gh1mpAbY3li2gm5z9OAV9N3s2HwbigSnUJxICNaMEU7KPVd
LoYrjsKAHCS8MMX6cNhDHArbVt7mF5lMGfWhf3Sxwj9xpHOWvMh3yjAUKQ0Rzhdi
R/rSczjqVL/Q+5r5xgdknDmbWx6AUiDphVMuF0Y6g1bYbCOWupLVKXtIR6a/7UDs
5nCEFjNKiBJ5dBVOHAdCbJqtcU/PDfWk8pDZ0yXUKfk6zGip9QIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFJfZyA5rS/6vyC2iDDyg8SY3sfk6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTY5NGM0NTktYzkyYS0z
YTg4LWExMTYtNjdhNTM2Y2U4NmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAky66rA9tN4P3uUFjx+7b8vLBqWApIRqOeJcA8
jfXy6HjtHcQCtIydJP7bCcKgoT7HklJpPs64ACTs4Yzxci648oZnerUm8LPq9ZfV
YPQgCGICLgjgRBGFMZEIpmOsV1Nrqr2kHPyLKFS6WhdH8oxuFzv1yCk1QUYX9/js
tLVYr7n7xU+oMG5nGscDsXSrKA3AVxak8JJhTq1vq5dXqWDDk/hlUK3OJz48JeUA
gNvRPEAzoa6EetfXiHT1sl74i71oLHFU7q0eqjuq79p9WFINl+DhTNSjqORgNx6H
0VYy2+mgUmFN2DLZLDAgNSEUs3d5oyDjitSW6f/A8/Riz4NX
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:08:47 2025 by rpki-client