Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3730c19-8777-3357-8533-d60091dda817.roa
File: b3730c19-8777-3357-8533-d60091dda817.roa (raw, json)
Hash identifier: JQrOUhtzs8+WfK6C4bOFhNXPbEdeZp/KW6XpHnyElm8=
Subject key identifier: CD:60:B5:2D:54:C7:41:EB:AD:87:1B:71:57:6A:01:CB:6C:FE:A1:2F
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285849393E92B68F41E64F8EA3CD40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3730c19-8777-3357-8533-d60091dda817.roa
Signing time: Tue 18 Mar 2025 01:00:38 +0000
ROA not before: Tue 18 Mar 2025 01:00:38 +0000
ROA not after: Mon 16 Jun 2025 01:00:38 +0000
asID: 397193
IP address blocks: 2001:500:120::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:39:3e:92:b6:8f:41:e6:4f:8e:a3:cd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 18 01:00:38 2025 GMT
Not After : Jun 16 01:00:38 2025 GMT
Subject: CN=c9cbb312-5679-442f-ac38-e5e4332e8c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bd:90:0d:dd:44:b0:4a:45:c0:c2:46:2c:74:
20:93:d8:8e:00:75:03:0b:38:38:3c:35:1d:2a:26:
df:15:4b:80:86:d4:e7:7b:de:0e:2d:5c:61:3d:c8:
4d:e3:10:b7:24:e0:44:84:f1:57:55:a6:9e:fc:01:
31:85:f4:bd:7f:e8:c2:de:1b:dc:38:c8:22:2d:92:
a5:08:f2:08:89:95:9a:7c:90:c1:9e:70:27:00:86:
bd:51:1c:62:55:75:0b:ad:ab:cf:80:b5:a9:46:7e:
33:85:3e:a1:54:66:bd:97:de:ac:29:97:58:36:29:
90:8c:7f:10:b7:ec:10:e1:41:9e:e1:6e:40:14:14:
91:52:1f:0f:c5:78:e7:2b:e6:76:15:be:c9:4b:54:
9f:19:29:d1:01:73:7c:15:58:31:49:53:e6:eb:cb:
69:41:ce:80:ac:1e:b7:5c:d4:3b:e5:b7:01:b1:f4:
27:df:b6:a8:07:5e:ce:7d:58:7d:6c:fb:d5:47:c5:
7f:c9:31:e3:58:77:b7:d3:4f:0b:04:b9:b8:64:21:
99:b2:12:d5:75:44:77:52:a8:98:7f:3e:69:9d:10:
3a:49:0d:1c:2c:0d:1a:13:af:66:c3:fa:bc:69:53:
ae:34:0c:7e:6d:64:4f:c5:34:97:66:ba:83:2c:7d:
ab:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:60:B5:2D:54:C7:41:EB:AD:87:1B:71:57:6A:01:CB:6C:FE:A1:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3730c19-8777-3357-8533-d60091dda817.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:120:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:8b:a9:f4:51:5f:a2:a2:8a:df:09:65:21:fa:f9:bd:00:7d:
44:e0:d2:45:6e:eb:ac:1b:b2:9d:5b:20:71:af:bb:b1:b3:d0:
43:35:3f:4c:49:33:33:af:11:f7:93:5f:46:e5:31:21:2d:fc:
9c:b3:f8:57:5e:f8:a0:60:86:26:7b:95:17:d7:2f:24:c4:63:
46:ef:8e:c3:fb:66:7c:fe:69:b4:49:0d:6f:ce:87:97:40:b0:
8c:2a:9b:66:9b:8c:f4:4d:ce:22:cb:97:4d:9a:87:96:d1:b9:
ab:29:28:37:57:4b:3e:d1:56:f4:5a:9c:ff:4f:7a:a6:44:f1:
ec:09:64:bb:d8:41:ff:88:69:f4:1d:04:f7:99:7b:c1:5c:c4:
40:a1:ac:e4:63:f2:46:b1:53:05:65:bb:cf:12:5e:0b:a9:39:
6a:b9:cc:9e:0a:ab:a4:6d:cf:57:4f:af:4c:2a:cb:df:01:c5:
d8:f9:23:08:f4:1a:bd:29:d3:b1:1e:17:c2:24:6c:5f:ce:61:
ce:36:72:70:48:f6:c8:5d:dd:84:bf:3c:6a:c4:d3:61:cd:4a:
f7:60:db:ef:2f:4c:3f:67:eb:0e:99:f9:46:ac:a0:26:d2:ea:
42:70:04:73:06:4a:cd:c8:49:a5:6d:57:36:48:c5:07:82:43:
5d:fe:9d:c2
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEk5PpK2j0HmT46jzUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMxODAxMDAzOFoXDTI1MDYxNjAxMDAzOFowLzEtMCsGA1UEAxMk
YzljYmIzMTItNTY3OS00NDJmLWFjMzgtZTVlNDMzMmU4YzI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA272QDd1EsEpFwMJGLHQgk9iOAHUDCzg4PDUd
KibfFUuAhtTne94OLVxhPchN4xC3JOBEhPFXVaae/AExhfS9f+jC3hvcOMgiLZKl
CPIIiZWafJDBnnAnAIa9URxiVXULravPgLWpRn4zhT6hVGa9l96sKZdYNimQjH8Q
t+wQ4UGe4W5AFBSRUh8PxXjnK+Z2Fb7JS1SfGSnRAXN8FVgxSVPm68tpQc6ArB63
XNQ75bcBsfQn37aoB17OfVh9bPvVR8V/yTHjWHe3008LBLm4ZCGZshLVdUR3UqiY
fz5pnRA6SQ0cLA0aE69mw/q8aVOuNAx+bWRPxTSXZrqDLH2rHwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFM1gtS1Ux0HrrYcbcVdqActs/qEvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjM3MzBjMTktODc3Ny0z
MzU3LTg1MzMtZDYwMDkxZGRhODE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEg
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCHi6n0UV+ioorfCWUh+vm9AH1E4NJFbuusG7Kd
WyBxr7uxs9BDNT9MSTMzrxH3k19G5TEhLfycs/hXXvigYIYme5UX1y8kxGNG747D
+2Z8/mm0SQ1vzoeXQLCMKptmm4z0Tc4iy5dNmoeW0bmrKSg3V0s+0Vb0Wpz/T3qm
RPHsCWS72EH/iGn0HQT3mXvBXMRAoazkY/JGsVMFZbvPEl4LqTlqucyeCqukbc9X
T69MKsvfAcXY+SMI9Bq9KdOxHhfCJGxfzmHONnJwSPbIXd2EvzxqxNNhzUr3YNvv
L0w/Z+sOmflGrKAm0upCcARzBkrNyEmlbVc2SMUHgkNd/p3C
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:28:00 2025 by rpki-client