Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b5f99064-4ef5-321f-9dd6-1356a38bba6d.roa
File: b5f99064-4ef5-321f-9dd6-1356a38bba6d.roa (raw, json)
Hash identifier: QYViXSJdOzpjYzRih8oVaz5oIfNVuiy3KLD+7tYxL2k=
Subject key identifier: A2:4D:29:51:11:5C:48:5E:5D:62:41:CF:65:5D:EB:AB:C3:25:CC:D3
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183D5EDA267366DE0967080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b5f99064-4ef5-321f-9dd6-1356a38bba6d.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 396581
IP address blocks: 2001:500:125::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:d5:ed:a2:67:36:6d:e0:96:70:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=e5911e80-9a4a-4771-96ad-c0aa85247c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e1:07:ee:a8:00:69:c2:15:17:e0:27:6c:23:
b9:90:4b:45:c5:2f:db:b8:57:13:18:36:33:e4:3e:
e2:40:7b:d9:67:95:17:b5:cf:aa:3d:de:90:dd:93:
5e:3b:47:40:78:86:50:12:00:e9:60:aa:5c:20:57:
94:fb:10:80:95:f5:62:d5:0f:4c:cd:43:84:60:fa:
8b:2d:6c:6d:70:c1:c2:2b:ee:69:0a:d8:10:71:57:
e8:5f:15:09:3d:b0:a0:d7:e6:fa:d6:16:7e:1f:2a:
e7:2d:d4:f2:b6:92:8f:cd:4c:3b:cc:49:91:89:31:
83:98:cf:52:87:5d:8f:85:8a:a3:b2:76:49:9c:5b:
fa:db:46:20:80:33:ac:86:16:6b:20:fe:64:a0:af:
4b:06:cf:08:0b:c1:a1:2a:d6:32:02:a7:02:77:18:
5d:62:c9:5c:ee:e5:4b:fa:e2:30:5e:64:77:93:ae:
f0:23:df:93:bc:94:b6:f8:49:2e:91:5c:8c:34:49:
4e:50:cd:c3:50:7f:de:49:da:25:dd:df:bc:d9:cf:
df:4f:ef:2b:c9:37:51:11:d7:ca:72:fa:7e:bc:e5:
0e:b9:ca:30:08:c5:8b:2d:c7:2f:ea:92:53:5a:77:
dd:3f:da:fe:60:2c:7a:e1:9f:f3:16:0a:55:66:7b:
4a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:4D:29:51:11:5C:48:5E:5D:62:41:CF:65:5D:EB:AB:C3:25:CC:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b5f99064-4ef5-321f-9dd6-1356a38bba6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:125:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:1c:24:21:b3:b3:32:31:fe:08:3b:49:36:5e:ed:2a:76:44:
2b:c0:74:4f:97:86:01:5d:8f:77:8f:eb:ed:9f:3f:45:8b:33:
c3:45:48:1c:d8:41:3c:63:74:44:8d:36:ed:fd:65:92:a5:c9:
ac:27:7b:d0:df:f8:6a:7d:b9:75:30:df:33:5f:a9:74:fe:aa:
c2:dd:ed:35:ef:48:84:9e:a6:0f:a2:80:21:d2:c5:61:34:97:
8f:b6:cb:9f:9e:aa:3b:4b:83:dd:1d:f3:23:cf:d5:6e:50:6c:
3f:7a:c7:c9:e3:22:04:f9:7a:4b:4a:6b:31:44:bc:ce:ba:2f:
5e:9d:84:f9:36:2a:e6:ff:58:51:82:2a:d7:8a:de:0d:e4:a6:
94:77:df:44:51:5c:3c:4d:12:49:a5:4d:c7:54:7c:55:d3:a6:
9d:66:2f:c0:ad:42:76:90:ec:04:9f:69:04:34:78:19:e2:82:
64:b3:2d:ba:51:e3:a6:f2:a7:6b:14:dd:eb:f3:0e:2a:2d:4f:
5d:32:99:0d:33:31:0d:52:e5:97:4b:d7:ec:8c:f4:cd:e3:83:
3d:ce:89:5c:23:08:a1:11:08:6d:76:fb:a4:da:b2:bc:7d:d7:
4d:86:1e:32:d9:76:b3:71:2f:24:19:ae:2d:08:d5:1c:52:87:
89:70:27:4b
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkhg9Xtomc2beCWcIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk
ZTU5MTFlODAtOWE0YS00NzcxLTk2YWQtYzBhYTg1MjQ3Yzg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuEH7qgAacIVF+AnbCO5kEtFxS/buFcTGDYz
5D7iQHvZZ5UXtc+qPd6Q3ZNeO0dAeIZQEgDpYKpcIFeU+xCAlfVi1Q9MzUOEYPqL
LWxtcMHCK+5pCtgQcVfoXxUJPbCg1+b61hZ+HyrnLdTytpKPzUw7zEmRiTGDmM9S
h12PhYqjsnZJnFv620YggDOshhZrIP5koK9LBs8IC8GhKtYyAqcCdxhdYslc7uVL
+uIwXmR3k67wI9+TvJS2+EkukVyMNElOUM3DUH/eSdol3d+82c/fT+8ryTdREdfK
cvp+vOUOucowCMWLLccv6pJTWnfdP9r+YCx64Z/zFgpVZntKlwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFKJNKVERXEheXWJBz2Vd66vDJczTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjVmOTkwNjQtNGVmNS0z
MjFmLTlkZDYtMTM1NmEzOGJiYTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQA4HCQhs7MyMf4IO0k2Xu0qdkQrwHRPl4YBXY93
j+vtnz9FizPDRUgc2EE8Y3REjTbt/WWSpcmsJ3vQ3/hqfbl1MN8zX6l0/qrC3e01
70iEnqYPooAh0sVhNJePtsufnqo7S4PdHfMjz9VuUGw/esfJ4yIE+XpLSmsxRLzO
ui9enYT5Nirm/1hRgirXit4N5KaUd99EUVw8TRJJpU3HVHxV06adZi/ArUJ2kOwE
n2kENHgZ4oJksy26UeOm8qdrFN3r8w4qLU9dMpkNMzENUuWXS9fsjPTN44M9zolc
IwihEQhtdvuk2rK8fddNhh4y2XazcS8kGa4tCNUcUoeJcCdL
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:52:15 2025 by rpki-client