Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba06575f-6a44-3531-a6b2-4aa363ec1398.roa
File: ba06575f-6a44-3531-a6b2-4aa363ec1398.roa (raw, json)
Hash identifier: WAKIzVBsBODsdwt9vK8DqFmc9g5/2b9KO2TSiJLTkx8=
Subject key identifier: DF:23:B4:6F:86:93:33:FB:E6:FC:44:A4:01:D1:89:83:EF:95:46:D1
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584917DC12718BD3E053660603C8
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba06575f-6a44-3531-a6b2-4aa363ec1398.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 396584
IP address blocks: 2001:500:123::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:12:71:8b:d3:e0:53:66:06:03:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=0eb971b5-aa37-4708-9c90-fbfbd0d9d869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:02:68:1b:ad:6a:85:8a:75:5f:fa:4d:ed:fe:
7e:50:40:e4:18:44:8f:7f:06:5f:c6:eb:e1:90:1c:
8f:7b:25:30:f9:57:5f:c9:82:a2:57:94:ea:45:0b:
6a:0e:52:fe:2c:ee:ec:ef:73:72:bd:df:36:90:4a:
83:fd:ad:f8:40:76:26:1f:f4:85:80:0b:d0:7a:08:
40:17:5b:54:1a:af:3a:db:74:d1:5e:b4:8c:bc:62:
22:45:67:a9:01:b8:fe:7c:98:45:e8:a3:c4:f7:1b:
f9:5c:d0:04:06:fc:2a:74:b9:54:a2:56:dc:e9:f7:
c4:28:c3:7e:3e:9b:e8:6e:e6:a2:99:6f:d8:33:01:
81:3a:73:38:99:e2:d5:7a:e3:bb:cf:50:88:36:80:
44:ce:65:80:06:51:e1:ab:27:1d:e4:f5:3d:27:4a:
c2:9a:f2:1a:77:ee:69:81:20:1f:19:5a:e2:33:92:
ed:e4:c3:2e:7d:72:f1:96:95:58:56:e5:56:31:3a:
5a:75:35:54:13:d1:df:62:f8:96:03:5c:72:7c:6a:
cc:5c:b6:80:de:9e:58:06:bd:5a:64:41:00:fb:43:
c3:b4:6b:40:e5:09:dd:f3:8f:32:77:1d:c3:c7:41:
34:95:dc:77:32:d3:b6:68:5b:b0:87:5b:26:b2:40:
10:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:23:B4:6F:86:93:33:FB:E6:FC:44:A4:01:D1:89:83:EF:95:46:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba06575f-6a44-3531-a6b2-4aa363ec1398.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:123:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:d8:c6:c6:60:87:41:0c:2a:ba:d4:d8:c4:c3:35:18:c0:d4:
26:32:b8:28:66:04:cd:8c:0a:73:b4:be:7c:80:69:17:ed:b0:
99:01:4d:b5:a6:36:c3:bf:11:36:0a:86:a4:17:d7:81:72:7b:
45:60:91:93:8b:d5:62:a4:be:50:21:a1:fc:db:a2:62:bd:a9:
87:20:ad:fe:e2:2d:4d:75:2c:e8:44:55:aa:52:26:49:c3:aa:
44:04:4d:42:ea:30:6c:d3:37:4e:6a:25:66:14:36:a4:d1:6c:
f2:af:14:ba:94:41:88:4d:4b:10:dc:f0:83:a8:79:55:ba:17:
c4:3f:7f:37:aa:5c:d8:8a:00:83:1d:56:2c:d0:9d:4f:39:31:
33:11:70:93:1e:93:44:ad:1b:4a:4d:4f:e8:e1:22:c7:b2:92:
f2:7c:00:94:01:b7:56:94:48:ce:80:c7:c7:32:d8:99:4f:07:
03:9c:b6:74:08:66:eb:12:15:46:00:37:5f:7a:62:95:ab:cb:
b3:85:e9:6c:70:a8:61:15:b7:51:9d:87:1f:7c:64:74:07:8c:
c2:05:88:b5:48:53:eb:b2:89:82:f5:7a:7b:89:26:94:5e:45:
78:ad:a9:2b:4e:1d:6a:fc:2f:5f:24:38:d8:e1:3b:8c:0d:7b:
50:9d:75:7c
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkX3BJxi9PgU2YGA8gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk
MGViOTcxYjUtYWEzNy00NzA4LTljOTAtZmJmYmQwZDlkODY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwJoG61qhYp1X/pN7f5+UEDkGESPfwZfxuvh
kByPeyUw+VdfyYKiV5TqRQtqDlL+LO7s73Nyvd82kEqD/a34QHYmH/SFgAvQeghA
F1tUGq8623TRXrSMvGIiRWepAbj+fJhF6KPE9xv5XNAEBvwqdLlUolbc6ffEKMN+
PpvobuaimW/YMwGBOnM4meLVeuO7z1CINoBEzmWABlHhqycd5PU9J0rCmvIad+5p
gSAfGVriM5Lt5MMufXLxlpVYVuVWMTpadTVUE9HfYviWA1xyfGrMXLaA3p5YBr1a
ZEEA+0PDtGtA5Qnd848ydx3Dx0E0ldx3MtO2aFuwh1smskAQgwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFN8jtG+GkzP75vxEpAHRiYPvlUbRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmEwNjU3NWYtNmE0NC0z
NTMxLWE2YjItNGFhMzYzZWMxMzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCN2MbGYIdBDCq61NjEwzUYwNQmMrgoZgTNjApz
tL58gGkX7bCZAU21pjbDvxE2CoakF9eBcntFYJGTi9VipL5QIaH826JivamHIK3+
4i1NdSzoRFWqUiZJw6pEBE1C6jBs0zdOaiVmFDak0WzyrxS6lEGITUsQ3PCDqHlV
uhfEP383qlzYigCDHVYs0J1POTEzEXCTHpNErRtKTU/o4SLHspLyfACUAbdWlEjO
gMfHMtiZTwcDnLZ0CGbrEhVGADdfemKVq8uzhelscKhhFbdRnYcffGR0B4zCBYi1
SFPrsomC9Xp7iSaUXkV4rakrTh1q/C9fJDjY4TuMDXtQnXV8
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:01:06 2025 by rpki-client