Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bc5abe21-5e96-34bc-bba0-8d23fb882335.roa
File: bc5abe21-5e96-34bc-bba0-8d23fb882335.roa (raw, json)
Hash identifier: nHJBd+eE/wkV6NQMgjpuvjUvRY8ExjXGe0W+7eIro1Q=
Subject key identifier: 0E:7D:D4:04:0D:31:F5:B7:24:2C:5C:C1:32:B0:8D:EE:BF:3A:29:4F
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848BA5632DC3B715D34CAA75D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bc5abe21-5e96-34bc-bba0-8d23fb882335.roa
Signing time: Fri 31 Jan 2025 14:00:51 +0000
ROA not before: Fri 31 Jan 2025 14:00:51 +0000
ROA not after: Thu 01 May 2025 13:00:51 +0000
asID: 396588
IP address blocks: 2001:500:134::53/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ba:56:32:dc:3b:71:5d:34:ca:a7:5d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 31 14:00:51 2025 GMT
Not After : May 1 13:00:51 2025 GMT
Subject: CN=0447269b-dd52-4751-8f20-4b1965ef594d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2c:6f:cb:27:fc:5d:b8:02:36:ae:5f:47:d7:
2d:16:0c:4a:d0:36:5a:4d:a0:3e:64:d6:c3:b4:80:
ad:83:a6:a6:91:95:34:ce:5f:5c:70:2b:30:3f:4a:
fa:53:30:55:a8:aa:a6:ea:d1:51:87:7b:c9:12:26:
33:d4:01:46:59:e0:f0:10:71:fc:e7:62:41:89:cf:
b6:ec:3e:b5:83:92:76:43:59:1c:67:72:5c:ab:23:
3c:e2:83:36:5c:31:7a:08:fc:eb:8f:6c:36:80:fe:
76:d8:10:36:db:5c:c8:6b:aa:9c:80:1b:ac:a9:d1:
36:be:66:b5:2b:cc:2e:52:8b:e4:f6:33:60:a4:7e:
3c:99:51:ac:79:77:65:e2:6b:40:b6:38:f2:ae:98:
c7:28:8b:f2:f8:57:29:ae:61:e1:3e:01:f6:e2:07:
70:de:e5:cb:e8:3d:f7:b0:a8:e6:df:23:36:39:c1:
63:1e:c9:f5:f7:b5:ae:f1:29:dd:1b:a2:73:66:81:
bf:b3:4c:fc:16:12:06:c4:4f:37:60:4c:8b:97:62:
ab:d4:46:50:03:f1:d5:54:cb:51:5c:e0:33:cf:a5:
1c:6b:0c:e2:a6:8e:3d:b3:e7:0f:a8:0d:1c:35:c7:
ab:a4:ab:27:c7:d2:04:97:3a:7a:0a:0f:37:0f:5f:
52:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:7D:D4:04:0D:31:F5:B7:24:2C:5C:C1:32:B0:8D:EE:BF:3A:29:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bc5abe21-5e96-34bc-bba0-8d23fb882335.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:134:0:0:0:0:53/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:a7:d2:ce:55:7e:da:8f:c6:08:dd:58:b0:03:de:6d:74:f2:
8c:29:2e:fe:79:d4:cb:b0:c0:b4:8b:8e:67:5a:7b:2b:b7:f5:
05:64:23:b8:d4:8d:72:d0:1a:82:5b:79:84:25:4a:b1:78:dc:
71:ed:7e:ce:5d:67:b8:be:e2:20:d7:4a:18:4c:6c:67:de:8f:
92:2d:80:2c:88:b3:fc:fe:97:df:63:55:52:6a:f1:6d:be:e7:
07:38:97:c5:f2:5d:60:67:5b:c6:3d:8c:d4:88:b4:8c:52:d7:
9e:23:4a:b1:0f:f5:05:4b:74:31:3a:72:70:8a:d8:90:0e:e3:
de:08:09:7c:8b:5f:af:aa:92:80:32:26:08:f2:2e:ea:93:be:
24:f1:9e:f4:9f:d0:30:cb:3a:64:ba:49:0a:cf:d3:68:87:c0:
bd:85:4c:d7:ac:c9:79:b5:b1:3a:07:cd:1d:02:51:ab:ba:dc:
af:4b:17:64:98:2c:93:b1:cd:99:61:24:51:39:01:1e:b2:30:
96:6e:7e:d9:d6:d1:cd:c3:bd:4e:22:26:8e:cf:7b:26:c6:c7:
20:ed:48:29:14:49:03:42:06:30:49:79:c8:60:4e:2a:c9:0c:
af:74:24:f7:46:7b:5d:01:4e:c5:71:0e:7a:74:e4:b1:65:a9:
f5:e0:ee:ce
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEi6VjLcO3FdNMqnXYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDEzMTE0MDA1MVoXDTI1MDUwMTEzMDA1MVowLzEtMCsGA1UEAxMk
MDQ0NzI2OWItZGQ1Mi00NzUxLThmMjAtNGIxOTY1ZWY1OTRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCxvyyf8XbgCNq5fR9ctFgxK0DZaTaA+ZNbD
tICtg6amkZU0zl9ccCswP0r6UzBVqKqm6tFRh3vJEiYz1AFGWeDwEHH852JBic+2
7D61g5J2Q1kcZ3JcqyM84oM2XDF6CPzrj2w2gP522BA221zIa6qcgBusqdE2vma1
K8wuUovk9jNgpH48mVGseXdl4mtAtjjyrpjHKIvy+FcprmHhPgH24gdw3uXL6D33
sKjm3yM2OcFjHsn197Wu8SndG6JzZoG/s0z8FhIGxE83YEyLl2Kr1EZQA/HVVMtR
XOAzz6Ucawzipo49s+cPqA0cNcerpKsnx9IElzp6Cg83D19SAwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFA591AQNMfW3JCxcwTKwje6/OilPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmM1YWJlMjEtNWU5Ni0z
NGJjLWJiYTAtOGQyM2ZiODgyMzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE0
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCgp9LOVX7aj8YI3ViwA95tdPKMKS7+edTLsMC0
i45nWnsrt/UFZCO41I1y0BqCW3mEJUqxeNxx7X7OXWe4vuIg10oYTGxn3o+SLYAs
iLP8/pffY1VSavFtvucHOJfF8l1gZ1vGPYzUiLSMUteeI0qxD/UFS3QxOnJwitiQ
DuPeCAl8i1+vqpKAMiYI8i7qk74k8Z70n9AwyzpkukkKz9Noh8C9hUzXrMl5tbE6
B80dAlGrutyvSxdkmCyTsc2ZYSRROQEesjCWbn7Z1tHNw71OIiaOz3smxscg7Ugp
FEkDQgYwSXnIYE4qyQyvdCT3RntdAU7FcQ56dOSxZan14O7O
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:23:15 2025 by rpki-client