Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d70cacf6-c17b-3d44-b448-aa2be3840519.roa
File: d70cacf6-c17b-3d44-b448-aa2be3840519.roa (raw, json)
Hash identifier: jrsoHo3t3e5Q665lbrlAii4xNDFcAuicF/Ylm8piwD4=
Subject key identifier: B2:8E:1B:CF:8D:DA:08:30:8D:CF:1D:23:84:42:61:DD:5D:E4:3C:3D
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848BA563BCE982403BC6BBBDD00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d70cacf6-c17b-3d44-b448-aa2be3840519.roa
Signing time: Fri 31 Jan 2025 14:00:51 +0000
ROA not before: Fri 31 Jan 2025 14:00:51 +0000
ROA not after: Thu 01 May 2025 13:00:51 +0000
asID: 396595
IP address blocks: 2001:500:134::53/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ba:56:3b:ce:98:24:03:bc:6b:bb:dd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 31 14:00:51 2025 GMT
Not After : May 1 13:00:51 2025 GMT
Subject: CN=c4684e34-d0f2-4c0a-beed-cfed0f3bd08f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b8:71:09:90:27:62:69:39:f1:be:41:65:e7:
24:fa:e8:eb:53:97:f7:51:19:9c:2c:4b:1c:e5:99:
68:5e:64:06:a9:b0:cc:de:a5:03:db:73:5e:cb:b7:
7a:d5:96:b6:7b:ef:3f:54:ad:7d:4b:e5:86:59:b0:
0b:d4:14:02:e2:36:9b:11:3c:33:42:10:9c:1c:73:
9c:08:e7:56:a6:25:01:ea:89:e9:b9:e8:91:ff:b8:
45:30:b4:fc:38:60:5a:0b:23:41:d9:a3:da:ae:a2:
95:d0:8f:6f:1d:bd:f2:2a:d2:3d:e1:54:48:b4:1c:
15:63:2d:d0:e7:bf:ea:d8:f3:92:a4:50:6f:c7:9e:
48:45:39:8b:fe:e3:a8:5a:70:68:c9:e4:1c:8a:7f:
64:f1:e8:f9:91:b6:af:33:c6:22:89:36:e3:c8:a6:
16:31:07:8d:3a:17:b0:ab:89:d3:d8:6a:11:47:fc:
d6:11:ed:a8:d4:49:ef:37:7c:b9:ec:63:fb:8d:44:
4b:79:77:d1:b8:5e:09:68:fc:7a:57:31:5c:fa:f2:
8c:c4:1e:a1:32:88:73:19:62:87:0e:29:0d:d8:5d:
e9:81:9e:bd:bd:2e:3b:56:9d:f0:e1:26:8d:15:d6:
d7:3b:59:4a:30:99:a4:c3:21:3d:a9:2f:d5:03:af:
22:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:8E:1B:CF:8D:DA:08:30:8D:CF:1D:23:84:42:61:DD:5D:E4:3C:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d70cacf6-c17b-3d44-b448-aa2be3840519.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:134:0:0:0:0:53/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:84:0c:0b:bd:86:29:bf:64:5e:a0:2e:3c:f0:29:56:21:99:
8e:af:93:04:33:96:46:2d:8d:bc:9f:10:46:d1:55:bb:45:b7:
ba:41:2d:43:bb:ca:00:ef:3a:c3:dd:27:4d:0c:ba:3c:fb:4a:
6f:10:b0:1c:5e:ed:6f:86:3d:24:3a:aa:e4:fa:51:b1:e6:62:
47:2d:4d:a6:f2:92:ae:1b:16:b0:6b:9d:b2:c3:2f:e7:e1:ca:
4a:bf:86:c2:9c:8a:0b:6f:86:17:9e:58:0c:70:da:74:e8:ea:
6f:f6:fb:45:b9:1a:b3:b4:71:26:3d:f7:57:16:1e:1d:01:e3:
4e:6f:ba:8a:0e:18:f0:37:4f:a3:4e:d7:f4:5e:66:0d:26:fe:
5c:0c:85:28:41:2e:63:8a:45:ce:c9:aa:c7:70:cf:24:94:fc:
44:a9:6e:4a:ad:3e:70:70:4e:2b:01:4c:59:34:5e:73:8f:05:
c6:ea:ad:00:f3:e2:75:97:1e:6e:22:ba:c9:da:51:36:5d:c6:
d1:9c:b8:fe:89:ec:87:44:4a:10:3f:75:12:eb:49:06:c1:2f:
f5:cc:e9:bf:62:02:c9:4a:bc:43:cc:cb:9f:53:b4:c4:a5:3b:
5f:64:6a:d5:72:11:b9:ad:d8:c9:0f:88:e7:fa:c7:63:1e:be:
a9:6a:b5:00
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEi6VjvOmCQDvGu73QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDEzMTE0MDA1MVoXDTI1MDUwMTEzMDA1MVowLzEtMCsGA1UEAxMk
YzQ2ODRlMzQtZDBmMi00YzBhLWJlZWQtY2ZlZDBmM2JkMDhmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7hxCZAnYmk58b5BZeck+ujrU5f3URmcLEsc
5ZloXmQGqbDM3qUD23Ney7d61Za2e+8/VK19S+WGWbAL1BQC4jabETwzQhCcHHOc
COdWpiUB6onpueiR/7hFMLT8OGBaCyNB2aParqKV0I9vHb3yKtI94VRItBwVYy3Q
57/q2POSpFBvx55IRTmL/uOoWnBoyeQcin9k8ej5kbavM8YiiTbjyKYWMQeNOhew
q4nT2GoRR/zWEe2o1EnvN3y57GP7jURLeXfRuF4JaPx6VzFc+vKMxB6hMohzGWKH
DikN2F3pgZ69vS47Vp3w4SaNFdbXO1lKMJmkwyE9qS/VA68i5QIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFLKOG8+N2ggwjc8dI4RCYd1d5Dw9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDcwY2FjZjYtYzE3Yi0z
ZDQ0LWI0NDgtYWEyYmUzODQwNTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE0
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCWhAwLvYYpv2ReoC488ClWIZmOr5MEM5ZGLY28
nxBG0VW7Rbe6QS1Du8oA7zrD3SdNDLo8+0pvELAcXu1vhj0kOqrk+lGx5mJHLU2m
8pKuGxawa52ywy/n4cpKv4bCnIoLb4YXnlgMcNp06Opv9vtFuRqztHEmPfdXFh4d
AeNOb7qKDhjwN0+jTtf0XmYNJv5cDIUoQS5jikXOyarHcM8klPxEqW5KrT5wcE4r
AUxZNF5zjwXG6q0A8+J1lx5uIrrJ2lE2XcbRnLj+ieyHREoQP3US60kGwS/1zOm/
YgLJSrxDzMufU7TEpTtfZGrVchG5rdjJD4jn+sdjHr6parUA
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:20:17 2025 by rpki-client