Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e327dd02-2788-385a-abb3-3f7d57e3407c.roa
File: e327dd02-2788-385a-abb3-3f7d57e3407c.roa (raw, json)
Hash identifier: dLESJgaQikUXJw3zLw7twbARqs0xwj2PBJ5nrDmka+I=
Subject key identifier: 60:88:FD:7A:E6:1A:B4:D5:F3:A2:7A:BE:BA:C1:E4:0E:73:2C:AD:E5
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285849244E9428FDFC5AA00F916480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e327dd02-2788-385a-abb3-3f7d57e3407c.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 397210
IP address blocks: 2001:500:122::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:94:28:fd:fc:5a:a0:0f:91:64:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=b66a6771-8ff3-4f5b-99e1-830d0fca8a26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8b:18:73:5a:48:78:30:e1:66:0f:38:fb:e8:
1b:1f:90:ff:c5:f8:8e:0c:07:9d:00:ff:d5:c6:fe:
7a:50:43:f3:1d:da:8b:6e:8d:ce:16:c3:59:59:3c:
8d:89:a8:40:04:e5:4c:ec:f3:51:d3:6b:21:a0:bc:
de:64:50:d2:0c:de:27:be:32:0f:34:80:74:14:c2:
0e:11:f1:95:fd:4a:97:c8:2a:1c:69:41:18:98:ee:
13:d3:5e:fa:65:7d:9e:f4:6c:70:d6:28:53:e6:ee:
29:28:eb:0f:21:f3:03:d7:91:0c:dd:71:1b:29:24:
fd:1e:10:09:95:b4:0e:41:1b:15:90:c1:2a:7f:7f:
24:dd:ba:b5:e8:75:f8:fe:45:71:b3:d3:d6:c8:6a:
d9:c9:a6:27:6d:91:2c:58:6a:c1:47:d8:14:5f:ce:
43:b6:04:cf:5c:fa:73:72:a1:5e:a3:f7:69:e6:a9:
7f:25:56:29:7b:79:f7:61:93:ce:a5:8f:5d:8c:8e:
f5:b9:03:86:c0:57:91:9f:3d:51:36:9a:a2:f8:bc:
34:75:3b:f6:e4:a3:83:b1:55:2d:11:c6:c7:67:c3:
b4:bd:ad:d5:c0:16:b3:47:75:4e:66:d9:34:01:8d:
eb:b8:53:5a:98:b4:db:36:a8:2b:32:c8:49:51:76:
12:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:88:FD:7A:E6:1A:B4:D5:F3:A2:7A:BE:BA:C1:E4:0E:73:2C:AD:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e327dd02-2788-385a-abb3-3f7d57e3407c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:122:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:83:36:88:8b:7d:62:95:1c:cd:8f:19:fb:db:fd:58:31:f8:
c2:e1:1f:03:19:17:d1:70:7d:8e:5b:bf:1d:ee:f4:58:30:fb:
33:89:2f:b5:19:ec:c2:34:c0:bd:59:6e:c1:3e:2e:f1:39:99:
86:9f:c5:d6:1a:fc:b5:c0:ad:96:14:40:ec:47:62:79:d5:53:
af:d5:36:bc:79:77:78:11:62:f2:94:4c:9a:f8:15:6f:3e:06:
60:54:15:69:cc:66:bd:8a:7e:64:69:ac:8f:71:53:1a:fa:db:
77:09:72:cd:4e:76:4e:9e:00:6d:3f:e2:52:3d:a2:0e:a4:5e:
8d:f7:87:be:4b:d0:74:52:3e:dc:09:22:5b:d9:e4:59:45:15:
75:33:28:0e:0f:d1:bc:1b:2a:07:1c:c2:44:45:32:8e:db:d2:
3b:b7:7e:dc:9a:85:39:4b:76:09:b7:6f:82:10:61:e1:8f:b3:
6f:e0:f5:74:b6:2e:ce:b9:c8:78:0e:eb:5e:af:0e:a7:f3:3f:
8f:d0:fe:f4:86:6b:1c:8d:70:f8:3e:fa:7b:16:85:9b:69:b1:
25:93:cd:dd:b0:ac:08:a1:79:e6:c3:e7:11:f7:a6:37:ab:e5:
30:76:ad:92:8d:b7:97:ed:09:b0:be:31:58:ac:db:49:65:2d:
a0:24:e6:60
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkkTpQo/fxaoA+RZIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk
YjY2YTY3NzEtOGZmMy00ZjViLTk5ZTEtODMwZDBmY2E4YTI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IsYc1pIeDDhZg84++gbH5D/xfiODAedAP/V
xv56UEPzHdqLbo3OFsNZWTyNiahABOVM7PNR02shoLzeZFDSDN4nvjIPNIB0FMIO
EfGV/UqXyCocaUEYmO4T0176ZX2e9Gxw1ihT5u4pKOsPIfMD15EM3XEbKST9HhAJ
lbQOQRsVkMEqf38k3bq16HX4/kVxs9PWyGrZyaYnbZEsWGrBR9gUX85DtgTPXPpz
cqFeo/dp5ql/JVYpe3n3YZPOpY9djI71uQOGwFeRnz1RNpqi+Lw0dTv25KODsVUt
EcbHZ8O0va3VwBazR3VOZtk0AY3ruFNamLTbNqgrMshJUXYSHwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFGCI/XrmGrTV86J6vrrB5A5zLK3lMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTMyN2RkMDItMjc4OC0z
ODVhLWFiYjMtM2Y3ZDU3ZTM0MDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEi
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBngzaIi31ilRzNjxn72/1YMfjC4R8DGRfRcH2O
W78d7vRYMPsziS+1GezCNMC9WW7BPi7xOZmGn8XWGvy1wK2WFEDsR2J51VOv1Ta8
eXd4EWLylEya+BVvPgZgVBVpzGa9in5kaayPcVMa+tt3CXLNTnZOngBtP+JSPaIO
pF6N94e+S9B0Uj7cCSJb2eRZRRV1MygOD9G8GyoHHMJERTKO29I7t37cmoU5S3YJ
t2+CEGHhj7Nv4PV0ti7Ouch4Duterw6n8z+P0P70hmscjXD4Pvp7FoWbabElk83d
sKwIoXnmw+cR96Y3q+Uwdq2SjbeX7QmwvjFYrNtJZS2gJOZg
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:33:24 2025 by rpki-client