Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef2d717b-3f29-398d-a922-b355003a77ff.roa
File: ef2d717b-3f29-398d-a922-b355003a77ff.roa (raw, json)
Hash identifier: nwjSjxQEy+eO7KzK4zVXIvuM8f9An2gEiN8S5pFl2pk=
Subject key identifier: 53:42:1A:84:16:D5:1F:66:3B:DA:DA:E9:AA:9C:BE:FB:D1:1E:0F:4C
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848BFEB9F02A208F61332BA9180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef2d717b-3f29-398d-a922-b355003a77ff.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 27544
IP address blocks: 2001:500:133::53/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:9f:02:a2:08:f6:13:32:ba:91:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=3ffa2c70-cc19-4163-bb70-a0ef4661bea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9f:42:4b:fa:ed:96:fa:d6:c0:dd:b3:61:77:
8e:c7:5b:1b:9b:5c:2f:aa:f4:b1:41:13:0a:35:25:
2b:98:5f:4f:c4:ff:0d:87:76:6a:f4:60:26:d6:bb:
a5:ff:38:1c:b1:dc:ca:6b:ce:a3:17:58:bb:16:8b:
0a:3f:92:c7:6f:1f:96:86:46:71:d5:3e:dc:1e:c5:
91:4e:25:bf:a3:1a:3d:78:67:09:fe:62:a9:48:56:
1e:9c:6e:5e:34:24:4a:b5:63:0c:9b:d6:38:f9:2e:
39:b2:d8:6a:e9:c5:b2:d1:b5:14:db:cb:31:41:47:
cf:24:1b:4c:39:13:5b:15:2d:53:7e:af:29:34:4c:
7f:a9:c1:87:a3:3a:b8:93:08:fe:ab:af:da:28:36:
65:23:20:94:74:53:ad:59:81:09:20:b2:e6:31:75:
32:85:26:df:12:be:34:16:52:87:8d:cf:75:4c:1d:
74:84:29:91:ce:a3:69:78:20:f8:35:0c:8d:3d:35:
5f:f3:d0:be:cf:ba:72:39:9a:4b:dc:49:0e:bd:76:
5d:6a:57:da:5a:e5:97:0e:9d:18:39:77:94:19:97:
20:bf:fd:49:04:9c:5f:1c:1b:75:b8:b4:51:aa:fe:
f6:9e:d5:fe:33:0f:26:09:cd:cc:bb:c3:80:a7:71:
8e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:42:1A:84:16:D5:1F:66:3B:DA:DA:E9:AA:9C:BE:FB:D1:1E:0F:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef2d717b-3f29-398d-a922-b355003a77ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:133:0:0:0:0:53/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:84:0a:d4:7e:85:9b:ee:74:25:22:da:6f:d8:c8:e1:47:48:
d0:1a:ae:37:e6:6d:9d:2b:43:cb:51:56:f0:05:c2:d0:2a:da:
5d:41:38:ff:c2:a8:d0:16:37:33:7f:bd:6d:c2:eb:c0:54:9f:
ad:ed:f2:f1:14:94:13:09:a9:f3:06:fe:f8:6d:30:7d:9a:28:
27:95:2b:c4:9f:9b:46:72:f9:20:c4:38:31:a7:3e:57:fc:c6:
1c:2b:36:14:d8:48:c9:fb:db:10:a0:a9:85:bb:f5:ff:92:e7:
ac:ed:2a:9b:9e:2d:59:6b:3b:74:f3:67:f2:18:af:ff:86:f2:
3b:36:b1:e7:fc:bf:e6:cc:31:08:b1:3f:44:e8:86:9f:ec:71:
12:79:a0:d9:ae:1d:4c:e2:bb:94:c6:57:e0:26:97:e3:7d:a9:
0f:56:08:71:68:c6:fb:7a:24:28:1b:7c:2b:a1:f1:33:37:16:
65:9f:16:d2:2b:33:b2:c0:05:35:ae:58:4b:59:4b:21:39:f8:
f8:d9:29:17:7e:95:54:6c:e2:67:5d:57:89:cf:29:ac:42:06:
1a:ce:53:b2:e9:8a:4d:23:8e:81:09:a7:a8:b2:fc:8f:44:57:
ad:7c:b0:32:64:f8:7a:12:36:46:94:ad:1f:2e:d6:37:fc:0e:
8c:d2:ac:c0
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEi/658Cogj2EzK6kYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk
M2ZmYTJjNzAtY2MxOS00MTYzLWJiNzAtYTBlZjQ2NjFiZWE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZ9CS/rtlvrWwN2zYXeOx1sbm1wvqvSxQRMK
NSUrmF9PxP8Nh3Zq9GAm1rul/zgcsdzKa86jF1i7FosKP5LHbx+WhkZx1T7cHsWR
TiW/oxo9eGcJ/mKpSFYenG5eNCRKtWMMm9Y4+S45sthq6cWy0bUU28sxQUfPJBtM
ORNbFS1Tfq8pNEx/qcGHozq4kwj+q6/aKDZlIyCUdFOtWYEJILLmMXUyhSbfEr40
FlKHjc91TB10hCmRzqNpeCD4NQyNPTVf89C+z7pyOZpL3EkOvXZdalfaWuWXDp0Y
OXeUGZcgv/1JBJxfHBt1uLRRqv72ntX+Mw8mCc3Mu8OAp3GOywIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFFNCGoQW1R9mO9ra6aqcvvvRHg9MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZWYyZDcxN2ItM2YyOS0z
OThkLWE5MjItYjM1NTAwM2E3N2ZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAhhArUfoWb7nQlItpv2MjhR0jQGq435m2dK0PL
UVbwBcLQKtpdQTj/wqjQFjczf71twuvAVJ+t7fLxFJQTCanzBv74bTB9mignlSvE
n5tGcvkgxDgxpz5X/MYcKzYU2EjJ+9sQoKmFu/X/kues7Sqbni1Zazt082fyGK//
hvI7NrHn/L/mzDEIsT9E6Iaf7HESeaDZrh1M4ruUxlfgJpfjfakPVghxaMb7eiQo
G3wrofEzNxZlnxbSKzOywAU1rlhLWUshOfj42SkXfpVUbOJnXVeJzymsQgYazlOy
6YpNI46BCaeosvyPRFetfLAyZPh6EjZGlK0fLtY3/A6M0qzA
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:23:47 2025 by rpki-client