Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f8336b37-3dbe-3d66-a7a2-e5e05248dedf.roa
File: f8336b37-3dbe-3d66-a7a2-e5e05248dedf.roa (raw, json)
Hash identifier: gF82ClefstvBdQZe+44gmv9nEdC5RMr1oybsMrr7i5k=
Subject key identifier: 4C:4F:AB:40:ED:15:3E:3A:EC:11:32:F9:A5:89:5E:D0:0C:2B:68:9F
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848A3F5820DC504F07959C17900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f8336b37-3dbe-3d66-a7a2-e5e05248dedf.roa
Signing time: Thu 23 Jan 2025 13:38:19 +0000
ROA not before: Thu 23 Jan 2025 13:38:19 +0000
ROA not after: Wed 23 Apr 2025 12:38:19 +0000
asID: 396575
IP address blocks: 2001:501:b1f9::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a3:f5:82:0d:c5:04:f0:79:59:c1:79:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 23 13:38:19 2025 GMT
Not After : Apr 23 12:38:19 2025 GMT
Subject: CN=58b8edd2-853c-4f77-b92d-415e4c0ff9a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:db:b4:59:50:fa:a3:67:b7:8f:1b:e8:ea:2e:
a6:bf:33:f6:24:d5:ea:29:bf:a9:0b:8b:64:e6:f3:
45:42:ac:81:0d:de:ce:4f:b3:a1:f1:44:e5:28:7e:
f4:22:47:30:2f:01:c9:9d:c8:f3:a0:f0:d1:b9:85:
cb:26:c2:a1:cf:da:cd:5d:49:f3:87:23:f1:d9:b6:
05:7c:36:a7:1a:6e:8c:76:3a:61:be:63:fb:ac:89:
97:5a:6c:77:dd:b4:c8:4d:be:c1:b4:e5:5f:e2:c2:
c8:b6:6b:4c:3f:d7:df:84:82:1a:c7:01:fb:54:72:
db:ab:0b:18:3d:e9:25:77:91:35:e2:ce:fb:a1:8d:
9c:ae:af:85:23:3d:d4:c1:7a:77:1c:4b:5a:81:7d:
80:12:5e:35:5b:5a:16:f8:69:0b:7e:2a:6f:42:51:
15:31:87:fe:2f:b9:c2:d4:65:dd:27:0f:55:c8:d5:
5d:36:b6:82:22:b9:b6:50:66:e6:4f:31:3d:86:09:
4d:b7:c4:b5:47:57:42:12:2f:4d:1a:cb:f4:8e:87:
97:f3:c6:15:ac:45:79:01:a6:ae:8c:3b:45:a4:91:
c0:53:aa:54:0f:ea:db:e8:a6:c2:5c:0f:2d:83:8f:
ba:8c:e6:0e:fe:90:2f:23:1c:8f:ad:9a:42:a8:14:
06:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:4F:AB:40:ED:15:3E:3A:EC:11:32:F9:A5:89:5E:D0:0C:2B:68:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f8336b37-3dbe-3d66-a7a2-e5e05248dedf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:501:b1f9:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:c2:52:7b:14:d9:38:d3:84:6f:80:e9:16:bd:c2:75:58:83:
ad:40:65:5a:5b:01:db:de:28:c4:c4:1a:11:94:e4:83:fc:44:
34:1a:83:ca:13:c5:bd:70:33:ac:27:75:b7:e1:6c:b9:80:d0:
ec:ec:0c:18:79:1a:69:00:ba:05:b1:a0:72:0d:c9:67:f5:0f:
a1:91:06:48:c0:91:99:39:ce:dc:44:c2:e5:3e:fc:54:2d:92:
86:09:f1:6e:c0:5c:49:d2:01:bd:32:4b:7d:99:68:31:81:66:
d3:be:0b:85:7a:29:62:93:5f:13:7b:9b:e2:1d:c7:54:57:35:
be:9b:c0:73:4f:03:a4:81:93:05:a3:1a:d3:13:60:cf:25:56:
c0:e8:29:45:3b:26:b9:6c:26:57:9d:b8:43:e5:95:60:cd:e9:
59:63:13:6c:ba:af:4e:e3:41:73:ef:e4:e2:89:aa:5d:d0:9d:
fc:1a:f5:06:ff:58:2e:5c:59:10:7d:9f:40:2a:d3:26:b8:96:
2a:28:2d:bb:e7:bc:90:2c:8f:68:11:04:18:1f:df:3d:2d:52:
ba:0f:53:be:32:ca:97:13:c3:28:e9:6c:93:e4:b9:77:fe:46:
ac:cb:a8:e8:8b:b8:3b:f1:a0:e0:00:0b:19:81:e2:71:2f:1a:
68:91:fd:28
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEij9YINxQTweVnBeQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDEyMzEzMzgxOVoXDTI1MDQyMzEyMzgxOVowLzEtMCsGA1UEAxMk
NThiOGVkZDItODUzYy00Zjc3LWI5MmQtNDE1ZTRjMGZmOWEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndu0WVD6o2e3jxvo6i6mvzP2JNXqKb+pC4tk
5vNFQqyBDd7OT7Oh8UTlKH70IkcwLwHJncjzoPDRuYXLJsKhz9rNXUnzhyPx2bYF
fDanGm6MdjphvmP7rImXWmx33bTITb7BtOVf4sLItmtMP9ffhIIaxwH7VHLbqwsY
Pekld5E14s77oY2crq+FIz3UwXp3HEtagX2AEl41W1oW+GkLfipvQlEVMYf+L7nC
1GXdJw9VyNVdNraCIrm2UGbmTzE9hglNt8S1R1dCEi9NGsv0joeX88YVrEV5Aaau
jDtFpJHAU6pUD+rb6KbCXA8tg4+6jOYO/pAvIxyPrZpCqBQGhwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFExPq0DtFT467BEy+aWJXtAMK2ifMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjgzMzZiMzctM2RiZS0z
ZDY2LWE3YTItZTVlMDUyNDhkZWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAbH5
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCWwlJ7FNk404RvgOkWvcJ1WIOtQGVaWwHb3ijE
xBoRlOSD/EQ0GoPKE8W9cDOsJ3W34Wy5gNDs7AwYeRppALoFsaByDcln9Q+hkQZI
wJGZOc7cRMLlPvxULZKGCfFuwFxJ0gG9Mkt9mWgxgWbTvguFeilik18Te5viHcdU
VzW+m8BzTwOkgZMFoxrTE2DPJVbA6ClFOya5bCZXnbhD5ZVgzelZYxNsuq9O40Fz
7+Tiiapd0J38GvUG/1guXFkQfZ9AKtMmuJYqKC2757yQLI9oEQQYH989LVK6D1O+
MsqXE8Mo6WyT5Ll3/kasy6joi7g78aDgAAsZgeJxLxpokf0o
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:49:41 2025 by rpki-client