Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fbae6be9-24ba-3167-8a10-7b909a37d6da.roa
File: fbae6be9-24ba-3167-8a10-7b909a37d6da.roa (raw, json)
Hash identifier: PwClZC7j8K5W3jh73fg3pNNyL5DMJDficgyFCK+/Lgg=
Subject key identifier: B6:1B:B4:AE:5E:3A:B8:A0:D9:D2:C6:0F:8C:5D:23:FE:D3:44:E6:59
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848BA5633AE8BD3B8F01CDA16C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fbae6be9-24ba-3167-8a10-7b909a37d6da.roa
Signing time: Fri 31 Jan 2025 14:00:51 +0000
ROA not before: Fri 31 Jan 2025 14:00:51 +0000
ROA not after: Thu 01 May 2025 13:00:51 +0000
asID: 396614
IP address blocks: 2001:500:134::53/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ba:56:33:ae:8b:d3:b8:f0:1c:da:16:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 31 14:00:51 2025 GMT
Not After : May 1 13:00:51 2025 GMT
Subject: CN=37d8af41-69ec-43d0-b8e7-002869a0ae02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ac:4a:7a:d3:1f:4f:ea:fc:7d:6e:c1:e6:8e:
2a:df:7c:ed:cd:4b:b5:27:65:2b:06:ca:3a:8b:dd:
34:f0:f2:54:d6:1a:9c:cb:08:ca:ac:c3:1c:7f:f7:
22:79:7e:38:94:3f:2f:2b:06:e0:be:57:2f:84:e2:
5f:8e:76:3f:1c:e1:62:54:5e:84:c9:aa:cf:18:3f:
9a:c3:3c:21:20:40:bf:c5:0c:15:d8:a1:78:1f:d3:
df:be:39:7e:11:31:e5:f4:17:0d:54:30:07:f1:b3:
10:ed:53:f3:f5:f3:37:95:14:96:a5:6b:0d:e7:64:
56:8d:84:8c:a9:3f:3b:96:17:3f:26:0c:ad:59:7b:
22:52:80:8f:c2:3d:9a:b2:e4:d7:3b:77:8c:1d:cf:
a8:d0:0e:fc:e2:f1:54:6a:5e:e2:35:dc:bd:20:b3:
4a:89:df:e7:0f:8b:cd:9f:86:8a:13:e7:8b:c0:e7:
e5:a1:95:16:c6:24:b2:e9:08:b3:ce:8f:d4:58:36:
bf:4b:2d:d5:4a:39:9e:8c:45:1d:7a:d5:a3:a8:04:
c4:27:19:11:5e:2d:f7:1c:e8:bf:bf:7d:85:af:7d:
46:eb:e9:62:7b:12:8b:b4:ea:f5:14:68:63:32:1d:
44:17:c4:57:78:0a:b3:51:ac:ef:91:2c:00:64:22:
f1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:1B:B4:AE:5E:3A:B8:A0:D9:D2:C6:0F:8C:5D:23:FE:D3:44:E6:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fbae6be9-24ba-3167-8a10-7b909a37d6da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:134:0:0:0:0:53/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:f0:c4:de:e6:b7:cf:c0:be:1a:01:9e:4f:50:e6:36:f0:ea:
6b:1b:5a:87:54:5d:5e:99:61:a2:0a:aa:e0:de:88:ae:0b:7c:
fe:60:ab:28:e1:ce:3f:3a:af:32:0c:41:88:eb:38:07:2f:e2:
a7:ec:fe:31:8c:2e:c1:b5:73:36:77:c2:c6:0d:47:a8:94:d9:
3d:8b:1e:08:35:64:dc:43:b5:37:52:e3:4c:9c:dc:ae:26:5b:
ed:d2:ed:1d:2a:44:ff:0d:10:59:4b:83:37:1a:6e:5f:21:8c:
95:10:53:0b:9b:ae:37:ad:6c:61:09:23:42:63:a5:7f:e8:dd:
fb:07:e7:60:6b:0c:f1:34:d3:dc:45:63:90:4d:20:2a:29:61:
2a:e6:95:cd:64:38:74:1d:d1:ae:bf:a2:63:25:fe:0f:b0:ea:
28:ca:b3:c9:6a:2b:b4:5a:64:41:7f:af:31:db:9c:9c:d5:5c:
9d:d5:0f:7d:97:6c:87:19:04:f8:56:b1:ea:a5:5f:57:dd:f2:
67:dc:ee:b0:bd:74:e3:02:1c:1e:ee:15:c7:8b:a6:51:4f:f3:
04:81:67:03:33:8d:19:a4:84:3b:53:b9:dd:b9:d8:e9:32:19:
cf:79:68:0c:29:47:3f:70:5d:4e:3b:d2:5d:1a:f5:74:68:10:
d6:24:cf:a6
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEi6VjOui9O48BzaFsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDEzMTE0MDA1MVoXDTI1MDUwMTEzMDA1MVowLzEtMCsGA1UEAxMk
MzdkOGFmNDEtNjllYy00M2QwLWI4ZTctMDAyODY5YTBhZTAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqxKetMfT+r8fW7B5o4q33ztzUu1J2UrBso6
i9008PJU1hqcywjKrMMcf/cieX44lD8vKwbgvlcvhOJfjnY/HOFiVF6EyarPGD+a
wzwhIEC/xQwV2KF4H9Pfvjl+ETHl9BcNVDAH8bMQ7VPz9fM3lRSWpWsN52RWjYSM
qT87lhc/JgytWXsiUoCPwj2asuTXO3eMHc+o0A784vFUal7iNdy9ILNKid/nD4vN
n4aKE+eLwOfloZUWxiSy6Qizzo/UWDa/Sy3VSjmejEUdetWjqATEJxkRXi33HOi/
v32Fr31G6+liexKLtOr1FGhjMh1EF8RXeAqzUazvkSwAZCLxrwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFLYbtK5eOrig2dLGD4xdI/7TROZZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmJhZTZiZTktMjRiYS0z
MTY3LThhMTAtN2I5MDlhMzdkNmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE0
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBw8MTe5rfPwL4aAZ5PUOY28OprG1qHVF1emWGi
Cqrg3oiuC3z+YKso4c4/Oq8yDEGI6zgHL+Kn7P4xjC7BtXM2d8LGDUeolNk9ix4I
NWTcQ7U3UuNMnNyuJlvt0u0dKkT/DRBZS4M3Gm5fIYyVEFMLm643rWxhCSNCY6V/
6N37B+dgawzxNNPcRWOQTSAqKWEq5pXNZDh0HdGuv6JjJf4PsOooyrPJaiu0WmRB
f68x25yc1Vyd1Q99l2yHGQT4VrHqpV9X3fJn3O6wvXTjAhwe7hXHi6ZRT/MEgWcD
M40ZpIQ7U7ndudjpMhnPeWgMKUc/cF1OO9JdGvV0aBDWJM+m
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:37:48 2025 by rpki-client