Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/04dac0dd-6a5c-3fe0-92bc-37319c7ab029.roa
File: 04dac0dd-6a5c-3fe0-92bc-37319c7ab029.roa (raw, json)
Hash identifier: i8b069vlKNudHO0LkguuozZDZNZkSuZ5JL6a/asJvtk=
Subject key identifier: 90:19:5D:48:68:25:52:9E:10:E3:7D:30:F8:81:39:8B:07:7E:5F:3F
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285849244E94100D3F2DB304704AC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/04dac0dd-6a5c-3fe0-92bc-37319c7ab029.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 396562
IP address blocks: 2001:500:122::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:94:10:0d:3f:2d:b3:04:70:4a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=ef3a3207-81b8-4b1b-b325-293406b3d0a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:1e:ae:b8:a6:ed:28:e9:86:24:d4:bc:c3:3b:
99:3d:ea:0c:43:d2:72:87:14:ff:e0:ad:ff:98:2b:
07:26:52:b4:80:a0:66:18:b7:86:63:6a:df:0d:7e:
fd:7c:ab:32:98:75:b0:1c:2a:3d:83:59:07:98:04:
85:9f:05:f0:70:db:e2:0a:72:04:b4:47:2f:1c:19:
c3:a7:3f:a1:73:7f:5f:86:2b:c5:b4:f2:75:df:29:
58:5c:5e:08:2b:f5:48:60:13:16:c9:d2:f1:76:38:
ea:ba:22:7b:16:90:72:7e:02:59:27:0f:08:16:53:
4d:86:4a:a0:8c:41:18:e2:53:a0:13:17:23:75:10:
ce:68:ff:68:09:34:4f:ef:8b:2b:cb:1f:d2:b9:ba:
f5:0d:81:7e:da:8b:c2:ae:b0:07:a8:78:27:db:3b:
ca:45:e4:be:57:17:13:29:7b:f1:ea:67:ef:bd:7d:
d9:4b:b9:e6:9b:07:1f:0d:45:f9:41:90:f1:f2:55:
ed:3d:ef:bc:85:8c:21:d5:a3:01:42:f9:16:86:87:
6f:18:0d:e6:f4:78:16:01:85:68:fd:b5:07:43:f2:
cd:a4:8f:2f:a5:67:53:cc:56:28:59:b7:e4:86:b8:
96:00:96:d6:b6:a6:01:da:9a:29:77:30:14:c3:c0:
35:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:19:5D:48:68:25:52:9E:10:E3:7D:30:F8:81:39:8B:07:7E:5F:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/04dac0dd-6a5c-3fe0-92bc-37319c7ab029.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:122:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
be:21:e0:c1:d1:4a:44:71:f9:4a:40:56:b1:67:8a:6b:76:a4:
4d:2b:b2:ec:5b:e4:39:8b:c8:c8:a5:0c:b4:6b:01:d7:5e:21:
c6:2f:21:cb:28:35:5c:1e:b1:da:09:e2:78:48:98:ba:03:bb:
ca:ee:91:5e:a1:3d:e5:f0:fb:1a:37:59:c6:34:ae:26:b2:57:
86:0a:70:26:e7:7f:b1:ec:04:0f:96:9f:54:e3:ef:13:8c:8c:
d7:57:89:02:d8:59:b2:f4:03:29:67:69:f8:c4:37:a8:ec:95:
91:9d:79:f0:33:9e:64:9a:d1:c9:0d:83:f1:c6:af:04:cd:e3:
f0:cf:da:36:15:22:02:53:48:a9:2e:f9:22:3a:ff:ed:cc:d4:
5d:aa:a2:9b:5b:f1:16:72:19:6c:19:1b:40:56:01:5e:b7:40:
a6:d9:0c:58:7f:fd:d6:22:01:17:e6:f6:49:f4:8f:69:ba:43:
f8:59:e1:17:a9:e4:06:01:33:de:dc:12:59:89:09:cb:91:7d:
d1:54:bf:05:cb:12:14:87:c6:de:58:bd:fb:5c:b7:d7:e0:46:
31:82:82:06:97:cc:6b:bd:06:b2:52:df:28:b3:21:14:ab:d7:
31:6d:87:b7:24:69:f6:12:83:85:d3:e2:04:e6:bd:56:14:b2:
57:0b:99:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:52:41 2025 by rpki-client