Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0aca8329-9d2e-31d3-ae78-9f504aea5310.roa
File: 0aca8329-9d2e-31d3-ae78-9f504aea5310.roa (raw, json)
Hash identifier: VlswuCqjqAFnv+NgJmnZ+gUqBpm+qFEgrbO46KNJsI4=
Subject key identifier: 68:A7:F4:8D:53:04:ED:5B:8A:B4:70:D7:B2:E2:E9:5B:4E:FD:03:B7
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584929E3D866EDF0D0D26D3E7880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0aca8329-9d2e-31d3-ae78-9f504aea5310.roa
Signing time: Wed 12 Mar 2025 13:00:53 +0000
ROA not before: Wed 12 Mar 2025 13:00:53 +0000
ROA not after: Tue 10 Jun 2025 13:00:53 +0000
asID: 396569
IP address blocks: 2001:500:121::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:29:e3:d8:66:ed:f0:d0:d2:6d:3e:78:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 12 13:00:53 2025 GMT
Not After : Jun 10 13:00:53 2025 GMT
Subject: CN=134a670a-d61c-40ca-95e6-e51ab8b3fb53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:76:e8:82:55:ca:6b:c7:ca:3e:33:0f:e3:dd:
50:be:13:fd:a2:29:d6:fd:62:d4:41:91:aa:f7:a7:
e2:d3:71:70:de:c0:a2:84:cf:b5:17:0e:9c:52:a9:
90:ea:98:b5:db:c9:db:b4:4f:d8:9e:98:f2:0f:59:
e4:a9:1c:73:45:b5:0a:8c:90:1a:6c:ec:76:b9:c3:
d1:94:ee:d2:f0:9f:3e:b9:45:76:39:f7:a1:9d:d9:
90:e6:e3:02:f7:fa:5d:85:72:6e:36:29:e2:59:41:
20:d6:11:62:1c:3a:21:e5:5d:dd:4e:0d:3c:83:6c:
b4:7d:81:e8:cc:6a:e6:69:41:31:fc:41:11:bb:17:
d6:f9:22:96:f0:97:38:22:90:46:7d:ff:9c:b7:e7:
40:b3:d7:5f:9e:8a:71:7d:1a:7f:b5:49:de:df:a7:
5b:f3:60:ea:25:56:12:49:d4:75:54:a1:1d:b0:e7:
22:c8:aa:b2:b8:58:03:82:21:f1:07:0f:e8:9d:df:
9f:ae:32:45:13:39:4f:9c:7b:26:8e:da:64:63:a4:
be:9e:aa:7b:ff:e7:49:8d:a9:80:00:44:18:06:97:
8d:4c:9e:9e:d5:57:35:95:9d:78:41:12:9e:af:c6:
10:6e:21:64:8a:4c:16:bf:c7:4b:e5:3b:f9:41:13:
74:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A7:F4:8D:53:04:ED:5B:8A:B4:70:D7:B2:E2:E9:5B:4E:FD:03:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0aca8329-9d2e-31d3-ae78-9f504aea5310.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:121:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:b9:59:2a:9a:ba:be:11:72:db:a8:c8:d1:26:e1:c4:69:15:
47:de:f0:ab:9b:e7:af:03:ab:fe:84:4a:a6:3e:d1:b6:bf:3a:
f8:bd:86:61:44:67:46:7f:85:fb:ab:33:90:6e:d2:78:6a:02:
47:1a:0a:33:c9:60:15:24:bd:42:aa:db:23:69:eb:34:e3:31:
21:89:2d:05:8b:55:b6:1a:91:3a:ef:28:39:9d:7c:ee:ec:0b:
7b:da:52:07:de:c1:3a:4e:e5:13:49:bb:6c:33:d3:41:c5:d4:
64:aa:ad:71:e4:8b:4b:97:f2:95:c0:6b:4a:52:7b:49:41:ed:
39:29:7b:30:f9:88:1c:ca:30:25:3d:41:2b:f0:11:1c:9b:20:
91:48:b0:19:8c:0e:1b:24:a7:99:ff:5c:af:2a:6e:0e:31:ed:
80:d0:26:a6:bf:21:50:2a:09:e4:f7:47:81:2e:8e:8d:d3:c9:
73:bf:bd:d8:39:b5:5e:08:14:95:f7:be:9e:20:2b:7b:e0:4f:
2e:ce:1f:46:69:36:a4:2c:38:96:d3:68:81:7c:f4:71:1d:1a:
92:22:8c:19:49:d2:9a:c4:2d:8f:47:09:04:94:95:ec:7d:d8:
b4:e0:69:49:85:b8:34:97:08:cb:80:a3:34:51:c7:e3:4b:35:
5d:d6:73:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:47:07 2025 by rpki-client