Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0f907be0-1575-341c-9aec-24191a420b6b.roa
File: 0f907be0-1575-341c-9aec-24191a420b6b.roa (raw, json)
Hash identifier: 36MlkWxuciw9kcFKNCq6cxmM69cHYR9fLiyn/cDN4n0=
Subject key identifier: AC:2A:81:96:2F:EE:D5:93:32:E8:5C:52:42:71:CB:65:BC:83:5F:CF
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183D9C6A0889B0498AB7F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0f907be0-1575-341c-9aec-24191a420b6b.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 21313
IP address blocks: 2001:500:126::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:d9:c6:a0:88:9b:04:98:ab:7f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=e67a99b9-a3dd-48ac-bcde-4ae64197a367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:48:0b:52:ec:b6:7d:32:e6:46:82:91:17:34:
d7:9a:36:91:8b:a2:69:00:22:09:86:2f:c3:7b:67:
c6:05:61:46:b2:54:c9:b2:59:f3:2a:d4:85:bb:7f:
ed:c4:51:c6:e7:ed:07:14:2a:99:a7:98:9b:6d:a2:
3b:0e:03:9e:06:68:cd:d1:ff:60:01:41:15:cc:b3:
77:87:04:30:e9:83:cc:58:6e:cd:6c:8c:1e:07:e2:
ec:87:f8:d5:a3:54:d8:6f:84:bb:99:5a:5c:f1:59:
1a:d5:33:8c:4d:0b:d6:9e:b1:eb:0c:9c:5b:b3:f1:
ce:ec:70:d0:9c:e3:5e:46:9b:66:0e:30:84:21:00:
67:b1:60:69:c9:08:8f:36:93:54:22:92:31:25:c9:
5d:d3:70:88:b2:01:7a:ee:af:35:f7:c0:5b:5c:38:
ad:fc:68:ac:de:c6:cd:71:f4:6b:07:b1:90:b9:7b:
5f:27:2c:8d:dc:14:b4:7a:38:ea:cf:06:88:02:be:
00:4d:44:a5:21:0a:72:5d:b4:8d:2d:a8:85:e9:fc:
1b:6d:06:7a:a8:b2:cb:e5:b8:89:53:f9:73:43:3d:
61:57:43:6e:b3:e0:7f:34:37:99:d0:6f:18:50:8f:
b4:cd:04:5e:f6:b9:a6:38:04:35:ee:b4:f2:51:e2:
ec:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:2A:81:96:2F:EE:D5:93:32:E8:5C:52:42:71:CB:65:BC:83:5F:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0f907be0-1575-341c-9aec-24191a420b6b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:126:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:8a:2d:c5:d6:d1:e2:1f:4f:c6:95:ed:5e:a6:e3:52:9a:a5:
5c:4a:63:11:04:7d:30:30:ea:99:58:89:86:db:3c:c6:70:89:
47:a5:d0:aa:96:ef:55:59:73:f1:58:8c:16:1d:83:14:24:67:
c4:46:0d:d1:ae:d2:09:21:e9:e9:66:c9:89:a8:d2:96:2b:17:
00:df:9e:e4:8b:d5:64:a1:6e:dc:b6:27:0a:ab:2f:96:94:bc:
be:48:7b:86:3f:5e:4b:f3:73:10:b5:cf:dd:93:b9:15:57:b6:
83:05:ba:29:60:f7:63:bf:82:d7:ac:a9:0b:62:72:28:59:22:
23:d3:7f:c3:22:fb:86:80:b9:4f:5e:8e:34:2d:d5:98:17:fb:
ed:46:68:50:36:a5:df:9c:a1:d8:aa:8d:df:0a:94:1e:d2:3f:
b4:01:cd:99:91:27:f1:7d:4d:30:e2:16:0b:b2:d7:c9:7b:7d:
16:72:d3:78:db:a6:d7:56:43:4b:37:8f:0f:e8:4a:6d:44:c0:
91:ff:ba:46:36:bd:d6:38:e3:19:50:35:42:6a:0c:59:41:16:
c8:f5:b8:eb:e0:21:6b:f7:53:30:b5:f5:95:6a:05:13:c9:e3:
5b:4b:32:a3:e0:77:11:dd:97:c1:7d:bd:58:b3:e2:bc:8c:53:
4c:7b:8a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:55:31 2025 by rpki-client