Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0fc65307-9a27-39a7-9638-6e0f1bfd6723.roa
File: 0fc65307-9a27-39a7-9638-6e0f1bfd6723.roa (raw, json)
Hash identifier: MQkw2fhdBnrwtv5MpAIP0KZX+TSMatcPbmBWzCLcMt0=
Subject key identifier: 69:A0:4F:9D:FE:BA:E6:46:16:BC:1E:3A:40:86:65:AF:06:84:FE:D6
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285849393E8FE9E11D83D74B014F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0fc65307-9a27-39a7-9638-6e0f1bfd6723.roa
Signing time: Tue 18 Mar 2025 01:00:38 +0000
ROA not before: Tue 18 Mar 2025 01:00:38 +0000
ROA not after: Mon 16 Jun 2025 01:00:38 +0000
asID: 397195
IP address blocks: 2001:500:120::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:39:3e:8f:e9:e1:1d:83:d7:4b:01:4f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 18 01:00:38 2025 GMT
Not After : Jun 16 01:00:38 2025 GMT
Subject: CN=8f3e4282-5cd7-4452-8e54-b24252ef09d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e4:d7:0d:da:a4:95:81:92:52:de:37:0e:95:
a4:46:4f:41:7a:52:8e:eb:85:91:55:c2:81:20:16:
a2:35:bf:89:15:15:bd:51:e8:a2:5e:16:63:4f:56:
49:c2:db:f8:c5:b1:09:f6:cc:76:00:4c:f7:00:3d:
5b:f2:db:ff:b0:7d:62:46:f0:45:13:1d:fa:9c:8c:
d6:04:31:09:ef:43:c2:28:5f:cc:b1:75:d1:f4:b8:
ce:34:7a:0a:9b:5e:58:75:2a:f7:ed:53:9a:19:23:
00:4d:5f:35:75:8c:a2:65:fc:37:58:dc:2e:e9:73:
f6:5c:f4:f0:6f:17:7d:ef:6f:c5:47:b6:42:aa:35:
4a:90:a8:e1:5a:e6:dd:07:c6:93:78:9e:28:f0:5f:
dd:ac:b9:cc:c3:73:55:43:78:44:16:ea:75:a9:e0:
d1:fe:cf:19:79:cd:33:be:14:c7:41:dc:4e:c9:5b:
45:c6:96:86:73:af:1a:37:f3:ab:0b:ae:21:81:5c:
e8:55:c4:d5:f4:15:46:9d:ed:ff:11:6f:cc:0e:15:
89:91:0d:ee:95:14:e9:4a:2f:6d:88:2c:55:8f:de:
54:85:2c:1c:64:53:e8:84:94:d6:65:67:6a:43:4c:
42:00:08:3a:07:29:4e:1c:e3:9a:fd:dd:b5:86:74:
c9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A0:4F:9D:FE:BA:E6:46:16:BC:1E:3A:40:86:65:AF:06:84:FE:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0fc65307-9a27-39a7-9638-6e0f1bfd6723.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:120:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:f3:83:34:99:c5:c7:11:56:aa:d9:60:2d:97:5d:b3:32:34:
eb:98:86:18:30:4e:5e:e3:4c:19:5e:0c:c7:98:dc:8c:3e:16:
52:59:d1:19:87:b3:6e:54:1a:1c:01:29:3d:23:79:fa:ab:c2:
43:89:39:70:c4:1b:48:5f:fc:15:bb:0f:4f:98:5b:b3:cc:0d:
6e:2d:6b:d4:90:a5:d9:bd:0d:d9:6d:27:b6:11:e9:b0:f7:34:
ee:21:81:3d:80:51:e4:0b:0c:07:30:f6:8e:08:ce:8c:84:c8:
18:09:3d:40:7e:6a:7b:9d:f3:17:cf:c7:b9:a9:47:d2:ec:e6:
12:2c:2e:74:28:22:4d:65:84:d5:31:fa:49:de:44:c2:f5:bd:
0b:e7:a4:32:34:ad:d1:57:6b:48:cf:fb:28:5e:01:63:1a:73:
cb:cc:49:aa:cd:f5:89:22:fb:af:4a:f6:d5:f1:52:7f:ee:ca:
40:87:4b:4d:c1:56:c3:23:4f:e5:c2:2a:09:4c:f6:f3:5b:06:
bd:45:06:01:ce:48:b2:a2:0d:98:5f:19:b1:4f:00:ae:54:10:
22:14:9c:42:e8:3f:6b:07:38:35:44:01:1f:43:ea:3c:80:42:
03:76:d2:77:fd:f4:9a:f0:95:e5:48:d2:49:1b:f1:53:59:ae:
36:d0:b7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:28:03 2025 by rpki-client