Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/101d61bb-68da-34e5-8892-5c3b03775469.roa
File: 101d61bb-68da-34e5-8892-5c3b03775469.roa (raw, json)
Hash identifier: Jor+UVghiEW0vMaaqHqFasYMabBHEsAXiLDhfu/sE5g=
Subject key identifier: F7:15:AE:98:B7:F6:3A:F1:85:5E:9D:8F:69:3E:F8:F5:88:52:05:86
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183C5A67E5E60FB01200600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/101d61bb-68da-34e5-8892-5c3b03775469.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 397201
IP address blocks: 2001:500:126::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:c5:a6:7e:5e:60:fb:01:20:06:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=751b48c6-8a68-4964-9e27-30acc6a3ef7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5e:f2:35:5f:30:1a:ac:c4:8e:0b:e1:ae:54:
0e:7c:52:4d:be:03:5a:67:4a:98:54:c4:07:0f:89:
79:8d:ff:35:ac:11:b6:77:f8:3d:d4:aa:03:39:b1:
c9:49:ac:6d:3c:ca:1a:74:00:5a:7b:0e:24:6f:3c:
d2:4f:4b:4a:08:79:b3:2e:f2:c4:10:f8:56:ab:eb:
fd:c7:33:af:41:61:62:0c:0d:9c:18:13:f8:54:06:
4b:45:0e:13:15:51:4f:39:bb:65:78:d9:4a:ea:bc:
e9:f4:ce:63:1d:c3:b5:72:a1:36:d6:69:07:c1:9c:
41:5d:d2:3c:08:3b:e0:8e:19:6e:5c:71:8f:24:89:
9a:2a:cc:4b:55:a8:da:93:a6:10:ad:25:70:d3:b1:
da:d1:57:80:f4:95:23:69:51:71:2d:59:db:28:c4:
28:21:b3:6a:d1:54:d5:d2:f5:6c:b4:55:fe:e8:f0:
81:70:7a:63:26:42:c9:d5:3a:da:67:ea:df:20:4b:
62:bf:e6:0f:5a:19:b8:ab:fb:22:c5:a6:f7:b4:c9:
a3:16:88:65:f7:59:c2:4f:23:d5:d9:f2:c7:21:65:
cb:59:20:fc:94:70:05:15:55:63:19:e3:cc:00:d9:
06:c6:2c:37:46:61:67:5f:ea:74:e0:cd:51:57:12:
03:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:15:AE:98:B7:F6:3A:F1:85:5E:9D:8F:69:3E:F8:F5:88:52:05:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/101d61bb-68da-34e5-8892-5c3b03775469.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:126:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:47:18:42:33:09:4f:6e:28:ee:dc:52:25:a7:f5:c8:86:76:
ee:74:f5:70:86:09:0c:d7:14:c4:e6:46:01:b1:1b:a5:2c:83:
bf:7b:14:fc:7b:67:2e:9b:a2:b7:98:c1:b0:69:ce:38:a8:fc:
f4:e8:03:4d:50:11:76:c5:01:c6:fc:d9:87:3d:f1:89:77:23:
b5:3d:f4:1e:88:f5:7e:e8:b8:de:99:3a:8b:8b:50:7e:de:a9:
75:75:36:59:41:0c:14:03:ea:85:55:01:24:71:29:41:2d:f0:
10:10:c3:da:0e:36:06:3e:73:54:c0:da:33:a7:8e:3f:88:a9:
91:36:02:ed:b0:17:59:15:58:ef:2f:6a:89:a7:91:d9:33:df:
fc:71:aa:a2:f7:71:30:97:69:ba:99:49:c4:bc:03:73:05:95:
c7:80:8e:36:c6:89:27:93:a6:ea:a8:c1:90:5b:e1:fb:f3:68:
29:ba:e7:20:35:24:23:ce:ec:3e:7d:ee:11:0d:e3:70:ee:f3:
dc:d9:99:e9:41:fa:ef:70:51:06:98:5e:13:83:c3:f9:da:b2:
69:8b:51:07:9f:99:55:bd:a6:37:6c:57:03:75:84:3a:06:87:
3a:16:3e:66:27:fc:38:bf:fa:38:a2:33:fd:28:9c:0d:2e:3a:
33:07:85:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:22:17 2025 by rpki-client