Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/19b00550-25eb-33e7-b05c-a219a9452cb2.roa
File: 19b00550-25eb-33e7-b05c-a219a9452cb2.roa (raw, json)
Hash identifier: nxHcE+YeqH786MBXf3eegxz+f8l89ObxDAzbHgRczsY=
Subject key identifier: AF:E1:15:55:4F:01:2C:B7:A7:CF:F4:8B:82:6B:18:1E:18:31:8E:D3
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183E5F9197F0BF8F23B1020
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/19b00550-25eb-33e7-b05c-a219a9452cb2.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 396609
IP address blocks: 2001:500:125::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:e5:f9:19:7f:0b:f8:f2:3b:10:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=126e08b3-574d-486d-b14c-50343950e4cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:89:90:a6:0d:a4:05:82:1b:cf:fa:85:87:bb:
9b:47:da:08:38:cb:d1:ae:c0:bd:47:db:2f:23:23:
d3:60:65:4b:38:96:8f:20:66:9c:f6:48:e5:52:37:
4f:c2:e6:88:d6:21:56:bb:93:20:1e:79:6f:98:8f:
c3:c7:cd:40:4a:76:19:26:86:2b:ee:a3:94:6c:1c:
38:e7:0e:27:c0:05:28:cd:45:19:16:42:08:1c:e3:
f9:16:11:1f:8c:0a:e9:e2:78:e3:04:35:8f:78:bf:
3c:04:de:2a:97:f4:27:28:40:55:10:59:79:10:9d:
d4:5d:b1:b3:86:8d:17:04:86:cc:60:ca:ff:94:88:
9e:92:f5:f4:af:fc:95:71:b9:c6:1b:50:1c:bd:30:
5a:8b:e4:80:0b:62:40:ea:cb:7f:ed:b7:a3:e2:37:
25:d8:9c:7a:64:a2:df:e7:8f:a2:7c:a2:b4:05:8f:
2e:b3:91:d2:5d:32:32:db:ea:85:da:15:d9:84:e2:
58:b5:08:74:d4:1e:43:b3:b1:d2:20:95:7a:64:f2:
16:ac:5b:26:7d:2e:05:d9:e4:10:71:8e:47:2d:76:
ef:bf:4b:a8:b0:bc:f9:b5:6a:e4:dc:34:21:bc:f2:
26:9f:b1:6c:89:d2:21:a6:05:17:7a:02:38:59:9d:
ee:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E1:15:55:4F:01:2C:B7:A7:CF:F4:8B:82:6B:18:1E:18:31:8E:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/19b00550-25eb-33e7-b05c-a219a9452cb2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:125:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:82:dc:a0:a1:91:52:52:3d:bd:8e:2d:0b:9a:e1:0d:b2:b5:
3c:89:1c:8e:c7:6e:49:ed:43:7a:c2:d5:6e:29:b5:f8:62:9a:
f4:76:d3:a4:34:39:2f:6d:08:e2:a1:9b:dd:7d:f5:97:66:6a:
3e:3a:53:8d:a1:d6:4a:5a:e9:03:8c:cd:9b:e8:2e:06:41:ba:
39:1f:b2:a1:b5:1e:72:32:e1:60:cb:e1:2b:32:49:2f:80:37:
a6:c8:83:b6:ef:48:34:5a:f7:ba:ee:b3:41:a3:a1:fc:90:c0:
dc:13:69:2f:16:65:e7:74:65:8e:b9:8e:2c:06:7c:d4:35:81:
cb:5e:0a:d9:9a:29:84:23:99:58:6c:e2:fd:18:21:66:a1:a8:
f8:87:4c:8c:7e:28:38:dd:61:50:22:2a:6d:45:ec:f4:32:84:
dd:da:01:7b:37:16:11:55:33:cb:ef:b3:36:8c:d3:e5:e2:83:
49:68:37:a4:11:da:f2:d3:f4:c1:43:36:52:19:a7:7b:89:aa:
b4:ae:cd:8a:0a:68:be:c3:15:0b:bf:37:2d:66:56:98:65:31:
30:24:18:ae:35:d3:fb:53:ed:04:cc:2b:14:68:f8:69:88:96:
43:cb:b6:71:4c:64:e3:f4:d0:bb:60:de:10:d2:ba:03:2f:3c:
8f:17:66:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:54:29 2025 by rpki-client