Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b850625-92fd-302d-85ef-a9503103ce5e.roa
File: 1b850625-92fd-302d-85ef-a9503103ce5e.roa (raw, json)
Hash identifier: /PJoJoaRu6k0+gi/g0+o9IsVCAaAh1pnsIf/chapYxs=
Subject key identifier: 12:A7:DE:1C:22:FD:F7:3E:91:89:09:65:56:8A:23:6C:57:AB:ED:DC
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584917DC130FE3949EC27441F580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b850625-92fd-302d-85ef-a9503103ce5e.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 396549
IP address blocks: 2001:500:123::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:13:0f:e3:94:9e:c2:74:41:f5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=58a40bc3-afd9-4bfd-93a3-59666c626914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:86:3a:cc:05:7f:a7:a8:a1:bf:e3:87:07:4a:
8b:46:cd:a4:8f:a0:1b:0d:31:c1:e9:d3:cc:f9:4b:
44:63:f8:dd:c8:2d:c9:60:7f:d9:0f:2d:11:d0:c7:
7a:6d:0d:7e:76:cc:78:69:cc:3f:aa:00:48:09:72:
48:0e:b3:2f:ed:89:4e:43:9c:10:75:96:5a:8f:3a:
71:e1:de:35:67:51:87:b5:0a:51:5d:5b:f4:cf:17:
44:07:51:1c:72:ef:2b:bf:f0:78:0a:f3:9b:a9:0b:
fe:57:da:aa:a4:be:dd:7b:ca:1d:31:b9:72:d5:55:
1f:72:ad:41:8a:aa:be:2a:47:a8:92:a9:58:73:54:
40:d7:a4:3a:2b:03:f7:81:aa:a9:39:10:8f:aa:0a:
32:3d:7f:7a:58:40:56:ae:bf:1d:2e:b1:76:45:86:
36:51:cb:91:ab:2d:46:63:6c:ad:b4:64:af:41:10:
b7:8a:9e:6c:e7:fd:84:aa:b3:c2:97:6f:b7:63:93:
d6:f7:b2:0e:45:80:6f:bc:5d:75:e6:5f:90:84:90:
66:13:8e:63:56:77:d1:62:aa:31:1a:67:e8:c6:09:
88:59:28:e3:87:89:ca:bd:06:52:b6:64:91:f9:97:
8b:41:48:37:ce:34:d8:dd:a6:4a:0e:a4:c6:26:22:
6e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A7:DE:1C:22:FD:F7:3E:91:89:09:65:56:8A:23:6C:57:AB:ED:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b850625-92fd-302d-85ef-a9503103ce5e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:123:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:1a:3b:31:3e:07:75:f6:61:ee:83:13:ae:d2:7d:35:d0:ff:
49:3c:38:55:22:82:63:a7:7b:0c:9a:1a:03:7d:b1:83:be:f6:
df:2e:5f:89:aa:34:41:6b:78:ac:99:ff:f5:e0:97:d1:dd:15:
9e:53:1f:c5:b0:5a:91:63:a4:ba:4c:62:79:08:bc:2a:03:0b:
d5:0a:59:2d:e5:d4:8d:a7:4a:9f:ee:e6:5c:28:82:d3:21:08:
05:44:4a:fa:96:88:bf:77:b6:25:fc:d7:13:db:7d:2e:10:c2:
ea:f3:03:5f:28:5d:93:a2:1f:86:3a:33:57:7a:06:40:ef:3b:
92:70:03:bc:fd:36:b0:33:08:6c:85:56:c1:d0:51:7a:8d:7a:
2a:32:26:b2:b9:36:55:1c:c0:d6:ad:4e:4c:df:2d:ca:17:86:
47:6f:76:a3:ef:a2:68:2d:ad:f3:c3:88:7f:2e:1c:70:ad:14:
2f:70:9d:50:54:fc:3f:31:7f:bd:5e:17:a9:b3:8a:06:21:1b:
a9:df:fc:63:7c:6b:e9:c1:01:c4:7d:1f:fd:da:2d:ba:e3:eb:
4c:f4:f3:ae:e4:6b:f5:a2:0b:1b:19:cf:e9:98:4f:f6:f0:ba:
eb:0a:9e:12:8c:be:02:87:1c:6b:80:2b:15:2b:b3:fe:01:96:
bb:2a:68:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:01:18 2025 by rpki-client