Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e64527a-2624-38b3-aa97-0b6cb0fa4691.roa
File: 1e64527a-2624-38b3-aa97-0b6cb0fa4691.roa (raw, json)
Hash identifier: ETvjMaHb8zT5AnarAdmXK5dsOx+caQXYvm5tbxuPd2E=
Subject key identifier: 61:9E:7E:53:F8:79:7F:BC:E8:5D:7A:69:EF:85:77:C5:D8:53:EE:C6
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183EB62351AB544EEEDD500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e64527a-2624-38b3-aa97-0b6cb0fa4691.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 36616
IP address blocks: 2001:500:127::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:eb:62:35:1a:b5:44:ee:ed:d5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=7d2118a0-f81a-4e1c-ab1b-87540cb1940b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0a:67:1f:3f:20:d9:46:17:04:42:46:e9:2a:
5a:67:b9:51:f4:1b:4b:ca:7b:b2:38:be:08:c4:89:
d2:32:df:d6:5c:e3:ef:ce:2a:42:e2:9e:bb:b1:f9:
7e:74:e0:97:40:ba:30:bf:a6:31:0d:3b:2d:3e:2f:
66:52:0f:8f:44:24:74:28:d1:63:1b:28:28:fb:b8:
34:56:f1:e4:bc:1c:d6:db:f9:d6:27:21:16:1a:ac:
f1:ca:f1:6c:62:96:e1:0b:0b:7d:fc:c2:06:bb:7a:
14:3b:15:d4:7b:46:38:99:0e:09:0c:c7:4d:48:18:
7d:17:f0:dc:59:99:f1:d9:15:3e:5e:1e:d9:38:db:
65:ae:b4:92:6b:f7:ec:87:ed:be:fd:df:85:14:49:
6a:9c:48:80:6e:d8:bb:c7:8d:7a:fc:bc:94:c1:cb:
f9:78:13:c1:20:2c:9c:00:d1:cc:02:66:d4:06:b6:
01:f9:43:9c:27:c1:9e:66:fd:2a:84:93:27:71:fd:
32:43:bc:92:50:81:cc:d8:c1:ee:93:d8:3f:9a:c7:
d3:b4:ca:90:9b:20:48:1c:53:79:2a:86:7a:cc:4e:
bf:70:fd:99:37:5a:4f:16:a1:08:4f:90:37:93:79:
45:d7:61:c3:68:1a:f8:9b:0c:01:e6:ac:e6:16:15:
bb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:9E:7E:53:F8:79:7F:BC:E8:5D:7A:69:EF:85:77:C5:D8:53:EE:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e64527a-2624-38b3-aa97-0b6cb0fa4691.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:127:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:4f:1d:55:2f:a1:d1:0c:61:0b:7f:d2:de:59:63:27:3c:2a:
f1:df:58:a1:22:aa:0a:96:e0:cd:6f:c5:48:71:5f:5e:d2:b9:
66:13:9b:cd:3e:65:ab:27:6a:6c:db:66:ea:2b:bf:de:14:84:
95:23:54:1c:d8:c7:6a:08:16:20:7d:ae:74:58:7d:33:35:72:
f2:ed:a1:df:b7:5f:97:7e:3b:71:ea:29:df:ab:5e:bb:85:ac:
35:fb:a5:8f:a9:54:d0:24:29:b0:8b:52:82:07:95:d1:30:24:
dc:94:7b:4a:a7:1d:5f:04:f0:09:d3:03:47:2c:d0:d6:8b:71:
d7:93:17:5b:a7:a9:48:a4:74:8b:cf:29:86:7d:04:1b:f6:8a:
e2:05:cf:11:01:cd:fb:74:fe:e0:1b:74:7e:f3:3a:1a:5b:f7:
77:d3:80:cb:66:2c:b2:be:8a:d7:25:a5:e0:9e:23:07:82:f6:
d6:fa:78:9e:a6:40:89:bf:d1:75:e3:dc:5b:8b:a6:3e:7f:d3:
f4:96:9e:74:9f:62:96:dd:17:d0:27:ff:5a:4b:46:43:d3:2b:
2d:61:ea:8e:9c:e4:9c:7a:55:b8:45:da:79:f3:aa:8c:0f:68:
e4:98:df:ab:46:4a:f5:76:30:2f:30:c8:0e:f2:44:b6:de:4f:
cc:1f:f4:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:52:07 2025 by rpki-client