Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e7b2e49-6dad-32de-84f5-64e01ca2ea78.roa
File: 1e7b2e49-6dad-32de-84f5-64e01ca2ea78.roa (raw, json)
Hash identifier: 44eSKntRJjj0sUtTsQAbQRMtDyziH3bJOdUz6JyXkU4=
Subject key identifier: 8A:8E:DB:D0:05:16:8D:3D:E1:9B:8E:DA:9C:1A:9F:0A:64:11:84:EA
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285849403986E5AED4FECB43A0C780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e7b2e49-6dad-32de-84f5-64e01ca2ea78.roa
Signing time: Thu 20 Mar 2025 13:00:53 +0000
ROA not before: Thu 20 Mar 2025 13:00:53 +0000
ROA not after: Wed 18 Jun 2025 13:00:53 +0000
asID: 396610
IP address blocks: 2001:501:8a29::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:40:39:86:e5:ae:d4:fe:cb:43:a0:c7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 20 13:00:53 2025 GMT
Not After : Jun 18 13:00:53 2025 GMT
Subject: CN=9c747135-f862-414f-bc4e-1fdbcc1472b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e3:9a:b0:94:0e:6c:7c:58:16:2f:c6:5b:b9:
b3:17:a2:9c:93:db:ba:9a:22:88:52:95:93:6e:d1:
4f:55:ce:10:25:e0:bb:05:ce:ed:c6:40:31:d6:6b:
18:9f:5b:a9:e1:d9:f2:57:b3:84:19:37:7f:c8:41:
8a:58:0c:3a:fc:9b:96:b6:33:c1:97:e0:d6:3e:32:
0e:a2:66:d6:25:cb:5e:f3:f6:09:9a:8b:05:6f:02:
e5:29:cd:c6:5a:26:e0:a6:97:29:80:fb:c2:d8:c8:
39:46:85:d4:1b:02:70:34:d2:b2:a1:fc:a1:05:ef:
92:2f:1e:af:bc:88:46:8e:84:b9:d2:33:ea:7a:8b:
39:fb:9b:4b:51:14:81:3b:5b:83:15:f7:03:e1:bf:
58:6b:5d:41:24:3e:19:55:36:6e:ae:d1:d9:6a:59:
14:22:23:d6:e6:b5:d3:a6:b3:a9:28:d3:e8:8d:ae:
c4:92:e7:b0:fe:12:fd:47:f1:6c:f3:a2:f5:15:83:
c3:26:c0:d4:77:55:4a:ed:eb:4a:24:24:82:86:47:
ff:be:4a:c5:b8:cc:3b:0b:86:4d:15:7d:11:19:ec:
c3:81:7f:a3:4b:38:69:29:b2:ac:c2:e8:33:f1:a9:
15:61:e9:25:c5:69:a3:03:bc:45:6e:a7:44:8c:21:
a5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:8E:DB:D0:05:16:8D:3D:E1:9B:8E:DA:9C:1A:9F:0A:64:11:84:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e7b2e49-6dad-32de-84f5-64e01ca2ea78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:501:8a29:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:f0:d3:f0:f8:16:65:71:33:d7:c3:6c:23:0f:5f:35:cc:36:
2c:86:cd:d7:81:de:0d:9e:ce:15:95:3a:f9:a9:38:c9:1d:1d:
72:8d:a4:c3:9e:96:9f:ed:75:1d:cb:13:5c:46:3d:53:39:c2:
a7:42:28:68:11:69:a3:be:e2:3c:86:58:05:78:bc:1e:94:3f:
57:d6:3d:27:13:ee:f9:65:f3:e2:9a:3c:a4:a2:6f:a9:e3:90:
26:29:4a:37:37:e8:42:f4:16:39:73:98:ae:ff:0b:be:87:d5:
b1:16:58:10:6a:1e:95:7f:93:12:02:41:1f:5c:1e:8e:26:f0:
44:a4:f3:47:68:d1:2b:1b:a2:00:ae:a4:8a:3c:d3:f3:1d:fb:
33:f9:2d:c4:26:42:87:37:b9:89:5e:35:b8:12:5c:14:bd:ac:
2d:e8:36:37:be:34:28:e4:76:30:09:df:2d:85:01:4f:a4:54:
60:b5:9e:db:ed:11:da:dc:7b:0c:bc:5f:6c:7a:33:bc:fe:fa:
7b:69:b5:00:1c:96:82:78:8a:2c:ae:b7:fe:54:72:02:a3:16:
50:88:f5:11:a7:cb:32:b4:4a:ed:12:00:eb:7c:00:57:2c:d7:
11:22:c2:cc:2a:b4:05:1d:7a:4e:24:3b:0b:2a:22:82:14:11:
6e:52:e3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:50:16 2025 by rpki-client