Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1f24f4c7-2d8b-3a61-90ab-ecc4797751db.roa
File: 1f24f4c7-2d8b-3a61-90ab-ecc4797751db.roa (raw, json)
Hash identifier: A55UXDyMncmeWyfB9s2HzFn6pfXbLXVnKzhd0oJjf9M=
Subject key identifier: 36:BA:5A:51:C5:0D:27:FF:EA:38:66:E1:13:AA:19:61:40:1B:B2:00
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183CDA34D5A20D4AD047100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1f24f4c7-2d8b-3a61-90ab-ecc4797751db.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 20172
IP address blocks: 2001:500:125::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:cd:a3:4d:5a:20:d4:ad:04:71:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=4dd9a268-9213-409f-a711-af43f63b1bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e6:a7:ba:ec:d6:8b:d2:26:4f:2d:56:a2:65:
f4:86:ae:a6:cc:b4:d9:eb:98:6f:fb:f7:58:dd:1a:
c3:61:af:dc:b9:79:fa:c8:6e:ef:ee:2c:8e:3a:be:
42:39:a6:91:ae:51:11:79:69:6b:47:6f:3e:52:15:
be:b0:07:c4:21:c9:aa:3e:83:c0:f9:d4:26:62:75:
ba:1f:e1:9e:7a:0b:3b:fe:c1:cf:6a:71:6c:83:ce:
dd:ee:a7:05:b1:ed:7f:99:d9:58:4c:60:e8:73:46:
be:9d:10:2b:dc:ac:e0:24:15:62:67:88:75:e8:74:
16:8c:da:73:00:a9:a1:c8:07:94:9d:c2:28:4e:c7:
66:42:76:0e:24:2d:12:8a:df:7b:d3:ca:94:ea:c3:
c1:11:92:64:26:f9:ca:ef:47:3e:20:27:42:93:90:
a1:3f:4f:2b:11:24:7e:90:d8:dc:7d:2d:a8:9b:ae:
fe:e6:96:ef:aa:6d:ee:30:8e:59:63:95:b8:45:02:
07:5d:bb:20:81:54:b9:01:76:af:6b:60:4d:d6:7b:
4b:e8:32:48:1e:0c:f3:f4:ae:8d:cd:83:69:d4:89:
b2:17:77:c9:19:24:0e:16:5e:e6:40:c2:75:07:05:
52:8b:0e:eb:63:77:58:bb:70:7a:d7:36:78:ac:83:
68:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:BA:5A:51:C5:0D:27:FF:EA:38:66:E1:13:AA:19:61:40:1B:B2:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1f24f4c7-2d8b-3a61-90ab-ecc4797751db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:125:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:57:47:50:c6:d3:49:e0:03:5a:db:25:9d:fb:f2:4e:59:fc:
8e:44:62:57:df:91:95:2b:47:27:11:5b:e9:44:e4:13:4b:0c:
38:8a:2d:23:de:35:9f:bd:2d:22:81:ff:71:f9:b3:a0:fb:06:
6d:86:e9:bd:c1:82:e2:b9:d2:c1:7c:e0:33:9c:13:b2:4f:1d:
75:fd:ff:ea:15:9f:97:91:9d:75:08:5b:bd:14:06:11:7a:0c:
22:29:41:22:0a:6f:0e:b2:67:a4:f0:0a:7e:ca:c6:b7:3e:5f:
cd:72:f5:61:c4:f4:ad:2b:b5:5d:9e:5b:53:f4:59:76:2f:ad:
0b:f3:14:40:a6:34:c4:3d:48:b8:0c:92:d7:3b:6e:9a:8b:fb:
51:dd:79:09:36:e2:4f:ee:12:8f:d6:23:e8:60:4e:87:06:5c:
0c:d1:2f:2b:3f:fc:66:d1:b3:3f:ad:89:1e:d9:49:50:4d:fd:
67:99:fb:e6:2b:a4:d7:c7:67:98:4f:71:c5:0b:b8:42:ad:a7:
39:bd:20:de:0d:fd:0a:bb:8d:39:d3:61:14:4f:68:9e:97:53:
bb:08:8a:65:81:81:37:e4:8b:ce:02:79:c2:8f:58:a6:1e:60:
1b:db:f7:32:d3:9a:b1:f2:63:18:81:80:98:64:e9:1f:40:02:
7a:74:0d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:10:03 2025 by rpki-client