Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21aa4f37-1aef-3131-91eb-374125dffe2b.roa
File: 21aa4f37-1aef-3131-91eb-374125dffe2b.roa (raw, json)
Hash identifier: EqD5LyzvPaR0fpiNRG72RvTcr1YW2oxPEtrDdwZqcIs=
Subject key identifier: 26:C5:8C:26:2F:34:B3:6E:FB:20:83:71:99:9B:36:9F:9C:47:46:3F
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183F010C775B61975F05800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21aa4f37-1aef-3131-91eb-374125dffe2b.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 396617
IP address blocks: 2001:500:125::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:f0:10:c7:75:b6:19:75:f0:58:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=336ecc49-51e3-407d-8359-09a2b089d611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d5:b3:02:70:48:51:8e:2c:f8:47:29:a5:95:
b5:a8:ff:2a:44:e3:a9:b3:da:fb:7d:18:56:21:8d:
e1:5d:aa:19:51:69:dd:69:fe:fe:35:4f:ac:3c:71:
32:2d:c7:66:92:95:f1:c5:7e:3f:eb:74:cc:0e:99:
72:14:e2:b9:4b:57:5a:f4:bc:76:d0:10:8f:04:85:
c7:b9:2e:40:72:d7:98:c6:bf:39:9e:06:1a:9c:18:
59:86:b0:bf:d3:b6:a9:d1:ea:6d:57:7c:3f:ec:f6:
cb:fd:aa:0a:b9:3f:a9:8f:1a:53:ea:39:a6:df:f3:
a6:d9:9a:f5:36:53:0e:58:2f:19:d6:dc:aa:a5:cf:
f2:f5:e9:1d:d9:91:51:50:4f:59:66:e4:2f:53:83:
6d:3f:cf:b0:16:bb:eb:94:15:39:03:6d:7a:f6:e3:
18:55:8a:a1:67:1c:39:7c:35:17:10:e4:7a:5c:22:
d1:85:57:c0:0f:fc:62:26:b0:99:5f:63:68:8e:f1:
44:48:5b:31:14:49:53:98:52:e0:51:60:06:93:ea:
0b:ac:f7:d6:cf:28:07:df:55:f3:31:b4:f4:f0:77:
d5:57:26:1d:64:e0:4f:b6:ad:b6:37:0d:f6:f1:c9:
de:f2:00:a4:b6:02:bb:a4:8e:de:9a:1e:bb:d4:51:
1a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C5:8C:26:2F:34:B3:6E:FB:20:83:71:99:9B:36:9F:9C:47:46:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21aa4f37-1aef-3131-91eb-374125dffe2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:125:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:2c:a4:f1:1e:43:da:ea:ff:db:9f:5d:13:b1:89:c6:5d:7a:
52:df:d2:c2:d4:e6:82:60:e2:83:d5:b5:02:2d:3a:74:2b:b8:
e2:56:d9:ce:d0:bb:ab:ad:98:b9:22:68:f0:4d:d6:85:bd:fc:
14:ac:bb:14:9d:90:1e:b7:5b:56:d7:0c:38:7b:5a:a9:8c:eb:
3b:cf:9d:8b:2c:14:f2:97:44:e7:ca:3e:79:db:d1:a6:da:24:
61:e2:03:29:a0:70:f5:b2:af:80:eb:aa:6f:91:29:32:ec:2f:
57:d5:2a:d1:54:4a:05:62:b7:bc:91:63:ee:bf:8e:52:5b:d3:
20:2c:df:cb:1f:db:41:d1:cf:91:ef:04:60:6c:e4:de:17:bd:
4d:4f:4c:90:d3:0c:32:53:62:03:27:ed:24:ff:a9:32:f9:90:
c3:8a:31:22:00:4a:10:87:3f:7a:e7:4b:31:f8:ed:32:8c:b9:
4b:65:cd:69:2a:bf:c5:fd:94:20:25:d2:74:14:e3:63:24:0d:
6e:e4:18:5f:fc:fc:c5:11:75:cd:78:28:78:b8:eb:95:51:fb:
be:9d:dd:07:19:de:ff:05:7a:e9:70:f3:dd:08:65:7a:91:83:
1b:1b:73:8b:e4:99:b2:02:cd:65:54:ca:19:ba:f7:96:d2:9f:
0e:ec:4f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:48 2025 by rpki-client