Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/220424c3-c5db-3d2c-a100-5eb2b338905a.roa
File: 220424c3-c5db-3d2c-a100-5eb2b338905a.roa (raw, json)
Hash identifier: QwJ0081mywzzBRZhynhN3DEHX6ctwYJ39pUOhX8nXIk=
Subject key identifier: 3A:A4:23:BC:DD:75:43:B5:A6:5D:72:5B:C2:CA:2F:E2:B3:B2:84:36
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183FBDA1940E4213135CD40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/220424c3-c5db-3d2c-a100-5eb2b338905a.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 396593
IP address blocks: 2001:500:126::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:fb:da:19:40:e4:21:31:35:cd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=d12bacf8-1060-4abe-b541-b82391f890ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:41:95:9c:e3:f7:73:6b:d9:81:ff:49:af:39:
ae:bc:6f:9b:b3:d2:fc:da:c4:e4:7e:db:20:5f:70:
78:7b:5b:f5:9a:dc:38:48:5c:70:e2:ae:11:a5:d5:
fc:58:59:99:59:df:b5:8c:fd:74:02:38:b3:5f:9a:
f4:2e:ab:60:93:02:f4:f6:17:bc:0d:54:de:5b:ee:
17:c6:fd:97:b8:bd:2a:f4:53:1c:0b:6a:4b:e0:7f:
81:1c:e2:1e:e0:0e:54:f7:66:28:a6:bb:be:4c:bb:
e2:d6:24:0b:78:db:09:07:35:4c:c5:50:b7:3f:d4:
8b:f9:48:b6:bd:6a:ab:83:3f:d9:ff:61:81:d1:82:
c4:8f:af:41:dd:c3:60:19:0f:8e:55:cd:bf:eb:96:
29:3c:cb:3b:d3:b9:4f:26:a3:c7:52:56:28:94:37:
d3:d7:4b:b5:94:bc:3c:ce:cb:4e:94:9d:ff:df:46:
51:f4:76:22:81:d0:64:65:7a:93:57:46:35:26:9c:
ba:e4:7d:96:8e:83:5e:63:cc:d6:04:7c:57:51:26:
66:e6:4a:a7:78:39:11:f3:10:08:9e:f0:bd:f5:8b:
a0:59:41:1e:7f:2e:46:b0:c8:5e:5b:47:18:7d:9d:
24:c0:c2:dc:95:48:54:35:8c:27:0a:24:23:ed:33:
bb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A4:23:BC:DD:75:43:B5:A6:5D:72:5B:C2:CA:2F:E2:B3:B2:84:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/220424c3-c5db-3d2c-a100-5eb2b338905a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:126:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:ea:95:f3:77:7f:6b:70:2e:08:8c:93:5f:75:23:4c:64:38:
ef:79:d3:35:6b:71:e3:ca:cb:2c:60:b2:fc:09:c1:e8:f1:b8:
6a:18:b5:68:27:2a:53:3b:97:3a:6f:b4:c4:4b:91:59:74:a1:
42:8e:3a:da:7e:72:0e:46:1a:8d:79:e4:0c:d6:fb:d2:1b:5b:
92:eb:84:60:5d:0e:53:10:e4:5b:e5:7f:f4:a5:f1:88:f2:59:
df:42:38:81:3a:83:80:bd:b6:c3:77:9e:fa:a7:4f:c6:13:fc:
7e:10:bd:c1:8c:9b:ce:6b:fc:bd:74:88:2a:bf:3d:35:17:9c:
3c:a4:34:d4:16:8d:4e:c8:44:85:bd:d5:76:c8:8a:a8:ae:81:
5e:ae:48:f6:1b:16:81:c8:0c:34:dc:87:fd:c3:2d:1a:06:c1:
75:97:c9:07:b2:47:40:ff:c7:75:ca:b6:8c:8e:5f:81:84:6c:
a9:24:84:f2:dc:0d:c5:c0:0f:d5:7e:79:fb:b9:a0:8d:26:66:
6d:87:aa:fc:e5:b7:2a:d5:c1:1e:1f:30:85:b8:b3:0a:ec:d3:
51:16:12:17:4f:aa:31:09:d7:42:d0:da:16:ef:9f:72:0f:61:
b6:7b:8a:28:be:87:3f:93:01:a8:ed:7c:e1:54:5f:5a:be:21:
08:8f:f8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:37:56 2025 by rpki-client