Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/25878310-850e-3093-9425-ac95bfdc384b.roa
File: 25878310-850e-3093-9425-ac95bfdc384b.roa (raw, json)
Hash identifier: 0SJ48QbKSiiU1ZAUCee+Yul7yFJXhoGNgOAhinSqCtw=
Subject key identifier: 44:57:FF:42:AC:E1:3C:69:FA:C8:12:02:97:8D:8B:7F:9F:F9:48:5F
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858494039868755EAF02F35199A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/25878310-850e-3093-9425-ac95bfdc384b.roa
Signing time: Thu 20 Mar 2025 13:00:53 +0000
ROA not before: Thu 20 Mar 2025 13:00:53 +0000
ROA not after: Wed 18 Jun 2025 13:00:53 +0000
asID: 10515
IP address blocks: 2001:501:8a29::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:40:39:86:87:55:ea:f0:2f:35:19:9a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 20 13:00:53 2025 GMT
Not After : Jun 18 13:00:53 2025 GMT
Subject: CN=649494ed-5310-4c71-ac87-340757682e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:03:3b:ff:d6:70:b7:d9:6b:61:be:25:ec:1d:
ad:a9:6f:08:39:62:db:f2:62:bd:8b:ea:99:71:32:
a2:5b:9e:81:bb:28:e6:82:ea:17:47:53:86:0e:e9:
4c:2a:59:8c:8e:11:9a:3b:3d:07:6e:b3:28:d7:a0:
71:53:c4:7f:c2:14:09:99:ef:ea:04:b5:6b:47:eb:
d9:43:ee:28:57:2c:aa:24:fa:26:cc:f6:13:97:59:
85:c8:a8:01:91:51:1f:f7:ca:3b:43:42:2a:1e:56:
5e:1c:3a:fa:b3:c0:6a:83:16:ee:72:7d:71:2e:60:
da:1d:39:a8:54:0c:cc:81:85:bb:97:5d:b4:fc:4d:
52:27:1b:0d:fb:b6:e6:38:51:75:8f:c3:1e:b4:cc:
e6:37:bf:59:b6:72:04:09:a9:b8:94:55:8c:60:a4:
61:88:fa:1c:75:b3:47:59:18:a8:ba:16:5c:92:01:
d3:82:70:23:56:31:a3:c1:8a:cc:6d:85:71:2c:c2:
9d:6c:dc:7e:fc:2f:6d:c9:f4:14:08:31:05:be:52:
1d:56:68:9b:63:71:91:5c:f2:90:33:0e:99:ad:50:
f7:49:5f:3c:ce:4e:f7:be:b9:fc:ea:ac:f3:b9:d0:
ce:29:6a:fb:e9:1e:03:a8:8f:af:36:de:10:13:01:
a8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:57:FF:42:AC:E1:3C:69:FA:C8:12:02:97:8D:8B:7F:9F:F9:48:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/25878310-850e-3093-9425-ac95bfdc384b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:501:8a29:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:63:4f:9a:02:a6:31:45:d5:6e:d7:f8:90:1e:2c:e7:1b:f9:
40:a7:4d:05:9c:6f:27:4e:94:2b:62:ca:95:81:b8:70:41:c4:
6f:46:c9:fe:69:c9:f0:fb:c8:7b:76:bd:5b:5f:90:01:e6:58:
6a:17:c3:ab:31:87:c0:d3:03:f1:31:fe:02:d6:59:1c:70:e5:
c7:5d:42:a9:be:21:33:a8:76:6d:a6:da:5d:51:95:16:5b:ad:
63:50:cf:1e:c0:49:6f:ae:ab:71:7e:2f:0b:ae:4f:27:e9:2d:
59:67:84:14:18:fb:50:fe:e3:c8:b6:1f:4a:a6:b2:32:c2:5e:
46:41:79:67:a3:9b:a6:9a:d5:4f:cf:26:3e:56:11:20:65:ad:
2e:a9:d0:b2:d4:2f:26:15:d4:b2:3b:31:c9:c7:fe:77:72:3f:
a3:54:74:00:ff:60:4d:09:28:17:ec:79:40:81:5b:5a:fd:d7:
0f:49:9d:54:f2:ca:81:64:c8:55:29:ca:69:ef:03:fa:f4:1d:
a8:aa:9e:a7:11:08:5d:ad:5d:d9:7b:43:d2:d8:b8:75:e9:e3:
12:bb:00:54:6d:57:7f:7d:85:1d:cf:ad:5d:6d:a6:f8:16:64:
55:b3:b0:c4:43:2a:9f:49:59:1b:08:bd:7d:43:45:b2:f8:e7:
92:6f:e4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:33:07 2025 by rpki-client