Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3250d07f-9b0d-3ed1-9825-8d65ff849250.roa
File: 3250d07f-9b0d-3ed1-9825-8d65ff849250.roa (raw, json)
Hash identifier: 9lnTo8QIekMohhZmS2eLOwaM4drcM/n+fxqhRKIJMoU=
Subject key identifier: 9A:E9:13:E8:A8:A0:57:C2:80:71:44:37:04:CD:A9:4D:15:2C:8C:9D
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285849393E92E393C3793FF8051D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3250d07f-9b0d-3ed1-9825-8d65ff849250.roa
Signing time: Tue 18 Mar 2025 01:00:38 +0000
ROA not before: Tue 18 Mar 2025 01:00:38 +0000
ROA not after: Mon 16 Jun 2025 01:00:38 +0000
asID: 396568
IP address blocks: 2001:500:120::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:39:3e:92:e3:93:c3:79:3f:f8:05:1d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 18 01:00:38 2025 GMT
Not After : Jun 16 01:00:38 2025 GMT
Subject: CN=d51b4e90-68c2-4e30-8922-e1d02ad42fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a8:2c:c4:de:92:62:a7:78:9f:06:bb:b4:03:
7d:e2:69:c5:e1:0a:4f:84:b9:0d:55:dc:c4:bf:88:
d1:34:9a:bf:cc:30:e9:34:84:0b:e1:5f:e4:79:72:
c9:d0:a3:e0:5e:34:64:4d:b5:cb:38:8d:7f:53:0e:
68:11:12:cc:d0:e2:1b:44:dd:1f:0d:56:0d:ff:52:
88:e3:6a:0c:1c:4f:2b:6e:e1:77:c1:13:56:c0:46:
1c:60:4c:59:d3:0c:47:b3:ec:bc:5e:62:9e:2b:0f:
05:85:c2:6f:77:2e:16:fc:a2:0a:f1:5d:9d:08:0f:
1e:09:ee:93:51:30:3a:de:2c:b7:37:c2:5f:80:24:
56:87:c5:27:dc:92:39:68:a9:1d:7a:9c:19:df:42:
31:24:69:58:cd:09:fb:e4:41:af:f2:b8:e3:cb:99:
3a:9d:65:d3:b4:45:d3:68:32:cd:c2:ea:e1:08:93:
ff:5d:f2:50:e3:a9:75:48:2b:bc:20:46:e1:4d:27:
cd:9f:ba:01:4e:c7:b3:1a:24:be:b2:38:64:a9:54:
cb:a3:b1:ca:0b:da:1e:c6:4a:57:90:d6:a3:42:de:
9b:4b:a8:46:a7:fc:c2:9a:65:3c:54:71:1b:90:10:
ad:dc:41:76:d3:bf:a9:e5:21:b2:11:c9:f4:67:5f:
56:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E9:13:E8:A8:A0:57:C2:80:71:44:37:04:CD:A9:4D:15:2C:8C:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3250d07f-9b0d-3ed1-9825-8d65ff849250.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:120:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:69:d9:8e:e4:38:c2:91:a5:48:64:10:24:37:f4:48:85:d0:
da:cd:4c:5e:63:e7:f5:13:28:0f:d9:d1:bd:27:d6:4e:5b:ad:
05:4d:95:44:79:4a:97:cf:44:b4:38:25:a4:54:ae:b0:4c:5c:
7a:93:29:2e:9e:f2:0d:b8:5c:8e:03:42:1b:54:d5:80:e7:25:
a7:0e:1c:38:41:99:b7:93:f9:e0:99:bd:28:71:a9:80:29:69:
7d:46:bc:d3:95:c1:c8:dc:f9:d9:7e:e9:1f:e7:04:d4:c9:9c:
3d:e2:73:2f:1f:dc:07:51:0f:cb:6c:8d:23:b4:46:8c:be:3e:
23:f1:3c:c4:fa:0e:5f:05:65:fd:14:7b:e0:00:de:f7:00:a7:
ad:61:d3:30:f5:ed:d2:32:31:34:45:f5:d0:be:ff:e9:db:2d:
8b:cd:aa:90:78:29:b2:5f:02:d3:d0:49:4a:f4:a0:6d:79:ba:
d7:20:8e:96:8d:a7:80:bf:f8:fa:8b:3a:e3:e9:5a:e2:6b:dd:
b1:07:dc:3b:78:64:be:dd:41:59:21:7c:03:c2:79:b6:67:4c:
e9:4e:79:38:81:4a:54:05:51:59:d9:39:1d:3a:93:51:1b:03:
a7:18:96:ab:c9:50:61:d1:a3:b9:c4:8f:10:20:75:ea:3b:8c:
2f:55:49:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:21:36 2025 by rpki-client