Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/368dfe31-e7cb-3bb7-8d5d-32358937e867.roa
File: 368dfe31-e7cb-3bb7-8d5d-32358937e867.roa (raw, json)
Hash identifier: 0w7xIt8Bws5WB8arZLDG33zQMdEIkIkdpDPlzO6Ik9E=
Subject key identifier: 0E:8F:D4:0B:3C:FD:16:01:5B:4E:DD:7A:64:7F:F6:60:45:6C:56:68
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183C73D1409822C34F8E100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/368dfe31-e7cb-3bb7-8d5d-32358937e867.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 396569
IP address blocks: 2001:500:127::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:c7:3d:14:09:82:2c:34:f8:e1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=0995a882-c81e-4210-a48c-2d78bbbce4c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f2:fe:38:8d:d1:51:e0:ad:cc:51:23:c9:b2:
e3:45:d6:d0:d8:3b:d0:fe:72:2a:39:e9:c1:3f:3d:
a9:49:e9:ef:0a:c0:d3:17:2d:61:a7:bc:b4:fb:dd:
c4:9f:b1:18:9d:47:6d:59:89:3c:94:2b:a4:4d:9d:
ad:d3:ef:b9:cd:cd:aa:ae:2e:b7:fb:d2:3b:dd:91:
8c:83:b2:da:8d:75:2e:fe:f2:ff:ad:9c:93:dc:5b:
98:de:09:fb:62:df:59:a3:3a:59:a4:48:b4:ed:5d:
68:99:5c:e6:4b:06:bf:55:b6:89:ca:ba:11:c9:1f:
6a:8a:e2:a3:cc:8a:5e:ef:08:75:a2:dc:da:93:99:
1c:7f:a9:5b:2c:40:fc:a3:07:50:35:01:fe:34:ee:
b6:f6:c7:2f:a2:8b:b4:b0:6a:2d:fd:28:f7:d4:fe:
f5:f6:05:d7:44:a5:df:ae:7d:6e:aa:cb:7f:4c:1e:
8a:b9:e4:a4:5b:50:45:08:6c:05:20:e6:aa:89:da:
d9:4d:12:e9:0f:b6:12:43:fa:61:3a:6c:cc:48:b9:
83:b0:33:c0:07:2a:56:0a:39:61:d0:cc:91:8b:02:
53:f4:5e:e5:46:42:2c:69:0c:15:56:f2:0e:04:af:
22:83:62:a6:a1:4d:73:14:16:f0:59:7f:64:af:6f:
ed:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:8F:D4:0B:3C:FD:16:01:5B:4E:DD:7A:64:7F:F6:60:45:6C:56:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/368dfe31-e7cb-3bb7-8d5d-32358937e867.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:127:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:18:07:77:aa:d7:62:1f:7b:91:b1:8d:b0:18:5b:44:ed:e0:
38:13:dd:d8:80:21:a6:75:4f:d5:7e:29:28:25:99:ec:df:50:
3e:1b:5b:f1:c5:53:45:49:f6:83:ec:a1:2a:80:eb:54:ab:d3:
55:4a:0d:87:29:8d:a7:6d:21:96:d3:0f:fb:55:48:3c:be:d9:
88:db:f4:fe:4b:ed:0c:58:24:77:9d:d2:38:27:aa:97:34:56:
6e:80:c4:20:d4:74:23:a6:ba:9a:7f:78:b7:1b:96:a6:90:2b:
43:f9:a7:ee:d9:6f:e0:a8:f3:ab:e4:c4:c7:e4:45:f6:73:a4:
77:67:5d:67:4d:08:d7:fc:66:c3:18:1d:92:2d:8a:66:cc:62:
20:4d:70:cd:06:f2:c0:87:3b:31:e4:9d:2b:d1:00:1c:b3:81:
93:73:37:18:12:60:e0:1c:a1:36:d7:9f:22:a3:36:5d:23:25:
3a:ca:32:34:cf:6a:71:ec:09:38:ef:dc:dc:ca:fd:38:f1:b4:
69:31:33:5c:7d:7c:04:a9:d0:c4:d1:bf:5c:bc:0e:e3:0a:fd:
6c:24:f3:a4:47:4e:7c:36:fe:a4:70:59:43:99:44:3e:67:c2:
e7:be:cd:6f:9c:b2:db:c3:86:69:0d:3d:65:0c:d7:75:cb:4a:
bf:d3:a2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:07:30 2025 by rpki-client