Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a38d017-41d5-3b4d-90ac-33ea69bfc92c.roa
File: 3a38d017-41d5-3b4d-90ac-33ea69bfc92c.roa (raw, json)
Hash identifier: I4/+BU0fGYERruBT5yMJw1RiN2kJ+CzFS0ra4ly6YVg=
Subject key identifier: 1E:37:E5:DF:57:6E:82:97:22:01:A3:4F:C1:9A:FC:66:F0:BB:44:0A
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584929E3D8289A49F828F26E9780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a38d017-41d5-3b4d-90ac-33ea69bfc92c.roa
Signing time: Wed 12 Mar 2025 13:00:53 +0000
ROA not before: Wed 12 Mar 2025 13:00:53 +0000
ROA not after: Tue 10 Jun 2025 13:00:53 +0000
asID: 396587
IP address blocks: 2001:500:121::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:29:e3:d8:28:9a:49:f8:28:f2:6e:97:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 12 13:00:53 2025 GMT
Not After : Jun 10 13:00:53 2025 GMT
Subject: CN=91d127af-6b1b-4c03-9062-e436538f0801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5e:f9:45:06:81:af:38:e9:dc:c2:c7:a7:dc:
63:bc:b6:05:d5:af:9b:6a:08:b7:5c:98:cd:57:50:
3e:bf:ae:df:3e:00:68:7a:a0:09:e3:53:68:da:9f:
3b:18:df:e1:e6:55:8d:90:60:0f:87:7c:5f:2d:f4:
41:eb:32:4e:da:50:82:fb:dd:82:06:60:90:2c:b4:
b8:a2:49:8a:35:8b:7a:04:6d:ce:a6:f3:ad:43:39:
64:7a:ae:5e:e5:76:d6:5e:b9:af:4b:04:05:51:c2:
c9:1d:95:70:2e:05:28:9c:cc:42:11:28:cc:84:45:
3e:0b:de:58:5b:01:58:2a:b7:d8:21:b3:62:2f:06:
b7:fb:a5:d2:6a:71:47:10:5f:eb:30:d9:e3:b5:15:
36:dc:ab:07:62:39:f4:09:37:9f:83:22:f6:ce:43:
e0:65:f0:d1:e6:87:84:e7:0c:4b:03:af:0f:1c:13:
df:f8:4f:70:18:23:73:ef:ff:b0:1b:24:bd:24:a9:
d7:27:6b:6b:92:54:83:0a:c7:0f:48:8f:48:52:99:
bc:bf:3a:3c:d3:32:3f:8b:aa:6f:61:5a:ad:b9:df:
95:6b:31:4a:15:4d:33:52:b0:e6:0a:3c:73:73:f4:
73:db:32:0b:24:0b:63:b5:be:ab:f9:a7:f3:ca:63:
73:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:37:E5:DF:57:6E:82:97:22:01:A3:4F:C1:9A:FC:66:F0:BB:44:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a38d017-41d5-3b4d-90ac-33ea69bfc92c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:121:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:2c:c6:f4:17:e6:59:ce:db:85:83:83:25:2f:73:16:be:94:
78:a1:0a:20:f4:cc:47:5a:70:42:ae:f7:62:f2:32:a4:a5:4d:
51:21:b3:f9:95:9c:c3:f8:9f:c8:82:ed:5b:d5:83:04:ef:3d:
db:16:59:cf:fa:82:e2:3f:71:ec:df:8e:fb:c1:df:fb:4c:f7:
bb:0e:3b:84:db:ba:2a:80:77:4d:af:65:00:f7:a2:2f:e0:71:
ad:13:04:46:53:00:e8:96:f6:6c:10:29:da:7d:2b:37:c6:f5:
a1:fc:86:86:d8:99:90:55:c3:12:bc:22:73:64:3d:dc:85:09:
7d:c0:5c:60:d7:57:66:49:5c:9e:75:7f:bd:a4:35:25:40:c1:
50:d2:88:ae:9d:09:00:de:98:10:ff:59:5b:9e:45:4d:c2:b2:
5b:f0:d0:a4:2f:c7:6c:2f:01:fb:c7:61:0c:b1:22:1b:ca:31:
cf:20:a5:e6:1f:5f:b6:64:9e:47:48:1d:80:fe:d2:9e:db:38:
e5:9d:77:ba:9b:68:42:3c:5c:61:a2:90:ee:f8:f2:0e:db:fa:
6d:67:e1:a1:5e:7a:b2:19:12:d9:fc:ee:fd:39:87:b4:67:83:
6c:16:04:79:46:f0:5a:04:1d:b1:4a:1c:92:24:e0:ed:3c:73:
9a:1f:7d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:49:39 2025 by rpki-client