Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3db8c747-d14e-3794-b8d7-6f36751d5b98.roa
File: 3db8c747-d14e-3794-b8d7-6f36751d5b98.roa (raw, json)
Hash identifier: mwFMzruRAO+xMlGmyv8tfTAQtY7cQ4qVxa/LCmotp6I=
Subject key identifier: 8C:2F:98:17:2C:C7:22:5F:99:BC:ED:89:E9:E4:30:D9:1B:58:C7:78
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584929E3DA0ED965194FD13EDDC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3db8c747-d14e-3794-b8d7-6f36751d5b98.roa
Signing time: Wed 12 Mar 2025 13:00:53 +0000
ROA not before: Wed 12 Mar 2025 13:00:53 +0000
ROA not after: Tue 10 Jun 2025 13:00:53 +0000
asID: 396541
IP address blocks: 2001:500:121::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:29:e3:da:0e:d9:65:19:4f:d1:3e:dd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 12 13:00:53 2025 GMT
Not After : Jun 10 13:00:53 2025 GMT
Subject: CN=6bc51692-54ca-40c7-8a93-3a3f12fa9a0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2e:bb:c2:1d:da:4f:16:c5:08:e9:aa:46:e1:
7f:3f:87:6b:7a:90:30:11:f3:d6:e5:6c:16:44:a1:
96:f8:fa:e6:9a:21:bc:68:a7:bd:aa:9a:f0:46:60:
91:5b:c2:aa:8f:74:bd:b4:da:89:ec:01:3a:07:82:
f7:9f:f8:ba:46:d7:0b:e3:c9:da:26:13:05:fc:fa:
0e:d7:54:63:e4:cd:4b:2d:6e:e4:6b:dd:b4:77:4d:
68:46:9e:08:19:7e:01:3a:15:37:08:22:d5:86:c9:
42:5d:2d:40:28:4d:1b:02:bb:e8:ba:00:26:81:17:
ab:1e:e2:ea:3d:8d:1d:7a:f7:f1:18:c2:de:fd:9d:
7d:9b:25:8b:0a:5b:b9:5e:97:1f:26:42:8d:94:7f:
94:5a:75:7d:49:50:28:fb:15:c1:2b:59:5a:1b:84:
c7:48:a7:01:48:54:90:cd:19:67:bf:f4:dd:38:25:
c4:2d:c4:61:70:12:94:f7:6d:17:40:d7:9b:55:21:
12:62:b3:2c:2e:03:31:0e:1a:ac:9e:14:42:52:ca:
82:8d:87:12:9d:88:ad:62:ec:a6:da:f1:09:0e:cd:
b7:f6:c8:63:bc:0b:27:12:a0:a5:27:36:1f:95:cc:
72:bd:69:50:ae:e7:e3:3e:96:89:2a:9a:ea:2a:70:
41:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:2F:98:17:2C:C7:22:5F:99:BC:ED:89:E9:E4:30:D9:1B:58:C7:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3db8c747-d14e-3794-b8d7-6f36751d5b98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:121:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:9c:9c:df:2f:ac:db:95:89:d3:74:b6:9f:8b:f3:6b:08:c4:
5b:06:4e:6c:8c:51:2d:23:ca:76:cf:f5:4e:c7:0b:61:f3:90:
32:c6:b4:40:7c:f4:d2:e9:9f:cf:93:59:1c:ed:21:7e:61:56:
be:ce:39:e5:b6:83:d7:7e:75:0e:05:5e:17:b2:d6:b8:6a:92:
a8:01:2c:a4:1d:cc:77:cf:29:3c:b7:20:7a:0c:66:08:b3:b2:
1d:8b:b1:97:31:c2:06:86:9c:de:aa:b1:be:be:ca:ed:1f:21:
c7:42:2e:8d:a3:82:61:97:92:0a:0b:b7:67:f9:8d:d6:ed:8d:
af:4f:95:6c:72:e3:58:78:54:aa:03:54:86:54:5b:92:62:b5:
bb:76:83:b6:93:78:0d:66:76:e6:08:03:7c:c6:4e:7d:68:a3:
57:bb:9f:4e:8a:78:91:b2:3e:2d:70:ce:66:bf:8a:55:3f:0c:
4d:93:0f:cc:72:1c:e5:ab:42:c7:06:6d:17:8a:13:33:db:56:
28:6d:3b:a1:77:3d:ef:a6:24:c8:04:33:d5:92:1e:7f:91:5a:
3c:48:a7:3d:1c:89:79:bd:96:cf:5c:72:7d:05:61:a0:ee:7b:
62:ae:30:95:3d:4f:cb:88:73:3c:05:8b:b0:b1:47:1e:52:10:
19:b0:d1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:58:29 2025 by rpki-client