Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/451b289c-43de-3e80-bb28-59eca9431a1b.roa
File: 451b289c-43de-3e80-bb28-59eca9431a1b.roa (raw, json)
Hash identifier: 8T0ww2lB0TCOduEBYkeZlEbm1VdcgPCGmFCZszyxBMI=
Subject key identifier: E4:6C:9B:66:9C:4F:0D:A4:A4:97:6B:9F:E9:49:28:D2:CD:05:B8:AF
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584917DC173913D5511B7EE21DC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/451b289c-43de-3e80-bb28-59eca9431a1b.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 20172
IP address blocks: 2001:500:123::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:17:39:13:d5:51:1b:7e:e2:1d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=c24e71c1-d3c1-4b59-862b-c51fd8839791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7f:b4:7e:af:6c:3f:7a:04:c9:91:97:d6:6b:
b3:44:18:ea:93:57:86:5e:63:cd:d7:b1:19:4e:eb:
49:de:3b:8b:cc:97:66:64:ac:8e:c0:b1:f2:26:b3:
b6:a1:be:7c:7f:92:69:9c:ae:a7:00:84:71:57:80:
1c:9a:26:c7:e5:83:fd:39:0b:8a:9b:2c:17:e7:07:
75:7f:01:86:f9:4a:73:01:c6:d9:c9:5b:c9:fd:fa:
d1:cf:70:77:79:d1:f3:d2:36:23:7b:17:a0:98:e5:
24:68:85:c0:82:c0:d4:76:fd:be:8f:65:8b:d8:fe:
db:ab:80:a9:e8:98:3a:b7:3b:1d:44:13:03:55:76:
29:3e:fd:47:19:99:02:db:f4:c2:58:ed:0d:a5:c9:
eb:c2:49:30:86:07:51:0c:30:89:84:2b:10:d6:61:
f2:43:f7:80:02:10:3f:8d:0f:de:de:a2:38:1d:1e:
51:aa:5d:af:34:78:60:5d:ed:88:2c:7f:cf:44:a3:
7f:b8:b9:12:3f:2c:bb:6a:32:3c:1f:a3:cf:df:1f:
96:e7:f3:2c:00:f4:33:91:7b:da:72:42:e2:e9:e3:
7e:98:37:e2:0c:e7:a2:40:0a:25:87:7c:95:be:2d:
1d:13:eb:28:e4:e6:0d:f6:da:2a:9f:00:46:c1:15:
79:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:6C:9B:66:9C:4F:0D:A4:A4:97:6B:9F:E9:49:28:D2:CD:05:B8:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/451b289c-43de-3e80-bb28-59eca9431a1b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:123:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:87:de:54:ad:be:0f:eb:9a:13:f1:46:f6:92:37:f8:64:6e:
cc:cd:4f:4b:ba:1f:11:25:33:93:c5:24:01:94:7c:d7:e9:5d:
4d:e0:5f:22:a4:4c:b8:d2:9d:c5:ef:32:ee:6a:b9:88:15:fb:
b0:13:e7:39:f8:fb:51:3d:ec:94:5e:ac:ec:cd:a6:38:94:65:
58:e2:42:65:ea:d1:c0:01:26:3b:c0:b4:dd:b5:ae:f8:cd:db:
7c:48:22:46:1b:34:30:87:fc:f0:3c:b9:98:63:4f:e0:c0:a1:
0d:eb:09:03:af:56:b9:19:87:13:67:63:86:b2:63:a2:2d:e1:
c5:dd:13:ca:25:6f:00:73:16:99:1a:1a:a8:67:f6:5e:97:f2:
61:61:9c:46:35:b9:0a:89:ec:76:d5:1d:67:19:73:7e:53:99:
f9:bf:5e:81:bf:49:e4:55:04:01:ff:44:97:f6:d2:d7:1b:79:
21:27:e3:43:be:83:05:e2:db:ae:7c:0e:1c:85:67:a5:70:81:
19:d4:57:64:ec:7f:41:12:81:5b:f8:cf:86:12:fc:ec:18:31:
89:d5:2d:ec:92:b6:fb:28:96:8a:d1:fa:dc:b0:8f:73:98:61:
ed:44:5b:b9:ab:a3:f7:f9:6f:78:fb:df:00:24:f0:12:02:a7:
9b:f1:c6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:52:30 2025 by rpki-client