Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4936db3e-8198-3e95-8fbd-99f554fcd42f.roa
File: 4936db3e-8198-3e95-8fbd-99f554fcd42f.roa (raw, json)
Hash identifier: YKpVXSLq8mnexyYdMZNoZdeMzu25cGyF3DW8SDhO4W4=
Subject key identifier: 9C:8C:79:F4:C4:B4:48:B0:63:63:5B:3A:59:FA:54:F1:28:C8:55:F7
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183CDE458B6F9B6195AD7C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4936db3e-8198-3e95-8fbd-99f554fcd42f.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 396577
IP address blocks: 2001:500:124::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:cd:e4:58:b6:f9:b6:19:5a:d7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=9a248f7d-b5bc-4fa7-98a8-a005380674dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cd:d8:23:52:55:3e:3f:a1:70:40:86:6a:a6:
9e:90:46:df:bd:0a:d6:23:c0:fd:88:9a:a0:b2:d7:
59:b4:54:66:ef:8b:b8:3a:62:8a:5b:a3:ee:bf:ce:
c5:b4:ca:33:e4:e3:98:b8:b7:0a:aa:5b:d3:c2:12:
3e:22:47:f4:ec:ec:21:27:24:ed:77:3d:64:89:44:
33:a2:d8:df:4d:92:96:c6:14:52:5c:54:e8:b5:d1:
11:01:f1:bb:2b:8d:40:68:fa:a5:9d:6f:d2:3c:fe:
d7:2e:43:f7:e9:5f:67:58:10:94:b3:4c:49:2e:4d:
38:06:94:2b:f3:2d:38:cc:54:08:d0:bd:4d:3d:b4:
0a:d7:12:2b:e7:c9:0e:d6:9d:39:f1:cf:1e:19:d6:
4f:fe:fd:fd:6c:2a:41:57:41:3b:e0:22:72:25:8d:
7a:ae:f7:b9:d0:65:fd:70:4f:30:97:42:7f:15:0d:
e0:40:bf:f2:ee:98:64:de:27:12:b8:b9:d7:6d:76:
21:cd:e8:86:61:79:e1:48:3b:3d:00:e9:96:a0:28:
ad:76:80:a1:62:77:ef:b1:f5:ea:0f:94:ed:2a:0a:
30:54:e2:07:1d:fe:f7:6f:17:fc:8a:e7:b8:68:1b:
d6:11:62:61:68:6a:03:5f:0f:de:a3:35:0b:94:9d:
de:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:8C:79:F4:C4:B4:48:B0:63:63:5B:3A:59:FA:54:F1:28:C8:55:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4936db3e-8198-3e95-8fbd-99f554fcd42f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:124:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bf:e4:c9:2b:27:64:5b:50:c3:f4:10:bf:b3:dc:b1:cb:b1:96:
bb:77:46:40:6f:99:04:7e:6a:a8:9a:34:0d:b2:bb:9f:22:8a:
39:06:58:30:52:a1:46:83:be:2a:28:b8:da:94:da:47:45:69:
d2:9a:d3:1c:1d:99:eb:ff:69:ca:d9:18:76:34:6c:94:21:46:
51:36:df:b2:6a:f1:bb:64:4e:a6:9a:c5:2e:b1:ed:40:6c:4d:
e5:80:99:4f:ae:8a:60:de:f0:00:01:8c:10:7f:61:06:f0:44:
ec:8b:19:5c:8a:15:95:e8:7d:78:de:d1:c0:c8:3a:18:ab:30:
ee:69:80:79:73:4c:44:7a:dd:4f:47:c8:c9:c1:0e:97:98:72:
d4:e2:4b:41:1a:47:df:42:c4:a5:d7:ec:24:e4:55:72:90:0b:
84:e3:af:a7:da:ac:2a:8b:ea:38:b3:48:34:c7:44:b5:01:2d:
72:c4:43:c9:5e:d8:62:44:bc:92:12:67:88:89:24:13:aa:1d:
f6:c9:15:81:6a:81:81:3d:26:26:4a:2d:0d:ea:72:81:89:f8:
f1:4e:8f:f9:90:90:0a:e2:8f:15:d8:85:4d:e0:28:a6:72:4d:
90:0d:df:ea:d6:3a:e3:67:8a:a1:1f:72:1c:4e:0f:a2:af:41:
36:a0:d9:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:35:50 2025 by rpki-client