Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b0df2aa-b2e6-3d9d-a59f-f37cc5f9d53e.roa
File: 4b0df2aa-b2e6-3d9d-a59f-f37cc5f9d53e.roa (raw, json)
Hash identifier: fWBlf+wrU5UPdu46TWN6OalxgSu4AJ+kdReQrn7S3RM=
Subject key identifier: 85:8A:95:AB:45:82:3F:B0:D7:BC:91:74:8E:D7:34:A6:94:12:4E:FA
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183EC0560680D6D2E364880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b0df2aa-b2e6-3d9d-a59f-f37cc5f9d53e.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 36622
IP address blocks: 2001:500:127::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:ec:05:60:68:0d:6d:2e:36:48:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=fb7e805e-21a1-4fa3-9de9-9805ac0e8be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e1:46:24:d4:f7:ce:1f:ad:28:52:52:f0:ab:
2e:f3:3b:16:e6:1c:53:c3:34:17:9d:8d:72:9c:34:
15:f4:1f:88:bf:77:7c:2f:3c:c1:4c:14:fc:f2:99:
99:6a:04:8f:17:5f:f0:ff:87:2f:bc:57:60:51:c0:
ee:7d:86:36:a4:01:42:75:32:f5:11:0c:58:ff:20:
c0:05:49:31:0e:5e:2a:93:b0:cf:80:53:fb:9e:1b:
93:68:ad:2b:38:db:64:35:7f:82:af:36:a3:3c:03:
f4:35:db:50:6b:2e:ad:e0:48:db:61:e3:92:b9:0c:
40:8e:56:46:b4:9c:72:a9:80:c2:94:e0:2d:2d:69:
29:8f:26:f6:80:31:d8:53:79:3e:f1:32:e7:c9:8a:
3b:63:31:20:05:47:41:55:b2:7b:aa:76:dc:7e:8d:
bf:07:c0:ee:d9:62:2f:7e:0c:22:40:6a:ad:51:7b:
25:36:ca:24:3b:c4:63:fd:de:35:07:68:de:eb:ab:
fc:6f:b6:ee:a7:6a:60:05:54:3f:51:26:d1:2a:7e:
4c:0b:10:d8:a6:15:29:1f:51:c7:ea:0d:04:88:ff:
85:49:be:b2:c3:73:86:1e:86:33:1c:02:5a:29:43:
65:de:32:4d:78:a3:f5:da:f3:ea:f7:be:14:ef:30:
8c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:8A:95:AB:45:82:3F:B0:D7:BC:91:74:8E:D7:34:A6:94:12:4E:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b0df2aa-b2e6-3d9d-a59f-f37cc5f9d53e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:127:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:91:ac:00:36:b5:6f:c9:69:cc:3e:8c:a7:22:f3:7e:c5:c9:
99:4d:fa:cb:05:be:7b:ba:61:64:10:69:1a:c2:18:4a:e8:81:
01:cd:17:25:7a:6a:cf:b0:56:02:0f:6d:5e:31:72:4a:ac:2b:
38:47:13:e0:f2:00:1a:d7:51:cd:2f:9b:27:ba:a3:fb:0d:c7:
88:e0:5d:2e:0e:26:9f:2a:b6:62:27:9b:66:0d:fc:11:44:44:
09:62:d6:4d:96:70:d1:80:12:93:ec:b0:e9:83:5d:d9:04:54:
b4:b9:89:1d:a5:aa:e2:58:ab:68:34:af:b6:39:c3:2e:bd:5f:
3e:65:f4:bc:34:5d:0e:6b:1d:97:a4:58:9b:27:c2:02:6d:16:
d3:97:9f:c6:a1:bc:64:f7:b4:b2:7d:a8:d7:0e:a7:6c:83:d8:
0c:54:24:a9:80:63:61:80:34:f8:f5:c6:4d:6e:89:f4:31:dd:
14:cf:8c:df:59:f7:2f:c7:4b:2e:c5:c0:56:40:e4:02:25:12:
f6:11:b8:a0:21:99:3e:0f:71:f8:fe:d6:1c:c1:da:65:c4:75:
7d:b2:53:d7:15:d0:0e:d0:cb:e0:8e:d8:35:3a:dc:5d:ef:dd:
d3:ae:64:9f:f6:89:76:ae:69:a3:f6:9e:26:9e:28:d1:ab:84:
27:c0:c5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:57:18 2025 by rpki-client