Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4e9e6fa7-65b3-311e-a4b5-1101a3ab0c95.roa
File: 4e9e6fa7-65b3-311e-a4b5-1101a3ab0c95.roa (raw, json)
Hash identifier: MSNymT2XwFzIWJE3UhWYzUn+UKun/KM2g+kDarxSzZQ=
Subject key identifier: EC:4E:DA:E1:5C:F5:22:67:1F:66:B3:8A:A6:1D:33:3C:CD:95:17:44
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183E95A4A63FE422BA00C10
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4e9e6fa7-65b3-311e-a4b5-1101a3ab0c95.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 36627
IP address blocks: 2001:500:125::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:e9:5a:4a:63:fe:42:2b:a0:0c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=ea945058-75d0-4421-8f90-1b91b513fbcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:64:23:f4:68:24:bd:a0:03:0c:24:e6:35:98:
67:7e:ac:08:da:40:a4:d5:30:11:83:74:02:48:59:
8e:74:1f:c5:9a:72:8d:40:bd:3c:11:c4:fa:f9:7e:
74:15:ed:66:c3:49:6f:2d:5e:2f:50:db:69:21:8a:
3e:e0:32:43:14:8f:2a:73:7c:19:04:16:28:24:e6:
f3:02:af:bb:03:1d:44:ce:cf:6a:ce:8c:f8:83:be:
fe:d4:d2:1c:a9:37:57:3d:f9:16:24:85:5c:a0:f8:
27:a4:5f:82:76:59:60:19:cb:70:af:c0:d2:6c:32:
fd:34:54:ed:16:62:c7:64:d3:ee:f5:0e:60:25:d1:
0a:57:3d:82:4c:f8:4a:d9:45:05:11:74:b1:2b:90:
29:43:a9:29:28:41:d9:bd:e1:9c:6e:8c:9a:c8:2c:
a9:fc:f9:d9:de:80:d8:60:42:58:86:c8:35:a5:2a:
a8:8e:63:9b:cd:68:c7:fa:fc:c8:73:90:5b:ae:2d:
2f:a0:c2:bc:88:55:5e:04:17:e4:b0:85:27:1b:34:
12:96:e1:c3:07:c1:67:66:b7:e6:75:a9:1d:45:44:
cb:5d:ad:90:50:63:d9:47:51:e1:0c:ff:bf:90:27:
0a:19:65:bf:af:e7:b4:6e:00:3e:c3:de:4d:39:b0:
c7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:4E:DA:E1:5C:F5:22:67:1F:66:B3:8A:A6:1D:33:3C:CD:95:17:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4e9e6fa7-65b3-311e-a4b5-1101a3ab0c95.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:125:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:39:aa:c5:1c:cb:6a:9f:c8:3a:e3:32:34:1c:d3:ab:b8:da:
70:95:94:92:49:be:49:31:9d:15:71:a0:43:b4:23:13:89:3a:
0f:8f:5e:ad:a9:fb:c2:a3:55:9c:e8:0d:a5:a8:1a:60:3f:02:
2a:9a:87:da:c8:86:fc:82:4b:9d:e9:e5:5e:8d:f1:c0:46:a5:
92:40:e1:6b:99:f4:9b:f7:d4:e4:6e:10:24:6a:c4:64:5f:3e:
3c:cb:6e:6e:9c:e2:67:5c:c8:b3:07:23:04:ef:6e:6c:77:ff:
9e:a7:c5:61:25:83:c1:7f:dd:e7:9b:14:3c:ba:80:3a:5f:33:
de:b0:66:f0:d0:00:3f:24:19:cc:26:9d:5d:cd:2c:ba:7d:c2:
35:37:6a:a8:d4:a5:76:68:6f:d3:2b:65:9d:8a:e5:07:9e:9a:
f9:fe:d1:d3:de:50:96:ca:06:2f:63:2e:58:42:b0:c0:a4:bc:
33:37:36:a6:70:ec:87:f2:c0:52:b7:f3:a0:c8:91:69:08:63:
1b:9a:f2:57:75:6e:c1:d5:2f:47:35:d7:5e:e9:6a:18:2a:7b:
99:3a:4e:1f:e6:d3:d7:3d:a4:ab:6a:54:56:bd:8b:f8:38:71:
28:08:7f:38:6d:d8:4c:0e:ce:35:e2:24:27:27:bb:38:8f:af:
6b:f2:03:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:51:54 2025 by rpki-client