Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f9d7ff7-5a01-3469-b972-6e43af533947.roa
File: 4f9d7ff7-5a01-3469-b972-6e43af533947.roa (raw, json)
Hash identifier: tqYgLpQlcyr/nvWOMvD+bqRwBRDRAhvOIfmgLSxq7Hc=
Subject key identifier: C1:84:19:E8:EF:EA:FB:3A:97:56:44:3F:70:5E:5F:1E:97:25:95:1C
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183E804C907839E776E4440
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f9d7ff7-5a01-3469-b972-6e43af533947.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 36631
IP address blocks: 2001:500:126::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:e8:04:c9:07:83:9e:77:6e:44:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=e7f860a5-a86a-4ab1-838f-757d66ebfa1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8b:82:99:dc:8b:c8:7c:03:e1:ff:b3:5a:21:
03:fe:77:d6:7d:31:4e:cd:29:d4:5c:78:98:c1:6e:
e1:55:c9:f4:54:f1:ad:8b:a1:f5:ea:08:ca:b5:18:
0f:1b:b7:c9:97:4c:2f:55:be:f5:e1:09:00:06:8c:
06:9d:73:59:96:e2:df:d3:4c:68:91:85:fe:fa:a6:
e0:1f:48:d2:2b:b4:ef:f0:85:19:70:46:c2:24:dd:
bd:63:8d:a5:68:3d:80:d0:6e:db:42:f4:81:c4:5c:
60:b4:94:b6:6a:26:87:27:e0:cd:f8:ba:ed:70:37:
f7:d4:36:1e:79:38:e8:ee:2c:b2:b8:73:5a:f2:6e:
75:e7:7d:76:e9:d8:9e:59:7e:60:34:3a:89:9f:6d:
b9:39:0d:21:c1:d1:59:9d:88:72:e2:cb:ed:ec:d3:
c0:b2:24:d5:e3:fd:c0:61:78:02:b7:32:cd:83:b1:
3e:b2:f5:62:3b:aa:2a:4e:4c:e6:c3:e3:17:9f:54:
cf:11:de:32:33:10:ba:06:fe:e5:c5:0f:94:90:1a:
8b:56:8c:67:2e:7b:12:ff:8a:be:69:c5:f3:7a:0e:
bc:6e:31:c1:e9:c2:16:26:1f:18:a4:01:df:24:ff:
73:80:2b:a9:44:36:e5:9b:22:b8:60:de:17:ee:92:
d4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:84:19:E8:EF:EA:FB:3A:97:56:44:3F:70:5E:5F:1E:97:25:95:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f9d7ff7-5a01-3469-b972-6e43af533947.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:126:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:1e:3b:33:ae:2b:80:b4:38:c6:e0:09:1d:3d:43:0a:d5:6a:
ec:87:88:7c:70:8e:73:11:86:60:96:43:f0:de:c5:e6:f5:ee:
41:00:b8:85:f1:06:c9:09:11:15:5e:1e:a3:ac:cb:b8:9f:c5:
e7:b8:43:bc:a1:8f:2b:01:aa:c4:b8:6f:db:ec:94:40:9c:3e:
e7:7f:92:a9:03:42:b5:b5:68:c5:4d:c6:ef:a6:c7:af:f6:68:
ae:61:fe:60:35:12:43:20:7b:8a:e6:fe:2f:94:4d:8e:49:ec:
1d:48:c2:80:08:eb:69:44:3f:89:88:c7:80:d6:7b:c8:99:c2:
d7:c2:f4:da:2d:16:cd:30:5a:7f:32:45:4f:88:ad:4e:6f:d0:
4e:ca:3a:13:a0:a7:7d:e6:02:f1:ee:6a:1c:b1:4e:10:ff:01:
7c:fb:6d:1b:16:a3:3e:f2:45:a9:3e:b6:e3:19:50:c4:49:71:
3a:f0:e5:f6:fc:a8:49:a4:e6:36:cd:fb:0b:e8:99:53:51:46:
a0:ae:c3:f2:a8:88:43:72:a3:7c:81:5f:de:42:d1:04:16:fe:
bf:19:29:8f:3d:34:37:ed:45:38:1f:f6:73:d5:1d:ff:9f:73:
c4:26:d4:eb:83:08:2b:84:e1:f6:a7:4c:76:e0:40:93:9d:6d:
2a:35:db:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:16:41 2025 by rpki-client