Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/518bdc59-1c87-3303-a004-61ae30e5c7dd.roa
File: 518bdc59-1c87-3303-a004-61ae30e5c7dd.roa (raw, json)
Hash identifier: W81HHuXWP28w0mm7oG9xcEORwhLGkLperjvgNlmQg0I=
Subject key identifier: DB:F0:5A:2A:88:9D:A0:35:DB:0A:2C:C6:5F:15:A3:D9:23:50:CA:CE
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285849244E93E7F25BE36F79CB2D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/518bdc59-1c87-3303-a004-61ae30e5c7dd.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 396582
IP address blocks: 2001:500:122::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:93:e7:f2:5b:e3:6f:79:cb:2d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=251496a0-ba44-4e6a-878d-aca06df5485a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4f:af:b6:dc:34:5b:19:97:e7:d8:3f:10:dd:
01:8d:dd:8f:7c:37:d0:d2:b2:df:96:79:23:ea:1f:
34:98:9c:0f:dc:1f:19:0c:c4:45:f5:16:ff:38:d2:
e2:15:ca:a5:2a:82:a7:7e:fc:7e:50:2e:77:cd:29:
d2:c4:01:38:4c:04:e4:2b:3f:7b:c2:8d:43:5b:6b:
90:e0:65:9c:92:85:02:d1:39:2d:f0:d2:21:b7:22:
b4:01:9f:69:58:e6:d5:fa:8b:08:88:62:18:b6:3a:
41:7b:18:03:69:c2:eb:d9:62:c2:87:04:ab:9b:fb:
dc:8a:35:a2:eb:37:f5:cc:78:bb:2f:12:db:83:87:
e7:8b:c7:19:ca:d0:1d:fc:77:bf:2d:e2:40:96:7f:
95:8f:64:76:76:5b:a3:3c:6c:1b:95:a1:59:7d:df:
36:b8:50:7e:97:8b:be:27:f1:c9:59:29:ba:93:11:
fb:d6:b1:e9:65:a1:b9:fd:93:0b:d0:d9:14:04:0b:
09:c2:78:d2:1b:1a:68:5a:51:37:b3:d6:14:f8:4a:
53:51:a9:7c:93:9d:be:dd:15:84:c3:66:68:f9:1e:
9c:33:de:c2:39:6e:5f:c0:3c:a1:80:6a:54:cf:54:
b7:89:11:c0:db:50:85:c2:38:d1:b0:a6:bb:0f:08:
f0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F0:5A:2A:88:9D:A0:35:DB:0A:2C:C6:5F:15:A3:D9:23:50:CA:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/518bdc59-1c87-3303-a004-61ae30e5c7dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:122:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:4c:c7:e2:1f:ca:e4:7a:7a:a3:6d:a5:44:b9:ab:1b:96:f3:
3a:18:9b:d8:aa:e8:a8:a6:88:0c:f6:f7:a5:0c:ec:df:05:e6:
f5:77:c4:b5:a8:cd:66:50:80:7f:0e:42:95:f5:a1:cb:06:9a:
c0:2e:3a:cd:83:ee:f5:5a:c4:f2:43:9f:d6:fa:0f:ad:8d:a4:
09:b3:c3:f9:3e:c0:54:58:ea:8d:14:8c:21:77:6a:ef:78:6a:
ab:9d:91:9e:97:c4:df:66:ae:f1:ae:c5:41:15:ea:90:d9:a7:
8d:f1:80:fa:c7:ed:de:c7:9f:1d:d8:c5:82:c4:a1:30:46:0e:
c2:e8:04:82:8d:d1:ab:57:26:2a:ee:4a:61:21:60:61:d6:9a:
86:be:f9:46:c9:41:ab:6e:3a:58:8c:e4:4d:a3:66:e1:b7:ab:
c3:ce:e5:89:b0:40:ec:c9:5a:3d:a8:d0:ad:f0:9f:86:c9:44:
3f:7f:03:7d:b7:2b:68:6c:d6:3c:dc:fb:4b:ca:aa:07:96:59:
49:87:e1:e4:7d:b9:ac:e2:81:dd:09:6e:61:63:2c:d1:bc:ab:
77:cf:b0:25:ad:b4:70:40:5c:ed:31:5f:dc:33:47:78:7f:c1:
cd:6f:93:97:31:db:cc:1b:44:2b:4e:7c:5d:a2:2e:5d:32:3c:
cc:23:6c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:13:03 2025 by rpki-client