Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5991c9c6-136a-3223-b12e-b506b2b20c42.roa
File: 5991c9c6-136a-3223-b12e-b506b2b20c42.roa (raw, json)
Hash identifier: x3ICM3viKITnd7mSXftkbO7ltNDJ7UGqAqvJ58iGS+A=
Subject key identifier: 6D:A6:4D:75:99:15:D3:DD:78:71:92:2E:4C:9A:B2:1C:A7:D4:8F:BA
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183CB3AE81CD59BCD5E3A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5991c9c6-136a-3223-b12e-b506b2b20c42.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 397203
IP address blocks: 2001:500:126::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:cb:3a:e8:1c:d5:9b:cd:5e:3a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=63b2a055-e6d2-4cbb-bca9-4a94f5754524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6c:8e:c7:f1:a9:80:04:81:5e:25:f9:01:05:
0d:2d:9b:0f:bf:6b:a9:ba:a7:7f:e9:3b:6f:63:a5:
75:60:f3:f6:5f:c4:3a:a9:a8:7b:c8:91:bc:d0:1c:
52:e5:3f:27:d9:3c:3a:23:5a:aa:94:46:56:b5:43:
e5:d1:85:a9:0b:6c:54:ce:7d:59:3f:68:5d:cf:6f:
d1:95:e1:bf:5f:1d:b1:b4:27:2b:19:ff:70:11:b4:
c1:d6:aa:54:5a:ed:ff:14:95:84:29:44:58:ab:60:
3d:25:c4:ef:8e:79:43:b5:e2:c9:eb:dc:9b:2f:ba:
20:71:66:4a:f8:90:42:91:ef:4c:ef:a9:e6:c9:81:
d6:80:6c:8f:49:61:aa:86:28:70:45:8a:17:91:01:
e1:69:a1:35:1e:27:85:ab:06:16:e3:93:08:60:13:
f4:76:95:f3:da:2b:ae:82:f7:1b:a7:0f:49:1a:f1:
ad:34:19:81:8d:07:cd:25:7e:3e:d1:9a:e6:4b:0a:
0e:9a:19:b7:8d:9d:7b:f0:9a:04:86:9d:d2:6c:38:
d0:38:63:bd:65:15:4f:bd:b0:d7:f6:04:bb:45:b7:
4d:c9:95:7e:5d:07:dc:08:6e:5d:c3:22:45:a3:5e:
67:6f:d4:d9:09:1d:7b:3c:be:b5:fd:67:4e:fc:d1:
82:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A6:4D:75:99:15:D3:DD:78:71:92:2E:4C:9A:B2:1C:A7:D4:8F:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5991c9c6-136a-3223-b12e-b506b2b20c42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:126:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:05:30:ff:40:6e:3a:a1:86:6d:1d:16:7c:4a:2e:ed:19:f1:
ee:9a:ae:04:3f:55:2e:6a:71:bb:fb:69:df:55:3e:64:1d:76:
03:60:ef:d2:b9:16:88:db:f1:79:0a:71:c3:5b:b5:45:0c:a4:
aa:9f:10:71:47:fe:29:a3:ca:f6:71:e6:54:d1:fb:12:f4:2f:
2c:50:4b:a9:4a:50:e0:15:c4:8f:cb:c6:38:f6:b1:ed:52:99:
47:6d:d9:51:5e:17:2c:4a:a0:5a:ec:a7:f4:99:3d:38:8b:ac:
06:90:8d:e8:72:cf:6b:2d:50:36:55:dd:70:77:e4:ab:55:ea:
da:16:dc:42:3a:d2:a7:16:d5:c2:2b:9d:3f:42:3f:07:57:b1:
96:3f:a7:42:06:74:ac:3b:a2:05:6e:00:a6:5f:fd:ae:d4:a9:
c7:ab:e3:4b:fc:1a:50:02:76:68:8f:5d:d5:68:43:ac:e1:2a:
6e:47:0e:e0:f2:f6:f5:21:f1:37:0b:16:7d:0c:7f:ec:bc:0c:
07:88:9c:13:4b:72:00:88:ac:52:cf:7e:37:94:e3:68:49:5d:
f8:44:8f:3b:d5:bc:61:1e:bc:ee:49:65:a6:56:19:5e:7f:5f:
e2:d7:cc:50:af:68:d8:22:c7:ae:33:ca:3a:b7:f5:7b:96:37:
aa:54:5b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:22:42 2025 by rpki-client