Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/720da740-2fed-3de8-9c25-a4f65a285b1f.roa
File: 720da740-2fed-3de8-9c25-a4f65a285b1f.roa (raw, json)
Hash identifier: LatTBRm+rHE74e2UHLlVLUQjG7xa4V4k7F1nOyGRqsA=
Subject key identifier: A8:0E:EC:B3:A6:4F:43:E5:BA:EE:91:A3:42:34:E2:94:F7:66:A6:48
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285849244E9545075A0C760207F020
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/720da740-2fed-3de8-9c25-a4f65a285b1f.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 396571
IP address blocks: 2001:500:122::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:95:45:07:5a:0c:76:02:07:f0:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=e5efd1de-bbdd-4e73-acfd-e78058b20ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:75:ce:8b:4d:92:10:2a:1e:b3:83:91:a3:a0:
97:88:ac:03:04:55:24:10:fa:f8:3e:a7:90:70:1e:
e4:00:10:f0:fd:aa:46:b0:71:3e:6f:9a:c0:94:5a:
ed:53:fc:9d:6b:d0:bd:ec:1f:bb:e1:c6:9e:74:bf:
d7:33:51:51:49:88:d3:b4:d5:d2:13:22:e8:89:c8:
8a:db:b9:b5:75:5c:ef:63:68:b7:67:a1:a7:96:a9:
b6:6c:1c:47:dc:2f:80:01:08:74:0b:73:e0:a5:3e:
91:65:11:7a:e7:ba:08:f9:03:01:72:64:b4:b6:9e:
74:b8:5b:80:f4:18:4f:b7:66:bb:96:76:6e:cf:9b:
6b:6d:d8:e9:d9:f5:d9:40:75:46:3b:14:20:2a:fb:
07:ba:05:76:96:1c:62:59:a3:ab:13:c5:0c:7d:1e:
64:ec:73:be:3f:57:3a:65:84:29:d2:63:55:ef:62:
b8:12:79:24:da:56:b0:16:60:1e:32:9c:1b:6e:58:
a2:94:5b:74:0b:1e:48:ae:f5:5e:5d:19:a6:af:9b:
3e:b3:fc:b9:98:33:a0:82:54:e4:d7:62:45:05:cd:
92:84:ac:b1:04:2c:cf:6a:c9:07:d7:12:fc:96:a9:
7a:ed:9f:f6:1d:9a:26:a7:5d:e5:25:e8:b2:e0:57:
ca:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:0E:EC:B3:A6:4F:43:E5:BA:EE:91:A3:42:34:E2:94:F7:66:A6:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/720da740-2fed-3de8-9c25-a4f65a285b1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:122:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:a6:cc:38:8a:e6:44:e1:b8:30:71:f3:38:e4:64:1b:8a:5c:
50:ef:c2:d2:20:e8:a7:4f:be:0e:e4:38:c0:72:37:52:d9:dd:
65:c5:f2:93:28:74:60:e3:06:76:70:e7:e5:10:8c:32:1a:b5:
0a:92:79:09:53:0f:62:e4:2b:65:e8:c0:24:0e:e3:72:62:9e:
6d:e1:c6:24:ac:fc:a5:30:71:b3:e7:a5:4c:04:c5:a6:61:89:
69:c6:25:e3:d2:ad:fe:21:ab:0a:5e:ac:f4:c7:55:70:dd:dd:
8b:9b:c5:34:e2:6b:7f:43:65:b3:1d:5f:c3:58:3d:d7:c7:8a:
69:ee:4c:c8:a2:6a:d8:8e:76:6f:2f:2c:a2:7f:1d:4a:c9:b0:
05:a6:e1:16:34:7e:02:9d:2f:73:0e:2c:ff:55:bd:1d:c5:72:
00:91:1f:7c:ca:e1:be:be:04:ef:0f:fd:33:66:b5:ea:18:47:
a6:23:75:74:63:54:87:e9:5f:43:71:b0:b3:73:95:63:f9:17:
37:67:de:97:89:76:7f:a7:54:f9:5a:ee:57:ee:19:80:05:9f:
c1:0f:ac:d5:f8:9b:74:34:27:7b:2e:95:ef:06:c6:c0:d5:2b:
87:79:1f:44:0d:91:05:93:70:49:e2:2d:ee:77:4e:2a:fa:d9:
24:38:50:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:12:36 2025 by rpki-client