Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7d10c588-2d28-39da-accb-74d67405c2a7.roa
File: 7d10c588-2d28-39da-accb-74d67405c2a7.roa (raw, json)
Hash identifier: 7/TF6fUzmBG6vWtAfIPjapNaPzBcZTQ6Ds151jLqLqE=
Subject key identifier: C4:CF:44:01:F9:1A:6B:D3:34:2B:71:AB:B4:20:47:7C:10:6C:16:D3
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285849393E8F75EA361810890FB000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7d10c588-2d28-39da-accb-74d67405c2a7.roa
Signing time: Tue 18 Mar 2025 01:00:38 +0000
ROA not before: Tue 18 Mar 2025 01:00:38 +0000
ROA not after: Mon 16 Jun 2025 01:00:38 +0000
asID: 396608
IP address blocks: 2001:500:120::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:39:3e:8f:75:ea:36:18:10:89:0f:b0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 18 01:00:38 2025 GMT
Not After : Jun 16 01:00:38 2025 GMT
Subject: CN=d40260d3-394d-4d88-b5b9-1f33f24c95ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:1a:80:53:84:cd:34:05:09:89:d4:fe:40:2f:
97:a6:9b:ec:ca:fc:07:1d:ae:3b:44:88:5a:34:20:
b2:7e:7d:36:04:65:8b:bc:23:65:ca:3a:79:8a:0a:
71:9a:b5:43:bf:e4:5b:71:ce:1d:f7:52:b8:2d:de:
7b:9c:ad:bc:0f:e0:2b:a8:5d:98:8f:64:a1:6e:e4:
9e:93:41:5c:af:69:a1:f4:dc:b1:a0:0a:10:d6:55:
46:61:d5:ed:4c:a4:7c:25:53:48:88:f5:50:35:b7:
2b:34:8a:2f:43:f9:92:aa:d7:d5:c0:94:e1:db:42:
7c:d5:fd:13:f6:00:11:54:4a:6a:cd:0d:a7:55:02:
c6:fd:2a:be:6e:6f:98:22:f2:31:cb:ec:41:c2:98:
4b:e9:e8:fa:e7:7f:2d:17:b9:14:62:cc:b1:99:dc:
f7:a4:b3:db:c4:7e:aa:83:2c:af:bf:eb:ff:9b:3a:
aa:68:c8:cc:cb:3c:30:76:0e:af:28:4c:de:1a:a3:
bc:d8:ee:1e:7e:6d:dd:77:3a:4e:9a:4b:fb:6b:2b:
91:e7:46:41:a7:a0:60:12:18:0d:8b:eb:6b:13:b0:
cf:f3:4c:95:65:52:8a:98:b6:e1:e9:ba:cf:a3:71:
5f:8f:dd:6c:3d:f1:01:11:1c:a3:ad:29:52:28:ff:
bf:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:CF:44:01:F9:1A:6B:D3:34:2B:71:AB:B4:20:47:7C:10:6C:16:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7d10c588-2d28-39da-accb-74d67405c2a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:120:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:2b:85:e9:e1:21:a8:e3:b7:c4:50:eb:fe:40:17:79:94:8c:
2a:74:e5:bc:ea:cf:06:9f:9d:6e:7e:0c:54:16:76:d6:60:20:
02:b4:6a:7f:97:bd:63:01:37:5c:5f:3a:e3:21:b9:df:11:71:
ba:3b:f2:01:aa:15:da:f8:39:13:e6:1d:b9:04:b9:24:70:46:
bb:55:0e:4c:55:a1:dd:67:e7:a9:f9:8a:35:5d:1d:ef:54:69:
44:1f:af:30:d6:65:59:33:6c:53:b2:38:61:e7:17:59:cd:08:
e4:44:5e:3d:7e:4d:81:18:b4:34:2c:e5:21:43:19:2b:71:89:
db:c4:f3:c9:3b:63:2d:77:1f:d9:f3:34:9a:e0:46:f2:ca:e8:
83:c7:a7:d1:cc:ea:30:5f:1e:93:c4:f0:47:34:a4:b4:26:be:
33:4d:f4:5b:be:4d:5a:f3:81:74:14:e7:8c:43:b7:05:99:d6:
3d:2e:f4:64:1b:e9:43:c5:f5:6b:3d:33:54:0f:47:00:36:dd:
51:82:01:e5:77:71:ab:66:61:40:47:d3:e2:26:74:08:05:c9:
e7:43:7c:69:d5:e4:6a:38:f5:ac:ed:9f:3c:c6:0d:91:e9:8a:
1b:ef:14:48:73:48:2f:7f:23:64:5a:9a:bd:01:8c:90:2f:f4:
6e:d2:5e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:07:17 2025 by rpki-client