Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7e8aae73-2440-3666-a634-39ee27892620.roa
File: 7e8aae73-2440-3666-a634-39ee27892620.roa (raw, json)
Hash identifier: YFNtBa8oo7lHdiJ7wPm0vgB4QUYu7vdTmKwi7vcApRU=
Subject key identifier: 9D:50:A9:50:5A:3F:CC:BC:36:5E:2C:BD:75:8A:30:52:42:0E:7A:22
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183F61F2F2D976B4CEF14C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7e8aae73-2440-3666-a634-39ee27892620.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 36625
IP address blocks: 2001:500:125::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:f6:1f:2f:2d:97:6b:4c:ef:14:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=33588e63-878e-46a3-9a8f-ceb528e18b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d8:ca:3b:b3:ae:8c:5d:1f:cb:f0:32:76:65:
f0:fa:8e:d2:cd:53:08:d4:0e:00:10:fa:02:f5:c2:
31:c4:e7:db:89:d0:0b:ef:45:f4:fb:44:f5:79:d9:
8b:39:a3:1d:fc:a7:cc:c9:cf:8f:81:6b:4c:f5:32:
2c:ea:9b:3f:06:77:28:37:49:c4:83:44:2b:e7:9b:
d9:7a:12:7e:56:6d:aa:65:c4:ca:74:bd:b0:81:52:
60:49:5c:fc:38:7f:01:cd:be:44:49:da:e8:ee:77:
74:2d:b7:23:53:d0:c9:4b:6d:48:cc:e3:3a:cb:74:
4f:44:4e:ed:2b:33:00:e7:ee:45:cb:2a:cc:9f:84:
60:f8:d8:00:67:bd:d0:58:7a:b3:55:45:5e:9e:1d:
6c:42:e7:24:02:43:32:22:75:62:9c:d6:2b:b2:e1:
e9:e5:ef:f3:35:a0:f5:60:a9:02:db:d1:a4:77:e6:
49:40:f9:46:58:78:c8:a3:fb:68:32:46:7a:60:97:
f2:4f:08:8b:91:d8:93:8b:2c:be:63:86:a2:6e:8d:
52:34:0f:e2:4c:1c:0f:7e:ba:ee:95:0a:8b:51:ef:
f8:cb:be:b6:a1:8c:72:f3:7c:69:10:20:18:b5:cf:
d0:bd:01:29:5e:6f:76:53:53:eb:df:c1:98:da:09:
f5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:50:A9:50:5A:3F:CC:BC:36:5E:2C:BD:75:8A:30:52:42:0E:7A:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7e8aae73-2440-3666-a634-39ee27892620.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:125:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:8b:0b:44:a4:fe:24:fb:33:ad:cd:10:e6:93:95:e6:09:ba:
ab:7d:98:a4:3d:9c:cc:2e:1a:a0:9c:93:2f:49:1b:6b:8f:6d:
77:6d:35:d0:0f:25:9e:85:a5:c9:da:3b:d5:6d:65:a3:7b:5f:
93:ff:d8:26:21:7a:a2:4c:1d:1e:c0:30:97:b6:54:a5:2c:6e:
03:d7:d9:ce:e8:4c:53:ca:ad:e4:02:52:df:49:c0:b7:cc:2f:
c8:f2:1d:b8:54:2c:51:e7:36:4d:3e:92:fd:70:1d:d8:62:06:
0a:e9:ae:f3:d4:c3:bb:02:e5:af:3f:d2:06:69:08:95:97:e3:
8f:fc:20:d7:ce:dc:5c:2d:4e:30:a8:64:0a:c6:b3:79:9c:85:
d8:a6:ed:8a:3c:39:6a:a4:4d:f9:a2:f0:45:5e:3b:5c:42:ec:
b0:41:8b:ff:d0:3c:68:0d:da:7f:57:80:1b:f8:a0:43:9b:10:
b8:28:e2:81:c9:6e:c0:d1:bf:b8:4f:dd:17:9b:66:ef:bc:0a:
bc:59:8b:98:c8:d5:ed:ed:fc:11:80:3b:3c:1a:f5:f7:d9:75:
f2:bf:5e:34:26:49:bc:e9:39:da:60:bf:b3:69:f7:89:5d:35:
af:76:52:ef:89:8b:2b:cb:26:ae:24:ce:34:8b:68:31:ba:33:
0f:e2:0c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:32:41 2025 by rpki-client