Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/88516fd0-2fda-3a9c-a358-db2fecb50fab.roa
File: 88516fd0-2fda-3a9c-a358-db2fecb50fab.roa (raw, json)
Hash identifier: H5FLwJ4Js8vQdRVKFSfiHc7VZcGrx9wuLw9bPVv59tw=
Subject key identifier: 44:DA:6F:94:2F:C3:2B:25:6F:D1:17:96:53:E2:7D:3D:C1:BB:0C:2A
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285849244E93654AE179A4B8E8C180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/88516fd0-2fda-3a9c-a358-db2fecb50fab.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 396615
IP address blocks: 2001:500:122::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:93:65:4a:e1:79:a4:b8:e8:c1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=0cfb51ef-849d-4e5e-b676-a114481ac413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:38:17:46:15:1b:44:d9:90:3b:d0:59:8b:aa:
5d:7b:89:74:1b:02:5f:ff:6c:7d:2b:0f:e9:f5:01:
f8:42:60:11:ce:2b:86:34:9a:fc:32:30:3f:61:9f:
15:91:7b:e9:72:30:9d:6b:6f:25:d6:2d:4d:e2:0d:
21:63:ca:d2:aa:be:61:d0:b7:90:f6:4c:05:30:97:
68:be:84:b5:bc:a5:3f:e7:42:1a:77:f8:26:65:f6:
bc:1c:a2:0d:eb:f2:8a:06:40:4f:d8:aa:fc:2d:33:
43:7b:c4:8f:10:b8:4b:14:76:87:23:e6:ce:f5:e4:
84:95:cd:f0:a6:60:bf:01:0e:46:fd:ff:50:53:e3:
3b:e2:a4:9a:42:51:7c:7f:71:a2:98:3a:b8:8c:9c:
38:da:0c:7a:ad:2b:b6:eb:09:3c:00:81:f7:18:0e:
2d:a4:c5:1b:d2:00:67:dd:f4:ef:c4:b7:1e:45:7e:
82:96:80:d4:ec:44:b7:d7:0c:e8:30:87:fe:b5:44:
9a:a0:fd:7b:29:96:29:fc:90:35:8f:f9:00:8a:a3:
96:72:48:fe:ea:b7:bd:ad:35:ee:8c:87:0e:54:08:
a2:07:aa:ae:71:4f:de:4c:41:2c:d7:6b:2f:84:0f:
03:fa:7f:48:e9:f2:57:41:d6:56:b7:4d:91:f7:be:
d0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:DA:6F:94:2F:C3:2B:25:6F:D1:17:96:53:E2:7D:3D:C1:BB:0C:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/88516fd0-2fda-3a9c-a358-db2fecb50fab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:122:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:9c:69:50:f3:85:e4:8d:f0:e4:59:c0:62:7f:e8:35:44:63:
a1:f1:05:63:47:57:4d:42:6c:e3:c9:c0:44:d9:be:43:80:0f:
b5:6e:f2:6d:c0:6e:87:71:b6:03:52:56:cf:2c:04:df:3f:f6:
1c:31:fa:86:26:c6:04:a5:67:bf:ec:34:9f:52:a7:ff:1b:b0:
59:a2:25:4e:fe:e1:2f:76:7b:7a:96:e7:9a:39:69:01:c6:a0:
64:5f:1e:80:11:c4:c4:6a:ff:72:dc:53:90:a4:c1:6d:b3:62:
f2:8a:45:b1:12:6c:75:47:59:8a:e9:72:94:b9:28:06:cb:c3:
ad:9b:bc:cf:40:cf:ef:41:b7:aa:6c:08:f7:0b:e1:b8:07:38:
49:66:d6:01:27:5b:01:f4:c9:2d:5d:c4:90:e8:90:0f:0e:25:
9e:b2:5c:2d:3e:01:a5:b3:41:52:bc:6b:38:11:7a:ac:43:9e:
c8:06:24:e6:a0:78:ef:1c:47:08:55:69:8d:b8:50:70:8e:8c:
99:65:eb:00:89:d5:db:d1:64:46:96:7e:d5:6c:25:85:d4:45:
5d:9c:a3:84:27:62:05:04:a6:76:cd:9b:0d:42:01:05:71:62:
12:8a:cd:60:8d:d5:d8:7e:ef:0e:28:97:18:c7:88:d8:d3:69:
88:c8:05:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:51:44 2025 by rpki-client