Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/927b784e-e892-3800-b539-a7adbcfe73f2.roa
File: 927b784e-e892-3800-b539-a7adbcfe73f2.roa (raw, json)
Hash identifier: zjT0JAU5QX4q4hhfyNQk4df3f/7W+cl6fb5UtTYvfrQ=
Subject key identifier: 3C:C4:A9:0B:AF:0C:67:CC:29:DB:C0:83:7D:45:78:B9:A9:17:80:06
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584929E3DAD8830C706EC26C4FE0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/927b784e-e892-3800-b539-a7adbcfe73f2.roa
Signing time: Wed 12 Mar 2025 13:00:53 +0000
ROA not before: Wed 12 Mar 2025 13:00:53 +0000
ROA not after: Tue 10 Jun 2025 13:00:53 +0000
asID: 36625
IP address blocks: 2001:500:121::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:29:e3:da:d8:83:0c:70:6e:c2:6c:4f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 12 13:00:53 2025 GMT
Not After : Jun 10 13:00:53 2025 GMT
Subject: CN=2d8c0261-f501-46bd-957c-7dee68cba076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a5:0b:be:6e:bb:bb:4f:a0:b1:cb:6c:d5:a6:
e7:46:c3:04:33:5f:b5:15:f6:a4:74:13:8e:b6:55:
eb:0c:f7:0c:a5:e5:26:ed:69:46:3c:0c:52:bc:37:
93:52:b0:03:c3:a4:b4:2f:ab:e8:c8:34:2b:38:00:
9e:96:f5:d3:e4:8e:7c:38:72:40:e6:00:e4:97:38:
70:48:da:0f:50:b3:c4:8c:71:ef:b9:d9:2b:d9:89:
21:ed:b2:b4:43:81:1a:8f:05:db:d0:e1:98:93:bb:
a7:e3:7a:fb:ba:5b:5b:f8:0b:b4:31:26:83:e6:4a:
a8:8a:66:d8:c6:ce:a9:64:dc:5e:c1:b7:d8:53:a1:
80:fc:3b:ff:12:bd:ae:e8:2d:b6:31:02:fe:97:a3:
fe:66:4b:1c:af:1f:24:ba:70:98:fd:6c:27:1d:c8:
20:5c:ed:11:f7:77:eb:53:0e:cc:1e:bd:03:86:10:
6f:bb:f2:de:97:c7:d0:0a:1a:85:16:fa:86:fb:8e:
0c:c6:51:ad:32:65:dc:40:d0:86:7d:52:ed:32:77:
58:f8:d7:23:95:84:fc:52:54:92:eb:3c:36:c0:3f:
bf:a7:90:84:41:14:65:97:e5:85:d7:be:c5:85:e4:
36:f3:37:ce:24:2a:6d:2a:a4:c1:4b:6b:a7:ca:21:
db:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C4:A9:0B:AF:0C:67:CC:29:DB:C0:83:7D:45:78:B9:A9:17:80:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/927b784e-e892-3800-b539-a7adbcfe73f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:121:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:bd:9b:a9:e8:45:60:84:82:f7:82:95:4b:bc:05:b7:9d:cd:
45:de:b8:1f:16:22:d7:1f:b6:3b:7a:23:1f:99:60:8a:3a:ba:
8b:c9:02:77:38:74:5e:6a:be:e4:1f:bf:f3:c7:0a:ed:9f:09:
32:2f:a2:23:d7:3f:cd:6d:6a:d3:a4:03:ed:0b:b9:5e:88:14:
70:02:b0:02:8d:ee:3b:7d:d0:d5:2e:e7:16:ae:9d:26:cf:2f:
49:5c:36:5b:9a:a8:f3:5c:50:6b:f0:aa:96:e6:28:c1:2d:ef:
d2:9f:02:6c:a6:9f:54:32:69:92:ef:f5:8b:b3:50:29:32:64:
5d:2d:07:12:cf:77:4f:94:ec:87:e7:c7:92:85:03:3c:4c:58:
41:ed:d0:ac:27:d0:46:55:85:1d:81:14:62:0d:89:f0:2d:08:
ef:4e:af:da:5f:05:55:98:17:35:31:d3:4c:e3:fb:01:15:71:
98:e4:a5:9b:4b:af:aa:d7:86:a4:80:f8:5d:c0:fb:54:c1:7e:
d5:c7:ef:30:7c:dd:ed:20:3d:b3:c9:40:d6:0a:31:42:c6:fd:
9a:e0:3b:e9:fa:ed:d5:ef:0b:59:5f:7c:7f:58:3f:d8:a1:a3:
6b:23:c6:c0:3f:1f:f6:3c:65:be:b9:b2:b9:6e:29:d8:96:68:
75:b8:c2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:23:36 2025 by rpki-client