Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/97f866f1-75bd-3605-b62e-c953d275461a.roa
File: 97f866f1-75bd-3605-b62e-c953d275461a.roa (raw, json)
Hash identifier: VEgeF6jse2yUlprQKaXCf9m0gg62ng2cR7p4jeGWDaw=
Subject key identifier: 79:CA:C0:A6:2D:59:F7:1C:6E:92:49:38:14:66:48:5A:A3:D0:B7:F5
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285849244E93828EC4490F11FFA000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/97f866f1-75bd-3605-b62e-c953d275461a.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 396595
IP address blocks: 2001:500:122::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:93:82:8e:c4:49:0f:11:ff:a0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=a6ecb3ea-42e9-4fb0-bdcb-eabafcdda276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:da:de:3b:7f:77:bc:c6:ec:32:27:06:fc:61:
42:82:8a:88:b0:a4:16:7b:62:17:c7:c6:fc:68:4b:
80:66:ca:70:7f:95:96:4b:41:af:3b:28:7a:58:0b:
9d:da:f1:98:09:fe:52:3d:a5:df:eb:1f:b1:a4:91:
07:87:93:48:2f:ff:f8:e4:22:c5:cf:3b:78:50:07:
c4:d6:5f:5f:3c:f6:ca:65:82:23:37:57:c7:b8:7d:
84:e0:b3:a4:fd:10:d9:72:32:da:7d:5f:1c:32:8f:
95:99:3b:65:90:2a:92:5d:00:82:68:92:1e:03:e4:
da:6f:75:68:38:0f:9e:63:44:56:d9:99:2d:82:f0:
eb:dc:2e:f6:90:1d:89:6b:d1:07:02:85:30:52:46:
94:28:d5:47:ec:e8:8f:77:a0:ed:9f:1d:70:f1:43:
b1:97:77:21:f2:aa:41:34:7f:f5:07:0e:fb:a1:4c:
2f:06:2e:8f:68:c2:30:b1:0a:a9:07:e3:65:91:83:
b8:0a:27:c2:37:81:2d:df:c5:eb:41:c5:08:56:f2:
df:38:8b:2c:b6:9c:0c:62:c4:66:25:69:c5:7a:28:
98:89:a1:a5:59:86:f8:ab:4c:15:b7:13:88:d4:45:
ec:2f:b5:d1:55:ea:18:7a:69:52:18:7d:d2:76:7e:
c9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:CA:C0:A6:2D:59:F7:1C:6E:92:49:38:14:66:48:5A:A3:D0:B7:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/97f866f1-75bd-3605-b62e-c953d275461a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:122:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:c6:24:7d:38:5c:09:57:c9:ee:e3:85:c9:7c:c3:27:d8:15:
b7:42:c5:c3:16:72:58:0e:27:ee:ee:dd:02:28:25:c9:b6:b3:
d8:fb:4f:3c:f4:2d:03:bb:23:eb:f3:d1:c7:c1:63:5f:6d:71:
f9:09:ba:0c:1d:f8:cf:42:36:63:bc:fc:dc:86:b0:9b:41:0a:
d8:3c:0b:32:cc:8c:b6:bd:04:e3:63:61:58:56:bc:00:e9:3f:
06:65:fd:d2:40:67:d2:cf:44:a6:41:c4:cd:74:d1:da:9a:12:
3e:fe:a7:17:48:54:11:e8:aa:29:79:df:d1:37:96:1d:91:03:
9f:2b:fb:46:9b:62:58:9b:21:f2:3a:7a:63:dc:bd:05:04:94:
ce:ca:da:e5:86:60:da:ec:96:52:7f:23:12:bd:7f:f1:03:e2:
a5:5b:9e:db:ea:fc:e6:07:f8:1d:66:1c:a7:de:6b:e7:53:80:
3c:48:f7:7a:56:3e:49:d3:7f:03:63:a5:47:f9:eb:2f:f0:e0:
16:0d:23:b5:e4:1c:b2:41:4c:a2:e5:6b:02:e5:4b:91:af:bb:
2d:bd:a9:ea:eb:26:10:f1:2d:92:b8:2e:94:4e:de:2c:00:3f:
a7:3c:0d:9c:55:29:70:ef:a4:8e:af:1a:24:9b:85:65:5e:c8:
22:a2:3f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:13:13 2025 by rpki-client