Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9982cb35-3167-378a-a759-66a9420535b2.roa
File: 9982cb35-3167-378a-a759-66a9420535b2.roa (raw, json)
Hash identifier: mIkTZJCQ7MVUz1yWX47qDsrelX8DYosr5pKeIuxcUTc=
Subject key identifier: B6:0E:86:E2:08:46:35:C8:9B:D1:EB:7B:2F:99:41:EB:83:21:46:4A
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858493243EFB1A25CD691A17D44B4
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9982cb35-3167-378a-a759-66a9420535b2.roa
Signing time: Sat 15 Mar 2025 13:00:52 +0000
ROA not before: Sat 15 Mar 2025 13:00:52 +0000
ROA not after: Fri 13 Jun 2025 13:00:52 +0000
asID: 397203
IP address blocks: 2001:502:cbe4::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:32:43:ef:b1:a2:5c:d6:91:a1:7d:44:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 15 13:00:52 2025 GMT
Not After : Jun 13 13:00:52 2025 GMT
Subject: CN=7fb99b50-5ac0-491d-88f3-122bae910415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:76:1e:24:7c:07:3c:e4:b6:53:fe:69:77:76:
a9:1b:ee:99:a4:b3:06:fc:21:bc:a1:ff:35:3f:df:
3c:67:ee:94:2d:c9:86:2a:74:53:dc:8c:62:d4:a5:
20:75:a1:fd:fe:8b:ea:d1:e3:fa:b9:2d:1e:11:27:
b8:4e:3d:03:cb:f3:3d:55:62:eb:55:84:c8:11:80:
5e:4f:db:00:34:75:02:22:5a:4f:ad:f7:51:10:b5:
9a:97:06:3c:c6:b4:0a:97:ef:90:a5:7f:ff:a2:c2:
27:05:e2:87:62:3b:9c:2c:ed:d9:ed:06:20:d3:a5:
a1:b9:e7:9f:61:2e:ce:19:69:09:04:50:81:35:08:
32:f8:06:63:1a:47:f5:8f:37:be:e2:ca:fa:25:c9:
44:fc:57:ad:44:1a:8f:63:61:1e:af:76:0c:73:09:
a9:bd:57:9f:aa:15:40:15:46:c4:88:47:c4:28:25:
c1:53:1d:d8:d2:4b:de:02:00:33:75:c5:b8:84:62:
fa:05:e4:81:2f:31:74:f5:41:e6:8b:41:74:d6:8e:
d9:51:e5:10:67:85:4e:04:47:8b:81:7c:d8:b3:20:
a0:48:d9:c8:17:a5:45:25:d6:b7:d0:b5:a9:ca:b1:
04:70:10:41:e5:40:67:17:3a:20:15:c4:fb:59:d3:
86:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:0E:86:E2:08:46:35:C8:9B:D1:EB:7B:2F:99:41:EB:83:21:46:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9982cb35-3167-378a-a759-66a9420535b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:cbe4:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:46:6d:06:5a:a4:ff:e6:ed:d7:5f:73:e5:02:c5:09:bb:0a:
a3:3b:d1:87:12:64:d2:89:f0:27:dc:9b:7a:87:93:0d:ef:ff:
8c:6a:fb:93:dd:ad:80:54:b7:27:7a:fc:85:ce:b0:c3:a7:54:
34:00:41:55:12:0a:4a:46:f4:f5:94:d1:fb:51:53:16:4e:00:
83:2e:47:24:1d:93:fb:08:f0:14:da:68:03:1e:50:46:da:99:
43:cf:a6:22:63:2b:ab:45:06:ca:39:78:cd:c5:4a:7b:af:ef:
a4:68:b9:64:bb:f6:5f:ab:93:64:5a:1e:8f:66:a6:25:12:33:
68:3e:ae:6b:7f:f3:8b:9c:86:6d:6d:44:50:52:cb:d7:ce:db:
ed:af:08:75:4a:0c:b5:95:56:36:8d:47:53:f5:7e:0a:29:95:
f9:e0:b9:66:0c:d7:0d:d1:68:b0:85:76:5f:5b:9f:a6:e6:0c:
c4:c1:50:65:c1:e3:dc:73:58:85:07:3d:c2:8a:a8:58:7a:ef:
11:b9:4f:22:05:c2:35:8c:39:f1:24:39:4c:7a:17:74:85:fc:
21:f8:5f:23:05:27:96:98:56:d0:67:b4:a4:03:ea:8a:87:94:
0d:43:c7:77:16:59:83:39:1e:5d:17:28:fc:1e:64:b9:06:b5:
a0:8f:39:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:20:02 2025 by rpki-client