Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9ce35099-cda7-3fcb-81fc-983f12131f3f.roa
File: 9ce35099-cda7-3fcb-81fc-983f12131f3f.roa (raw, json)
Hash identifier: oU9KOebCqUs64dffXym/OsyJG5amJAmpCn/o0BI9VhQ=
Subject key identifier: 3E:EE:DA:90:CE:81:5B:8C:01:35:0D:4F:B7:D4:D4:D9:7A:39:8D:D1
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858494039813364405BF0BDBA00C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9ce35099-cda7-3fcb-81fc-983f12131f3f.roa
Signing time: Thu 20 Mar 2025 13:00:53 +0000
ROA not before: Thu 20 Mar 2025 13:00:53 +0000
ROA not after: Wed 18 Jun 2025 13:00:53 +0000
asID: 397199
IP address blocks: 2001:501:8a29::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:40:39:81:33:64:40:5b:f0:bd:ba:00:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 20 13:00:53 2025 GMT
Not After : Jun 18 13:00:53 2025 GMT
Subject: CN=62a660ae-64b9-4a3d-9ada-789f740bc6d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e8:71:e0:a4:cc:e1:56:a1:1e:c9:6d:cf:ef:
fc:29:9e:bd:67:13:a2:c9:34:fe:d2:70:09:c2:c5:
70:da:cb:c6:ae:8c:e1:82:08:c5:fd:2a:51:60:f3:
52:11:cf:69:e4:4d:1e:d1:6d:fa:d5:2f:b9:66:2f:
95:51:5f:01:32:df:76:93:3f:90:6a:c5:f7:fa:21:
42:c0:91:af:7c:d0:ee:16:67:56:ca:49:72:6d:93:
e9:8b:e7:6e:8f:ee:ac:60:87:be:08:dc:e7:68:0b:
33:ab:fb:f8:19:28:fa:66:7d:93:a7:40:73:31:e7:
5d:55:0a:5e:cd:e8:6d:19:d4:69:b7:cc:d9:0c:7b:
29:54:d7:3f:28:fa:d6:9c:0b:29:24:ac:7f:f1:62:
30:fd:f8:ed:4f:ac:b4:28:40:90:22:c1:2c:c6:8b:
40:f0:e4:42:f7:53:e4:01:9c:55:52:05:a8:27:07:
e2:be:c6:fa:e9:d0:50:6b:2e:7c:a8:0a:70:f7:f3:
79:34:43:ce:c7:97:d2:81:a5:ab:2c:79:d6:e2:bd:
c2:75:63:f1:50:6b:cd:39:94:fc:70:0c:e0:0d:51:
68:88:fe:e9:77:89:75:09:1d:70:47:80:7c:8d:10:
ca:dc:2a:48:59:6f:a7:d5:5d:39:44:c5:83:21:e6:
13:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:EE:DA:90:CE:81:5B:8C:01:35:0D:4F:B7:D4:D4:D9:7A:39:8D:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9ce35099-cda7-3fcb-81fc-983f12131f3f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:501:8a29:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:fb:05:8a:1f:95:a6:e6:b2:b2:12:37:b5:cd:9c:84:41:fc:
01:cc:7a:bf:3b:b8:87:6b:4d:23:46:26:09:06:9a:26:06:a6:
0f:60:0d:17:40:46:f3:43:04:48:ff:62:4a:f6:bb:c7:67:d6:
69:41:37:e2:d4:34:a1:a9:82:53:4e:9d:48:56:fc:ef:8b:68:
05:e0:7e:70:9a:5f:7b:1a:65:41:d8:45:25:f8:93:ad:59:9d:
8b:e6:9c:b9:7d:2c:82:47:59:0c:9d:f5:42:6c:fb:f5:14:8f:
9c:72:88:ff:ea:b1:be:da:5a:04:e3:a1:e7:80:bc:65:6b:66:
e8:72:3e:0e:fa:4c:a2:d8:2f:3b:45:a2:01:cb:15:f3:46:23:
07:06:b0:15:d6:2a:d6:4a:ce:1b:61:95:a5:1e:5a:8c:76:b2:
50:7d:b4:8e:0b:9a:02:c6:a2:0f:76:56:6e:57:71:c6:32:ca:
18:f0:30:dd:86:d2:c1:33:31:cb:aa:b0:3e:2d:23:78:96:29:
aa:b4:74:8d:fa:6e:4b:9a:f2:d5:da:b7:de:89:55:1f:63:e7:
1a:6f:ee:a4:d8:c3:b8:7a:11:90:7e:ca:0a:fa:2b:59:51:4a:
b4:2c:10:e5:75:1f:c8:f7:c4:b8:da:40:ec:97:7a:3a:0f:95:
26:7b:64:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:16:33 2025 by rpki-client