Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f82a1fa-b831-30ac-b3cc-95b88703f84d.roa
File: 9f82a1fa-b831-30ac-b3cc-95b88703f84d.roa (raw, json)
Hash identifier: vYUmzK5ZoDMe1lgJMO9K3ADQ7sVYJpDXH3tfcrbpY10=
Subject key identifier: 54:43:CC:0E:9F:F3:61:AE:5D:0F:56:74:7B:44:51:E1:7D:DD:77:28
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183E89698CCF1394DD7D800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f82a1fa-b831-30ac-b3cc-95b88703f84d.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 397205
IP address blocks: 2001:500:126::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:e8:96:98:cc:f1:39:4d:d7:d8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=381cbd75-672e-4a09-95cf-6b166fd18a7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:3d:98:65:b8:dc:5e:e0:96:30:7c:01:f3:cb:
dc:4f:da:3f:5f:03:c8:2a:f4:22:2c:cb:6c:db:46:
89:d4:35:eb:33:92:6d:c5:6f:fa:94:cd:28:75:df:
3c:f6:79:80:6f:0c:77:96:30:21:23:5d:2d:8c:a2:
31:36:02:f8:c6:20:1f:65:1c:9f:45:9f:61:a1:e5:
27:06:52:fb:7a:40:9b:ae:6b:3a:7c:16:9d:0b:7b:
6d:75:bf:61:40:4b:48:85:7e:15:87:d4:31:7e:8c:
3a:bf:6e:71:f0:ae:54:4e:6d:ff:50:78:d7:61:63:
d6:f6:8e:19:47:14:1f:04:1d:9c:a8:47:49:02:30:
d0:8b:18:35:20:21:9f:8b:08:7e:ac:fd:5e:2a:e0:
54:ca:ea:a4:04:f8:c2:a8:92:d9:12:16:4a:90:ca:
36:31:72:9a:f5:12:a5:1b:39:a9:13:b3:b4:00:e1:
9c:1d:b1:a6:b7:b6:b0:86:ec:cf:eb:b9:d4:d3:4e:
7c:d6:3c:be:55:b5:32:c2:ed:43:a6:fa:19:95:0f:
2c:33:44:a0:29:fa:ce:dd:73:8a:33:0e:23:3e:f8:
19:5e:76:35:5b:9b:ee:6e:be:15:46:a3:61:19:0d:
9d:e2:70:6e:38:a0:28:5e:c0:23:93:06:71:6a:46:
84:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:43:CC:0E:9F:F3:61:AE:5D:0F:56:74:7B:44:51:E1:7D:DD:77:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f82a1fa-b831-30ac-b3cc-95b88703f84d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:126:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:8c:f4:5c:53:24:f2:8d:8d:ed:cd:20:c1:f9:aa:15:57:7a:
a9:d2:50:cc:e8:c2:07:9b:ac:53:1e:25:f6:f0:5c:54:12:07:
83:a4:ff:b0:e3:c9:6a:4c:c4:49:03:f4:d6:36:1c:e4:6c:49:
72:8c:a4:f7:d1:9c:4f:02:b9:95:02:21:46:a0:c3:35:b4:68:
b5:1f:ab:8c:9a:0d:82:fe:a7:94:f2:bf:72:a9:8d:9c:7b:ef:
84:ae:92:ff:95:b0:27:0a:5c:dc:17:58:2c:ed:76:38:90:34:
98:92:da:de:de:18:d7:f4:cf:2d:6f:c3:5e:5a:53:24:98:af:
52:bb:fb:b5:de:e4:a1:46:b8:19:22:5b:70:f8:cc:b7:13:69:
18:2a:da:56:15:3e:28:e9:e9:5c:36:46:f1:13:de:62:d7:7d:
8c:ce:38:a7:20:53:14:74:7a:78:fc:52:c4:0c:07:e4:f8:eb:
4c:25:9c:65:39:e6:4b:d9:ee:18:52:16:cb:10:f7:e8:6d:33:
fc:c4:e1:d8:75:6e:a3:08:1b:5b:c7:36:4b:eb:13:d2:4a:10:
bd:9b:fd:1b:7b:fe:68:d1:8a:62:27:dc:d4:99:4e:29:68:2c:
33:d6:b1:52:49:fa:f6:c0:29:dc:ea:9c:73:40:8d:90:d7:20:
c6:cb:a6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:30:19 2025 by rpki-client