Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a428c78f-4f2d-3123-8be9-49c7fca937ed.roa
File: a428c78f-4f2d-3123-8be9-49c7fca937ed.roa (raw, json)
Hash identifier: QajBmYCuq9VJOaXaLQWswKKw7S1Qyum9yEM4kiD0B8A=
Subject key identifier: 4F:AA:FD:8A:9A:C0:98:1E:FF:7A:06:DD:EF:1D:23:31:09:D3:2A:08
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584929E3D77F78CE853FD7F27D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a428c78f-4f2d-3123-8be9-49c7fca937ed.roa
Signing time: Wed 12 Mar 2025 13:00:53 +0000
ROA not before: Wed 12 Mar 2025 13:00:53 +0000
ROA not after: Tue 10 Jun 2025 13:00:53 +0000
asID: 396605
IP address blocks: 2001:500:121::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:29:e3:d7:7f:78:ce:85:3f:d7:f2:7d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 12 13:00:53 2025 GMT
Not After : Jun 10 13:00:53 2025 GMT
Subject: CN=652db7e0-ef4b-4d0a-b471-685d7946d63e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c5:3a:de:1f:f7:0c:a1:26:1c:0e:a5:f5:cf:
54:2a:98:99:51:4d:7e:6a:78:ac:6e:a0:01:33:5c:
a4:9f:16:f2:c6:b4:f7:27:e9:dd:4b:6c:30:49:90:
bb:4e:9a:34:93:44:d5:93:bf:c2:55:42:f2:ca:75:
18:e5:0f:d7:7d:f6:6c:88:1e:4f:25:f7:32:4f:41:
76:2f:b5:bc:33:58:3e:73:c8:de:81:89:01:ff:52:
e4:5d:f2:06:26:d9:ff:6e:26:23:37:3d:7a:7d:13:
31:57:84:e0:13:bd:c5:11:b5:7b:ff:9a:35:b7:b9:
df:2b:3d:bb:63:1c:4c:86:87:bd:7c:63:60:c1:34:
7e:29:b6:26:ca:d3:0d:0d:11:81:e6:22:f9:39:0e:
6a:62:81:62:ed:2d:98:6b:cb:79:f2:e4:ec:34:2c:
8c:8f:a7:17:59:3c:57:cc:b0:45:ac:18:1a:ba:6c:
90:a3:b9:f3:10:4e:81:f5:17:44:69:cc:5e:24:4b:
43:da:d3:cc:5e:fd:eb:21:86:49:72:53:fe:97:8d:
eb:1e:07:20:24:15:a4:ee:9f:19:11:ad:38:4e:95:
87:a9:62:29:27:e7:66:69:ee:45:e3:ee:83:d2:c3:
22:2e:2e:8f:a6:9e:8c:d4:ae:8b:4e:ea:ae:bf:23:
1d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:AA:FD:8A:9A:C0:98:1E:FF:7A:06:DD:EF:1D:23:31:09:D3:2A:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a428c78f-4f2d-3123-8be9-49c7fca937ed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:121:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:51:ef:30:d4:36:3b:b8:36:6d:17:1d:87:93:56:3b:a1:9a:
87:32:55:db:75:b2:8a:22:59:fe:d1:38:f0:82:27:f5:40:72:
19:94:e6:66:99:13:b7:76:cc:43:5f:bf:d3:36:ce:94:b8:34:
58:a5:7a:f3:be:96:a7:54:99:55:87:dd:c0:da:46:b2:47:e4:
23:6b:e1:45:73:bd:13:74:2f:13:20:72:ed:22:07:70:84:7c:
8f:cb:82:a2:09:43:0d:4b:e5:5d:ce:04:f9:91:e8:52:ca:f8:
18:f6:eb:1f:75:0e:ac:60:b0:97:d7:77:f9:3d:de:43:5a:75:
67:31:60:cb:04:e5:cd:0f:aa:d6:0d:b8:d9:5c:50:ff:52:19:
8a:80:27:cc:c4:ae:36:f6:6f:03:40:2d:eb:5b:5c:c3:f5:63:
6a:26:f6:31:38:c9:ed:ce:62:de:ff:a0:a8:f5:44:67:31:36:
5f:58:68:e7:59:a2:a1:1d:72:17:3a:fa:52:4e:dd:d3:03:d2:
45:21:82:06:cb:87:ba:b6:75:2b:bd:bf:39:f2:6b:79:c5:f0:
24:14:2a:44:86:0c:a9:bd:62:e1:5b:77:0d:de:58:46:7d:7c:
f9:71:88:08:24:e3:19:28:ba:24:6f:3d:db:3f:2c:3b:cc:b7:
5f:98:d6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:56:52 2025 by rpki-client