Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a6d77a58-efdd-3d37-b7c4-333597855a0f.roa
File: a6d77a58-efdd-3d37-b7c4-333597855a0f.roa (raw, json)
Hash identifier: gCEsDlF7uLs2b85oS7BBrZAerw4AVgODRvIZWK2RwPU=
Subject key identifier: F4:F0:0A:3E:33:77:81:01:AD:DF:3B:DB:CD:3D:37:37:6D:A9:93:A5
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285849403983FAA1415F953683D4C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a6d77a58-efdd-3d37-b7c4-333597855a0f.roa
Signing time: Thu 20 Mar 2025 13:00:53 +0000
ROA not before: Thu 20 Mar 2025 13:00:53 +0000
ROA not after: Wed 18 Jun 2025 13:00:53 +0000
asID: 396542
IP address blocks: 2001:501:8a29::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:40:39:83:fa:a1:41:5f:95:36:83:d4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 20 13:00:53 2025 GMT
Not After : Jun 18 13:00:53 2025 GMT
Subject: CN=0e2357bc-4912-4eeb-bcde-e518796198cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:be:58:8e:e3:80:90:ea:a0:5d:57:89:06:e4:
92:fa:55:e6:fd:bd:69:81:dd:63:39:f6:04:52:3c:
7c:2c:3b:17:61:b4:65:4e:7a:e1:ee:eb:99:03:44:
c9:58:58:9b:84:79:28:20:53:fa:f7:37:ca:fe:3f:
fc:23:8b:44:b2:1c:ae:f2:f8:30:c4:74:e0:5b:aa:
b1:fc:16:1d:1d:78:ae:81:1a:44:75:99:2f:f8:4e:
3c:6f:71:bc:d5:07:2a:54:2f:08:20:93:85:d9:f1:
11:5b:2a:ba:cb:43:52:86:e9:6f:17:a5:fd:c0:48:
69:83:4c:dd:d3:a2:42:4d:66:af:04:57:db:57:9a:
0c:b7:e0:90:fb:00:71:ef:22:8d:20:af:f4:d8:f3:
1b:d7:ed:03:08:2c:f8:0e:fd:21:6c:9c:4c:64:40:
b3:95:04:32:e1:ce:c6:b8:d0:b1:e9:db:8d:0b:8d:
d2:12:43:0f:29:c2:7f:75:5b:46:b9:54:55:57:74:
94:2b:9a:b6:35:d1:2b:93:0d:2b:a3:58:70:9a:a4:
bb:a2:31:ff:c4:8b:59:f9:a0:10:47:52:1c:a4:d5:
36:b9:7d:43:eb:b0:32:18:66:6d:20:0b:ba:26:b8:
24:93:ca:f4:9a:a6:a3:cd:db:ae:62:3e:98:84:10:
fe:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F0:0A:3E:33:77:81:01:AD:DF:3B:DB:CD:3D:37:37:6D:A9:93:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a6d77a58-efdd-3d37-b7c4-333597855a0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:501:8a29:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:3d:55:5e:b3:e3:7f:7e:70:9b:c0:a3:44:ef:43:cf:21:1a:
c7:f9:77:09:6b:29:72:6c:ee:ea:85:58:e0:3c:9c:7d:39:8b:
fa:98:c0:fb:e1:db:02:74:c8:a9:97:d0:51:4f:49:31:81:63:
f2:03:af:c6:11:15:eb:26:1e:9e:10:da:e4:e2:32:b8:5b:45:
af:2b:72:a2:95:77:08:d3:c8:97:70:0d:72:79:78:ac:0a:58:
05:64:90:92:19:94:60:1b:6b:63:4a:9c:d1:34:2a:75:6d:da:
61:31:a0:0e:11:ab:d8:8c:e5:73:58:77:ed:b7:d1:ce:a8:b5:
1b:26:10:e1:26:40:a4:8c:b2:81:ae:27:e4:67:7c:83:89:e0:
74:7b:a2:99:61:00:46:aa:4c:92:06:00:5f:9d:35:34:d3:87:
62:50:40:be:bf:72:a0:fa:9f:e3:ad:42:53:8f:b7:cc:8c:4e:
87:1b:e4:51:9a:0d:72:fb:be:dd:16:4d:bc:a5:4a:12:0e:60:
d3:a0:c1:28:e4:b8:f3:a4:e4:08:0f:48:12:e9:0c:7f:62:38:
4d:fc:99:bd:b6:3b:cb:50:4b:c7:b5:73:b5:9a:40:55:95:32:
2c:a5:4b:10:46:2c:a7:92:99:c1:f3:a6:88:4e:1a:c5:bf:f2:
af:13:c2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:53:35 2025 by rpki-client