Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/acfcb60c-97ce-3292-a1f4-367cb814b4af.roa
File: acfcb60c-97ce-3292-a1f4-367cb814b4af.roa (raw, json)
Hash identifier: IfsVr0Do0b+0F62ZcUNER2wVl3bEARkq+aHxz4buiHQ=
Subject key identifier: E3:BA:0E:1D:3C:52:BA:9E:31:46:C1:2A:79:FB:EA:2A:89:13:43:5D
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183D77B83005E29FCDC3600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/acfcb60c-97ce-3292-a1f4-367cb814b4af.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 211369
IP address blocks: 2001:500:125::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:d7:7b:83:00:5e:29:fc:dc:36:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=3ad978fa-048c-4922-bc70-fb7f4ad574cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4c:d7:7c:03:5c:14:0f:53:90:fc:b7:82:e1:
f7:e1:27:15:81:f7:3c:33:80:0a:e5:fb:05:11:25:
59:43:0d:d8:ce:de:ad:b4:7a:8c:40:8d:e1:a0:39:
da:7f:e9:16:4c:29:8f:3e:b1:e8:22:35:55:28:16:
dd:c3:80:15:38:23:86:32:6c:28:e6:cb:fc:dd:32:
f2:4a:b8:72:d6:f2:b6:41:95:7d:ed:6c:72:0b:5b:
d4:ac:98:b8:8c:a1:d5:a8:06:db:36:da:4f:cc:a8:
92:79:d0:3f:35:a0:7b:35:f2:df:82:4b:de:fb:78:
22:25:72:85:ec:16:c5:f4:0f:83:17:b8:83:89:fa:
00:2f:39:78:12:0e:74:77:4b:e2:48:2e:19:f3:7f:
af:ba:b2:07:8e:04:da:fd:fb:90:ac:54:2a:e7:f2:
05:af:26:f5:a5:c2:dc:36:22:31:92:1b:26:87:39:
ef:a8:bb:ff:04:33:9f:3d:4a:fe:37:1c:1e:2a:9b:
60:77:0a:b4:b6:eb:10:06:25:65:c3:fc:0c:19:87:
ad:21:49:5a:fe:76:25:56:f2:c6:f7:14:17:ab:fd:
29:c0:c5:c4:ad:28:61:cc:cb:51:b0:d1:c5:35:75:
d9:e2:f4:fa:9d:e7:f7:00:88:76:d0:dc:7a:91:4c:
b5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:BA:0E:1D:3C:52:BA:9E:31:46:C1:2A:79:FB:EA:2A:89:13:43:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/acfcb60c-97ce-3292-a1f4-367cb814b4af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:125:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:ed:e2:f2:af:7a:06:0e:4a:e5:42:5a:aa:23:4d:ec:76:be:
75:69:40:63:22:cd:7c:3d:84:20:a9:f0:9d:84:d0:c2:a6:26:
ac:8f:4b:2e:7a:5a:5a:eb:ec:2d:2d:7c:ca:13:06:22:cd:83:
51:78:e3:14:94:3b:4c:22:55:4f:fe:ac:64:20:8d:22:3b:c4:
02:8f:55:8c:4e:bd:27:74:ad:bd:67:6c:bf:ef:3e:8c:b6:76:
fb:4d:f6:c8:0e:7a:3f:f8:ad:6f:9c:a3:04:3b:08:63:b2:dd:
6c:7c:22:4e:3c:ca:15:94:69:35:2d:f9:b3:c4:33:4d:63:07:
11:86:98:6b:1e:ae:c7:dd:78:9e:cd:0b:2f:1b:30:04:4d:b6:
84:54:a8:e5:df:7a:d8:29:05:e7:22:f8:73:f4:ec:07:9f:58:
ac:85:ba:aa:fd:59:c9:89:30:08:0f:fb:b2:a9:44:98:92:d0:
53:bf:f8:8c:be:2c:4d:3b:91:21:d9:49:92:34:32:62:db:62:
8d:75:b3:88:c6:88:e9:c0:48:4d:6b:f4:23:09:0d:68:94:6f:
9d:83:6c:31:f6:1a:a6:a7:09:74:bd:73:91:59:5d:2a:7a:1d:
50:e8:67:87:dc:3c:37:89:54:98:24:32:7a:11:4b:5f:d3:0e:
d2:88:85:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:04:10 2025 by rpki-client