Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af7ec802-b230-3708-b793-ea4415ac93d9.roa
File: af7ec802-b230-3708-b793-ea4415ac93d9.roa (raw, json)
Hash identifier: tCVq7Cq6HnN7TRc9uz/p7Lw7BrUw1Jb+2yupB6ja/kg=
Subject key identifier: 9F:E7:A8:4B:7E:78:D6:CD:26:14:01:98:1A:76:D8:55:EF:9E:84:D3
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183DA44E65AA314F0A14264
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af7ec802-b230-3708-b793-ea4415ac93d9.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 396564
IP address blocks: 2001:500:124::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:da:44:e6:5a:a3:14:f0:a1:42:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=f7da5b5c-c190-4986-a86a-bc1a2a3a8dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c8:b9:c8:c6:10:42:73:71:04:65:64:b2:ff:
74:fd:2b:ba:1d:be:fc:f1:47:8e:5d:66:2d:77:7f:
05:cd:f5:26:4e:f8:d8:d8:0c:07:fe:52:89:f6:7a:
13:6d:17:ed:13:2c:93:51:8a:8d:66:29:5d:3d:f8:
fa:48:51:0e:16:cc:23:07:ed:81:61:95:2a:46:5e:
10:e8:f5:66:2d:75:aa:38:a3:b4:c2:85:47:65:7e:
14:81:09:7e:e3:0b:01:95:31:60:ee:1e:d2:c7:d4:
f8:fb:f0:e8:75:bd:5f:13:48:a7:4e:c9:e3:9a:37:
e6:32:bc:c9:68:84:3e:26:49:ce:6a:b1:f7:3d:07:
0d:73:ed:47:14:3f:82:b1:50:b4:36:cc:c1:c6:c5:
84:35:b6:f2:c8:dd:21:af:aa:d3:18:92:37:f9:41:
2f:9f:36:a6:4b:39:be:37:f5:5a:49:d1:b2:1f:50:
b0:65:b8:71:ff:c0:c5:1a:0d:01:da:39:db:a4:b8:
03:74:a4:4b:b4:5f:bb:40:3a:cb:bb:3b:2c:af:1f:
0f:1a:05:0d:46:00:61:88:ae:d2:97:9c:a5:57:50:
95:5e:86:45:1d:ad:9e:2b:d4:2a:2b:88:ef:56:c0:
17:b4:50:94:a6:54:40:17:a8:18:3e:36:10:76:f4:
69:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E7:A8:4B:7E:78:D6:CD:26:14:01:98:1A:76:D8:55:EF:9E:84:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af7ec802-b230-3708-b793-ea4415ac93d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:124:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:8e:72:fa:64:9e:0e:6d:b2:6a:09:91:65:46:85:c6:d1:86:
91:dc:6f:fa:8b:f6:96:d6:bd:37:31:b9:48:77:69:82:2d:86:
4c:40:ae:12:0d:98:c9:b9:ea:37:27:1e:2a:d2:8f:cf:62:c9:
57:96:bb:38:1a:1f:c8:10:c6:b1:dc:af:fb:46:e2:ab:c0:bf:
a5:8a:63:a2:6d:a7:b1:b7:96:c3:10:eb:ef:4b:49:52:8b:96:
92:55:74:6a:e7:f2:93:3d:ea:90:8f:41:dc:3d:85:d8:58:55:
91:2e:85:71:e9:3f:03:a8:4e:81:da:f4:3c:43:61:14:9a:20:
40:69:13:22:ce:37:b6:b2:6a:e5:28:d7:95:2f:cb:9f:28:fa:
42:f2:df:67:a6:d7:b4:5d:38:75:91:5e:7a:72:6a:b3:be:39:
db:7f:25:dc:50:80:44:0f:4e:a1:b1:f0:a8:58:ef:90:58:ef:
53:d3:83:9e:85:56:7e:b1:4e:f4:f3:52:a9:ce:92:a3:60:df:
a4:f5:6f:0b:d4:0e:86:8e:8f:0b:bf:1a:bf:6f:82:e9:68:88:
c2:94:6a:73:be:81:1e:4d:24:01:1a:65:10:d8:e2:d3:4c:d8:
06:33:f0:f5:63:64:9d:cd:9e:b5:5f:ec:4a:83:34:fc:51:02:
42:93:7e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:06:27 2025 by rpki-client