Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b20ffa7c-e244-3c98-a1ec-df90ec8c23a9.roa
File: b20ffa7c-e244-3c98-a1ec-df90ec8c23a9.roa (raw, json)
Hash identifier: imaRGJ3fzuj27dr5djgTg9aTpdp45LACf1JNfV6cW9c=
Subject key identifier: 38:DA:C3:90:CA:DE:DC:0D:23:B5:1C:ED:6A:8F:0F:78:EA:90:30:50
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848F22A82C54E1B7D84F107ED00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b20ffa7c-e244-3c98-a1ec-df90ec8c23a9.roa
Signing time: Thu 20 Feb 2025 13:58:10 +0000
ROA not before: Thu 20 Feb 2025 13:58:10 +0000
ROA not after: Wed 21 May 2025 12:58:10 +0000
asID: 0
IP address blocks: 2001:500:138::/45 maxlen: 45
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:2a:82:c5:4e:1b:7d:84:f1:07:ed:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Feb 20 13:58:10 2025 GMT
Not After : May 21 12:58:10 2025 GMT
Subject: CN=9d43dcff-ed25-4653-847c-3e3e455043f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c8:a2:32:81:c9:6e:36:bb:2f:53:82:b4:72:
7c:52:26:27:61:cf:58:18:a9:4a:75:5c:1c:85:41:
c1:6a:6e:3c:7d:68:85:8e:e5:59:f7:8f:e3:30:38:
22:d7:0a:7e:d3:f8:d2:36:cb:86:4a:7e:40:64:a7:
cf:2f:df:5c:51:a3:f8:ec:b4:4a:2f:14:8a:02:4e:
e6:de:91:39:ca:0c:60:db:70:e6:ea:36:7c:5d:2f:
10:27:5e:0e:a7:d6:8f:41:95:88:69:25:28:ac:9d:
93:73:cc:14:ce:84:e6:c3:53:34:3e:8e:70:a5:18:
25:d2:22:2a:b1:62:c6:f5:8a:65:f0:77:4e:76:02:
e0:d6:6d:5a:89:22:a5:49:bb:0f:e9:fe:9e:d8:c7:
27:42:2a:c7:3e:44:5f:83:bf:2f:71:a4:22:1a:fa:
dc:8c:bc:64:99:2c:70:dc:37:4d:c7:da:cb:6f:e4:
76:00:0b:ff:27:46:f9:21:9b:09:8c:fe:76:0c:d4:
5e:bf:48:51:5d:36:f7:57:3a:05:67:eb:13:03:1f:
21:13:d5:f9:a0:d5:84:cb:13:26:e1:ab:a5:18:50:
95:ef:85:e9:e2:88:da:3b:f0:7f:fb:c3:47:b2:95:
d9:84:96:77:57:fb:87:a6:97:f2:ab:47:f1:82:38:
f5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:DA:C3:90:CA:DE:DC:0D:23:B5:1C:ED:6A:8F:0F:78:EA:90:30:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b20ffa7c-e244-3c98-a1ec-df90ec8c23a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:138::/45
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bb:39:9f:a6:7c:f9:7a:5f:3c:6f:f6:48:b2:1f:8a:76:a9:87:
cf:20:ec:f7:74:b2:0b:06:ca:49:3c:dc:60:93:fb:af:ca:ab:
2b:17:25:fc:90:aa:48:6d:cd:9a:25:a2:39:ae:4f:49:11:2f:
d0:2c:1b:21:55:e0:4c:7f:02:c4:c8:26:39:67:36:15:69:ac:
c4:b1:e3:58:9f:03:b0:d9:f6:99:10:d7:cc:2b:d5:39:ad:df:
2a:bb:9b:b4:de:68:ed:83:c4:3c:40:96:df:45:b4:af:c2:55:
08:31:3f:11:fb:89:cf:2f:98:fd:0b:00:2a:b6:fa:d7:91:51:
91:5d:1e:1d:77:1a:43:c6:bb:9b:72:d5:37:9f:c9:63:33:57:
59:fd:f0:08:b1:17:64:28:19:6b:8a:d3:c3:ee:73:a5:32:b6:
71:46:df:db:15:53:db:29:59:86:f8:1d:f5:97:f6:7b:58:f4:
29:98:ef:95:73:0c:10:da:2f:30:ae:3b:cf:32:d9:bd:1d:04:
34:08:73:a7:2c:2f:41:9e:c8:a4:42:d0:a1:32:66:1e:20:d4:
86:24:95:31:0e:e4:9a:f4:a9:9b:6f:2e:87:e1:94:5e:69:f4:
6d:53:34:56:9e:01:d7:2a:7d:ca:18:cf:27:ee:79:e2:ec:d1:
c1:d7:f7:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:50:08 2025 by rpki-client