Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b2bead0f-9aa6-3b2d-8cd9-5e5fe4d54419.roa
File: b2bead0f-9aa6-3b2d-8cd9-5e5fe4d54419.roa (raw, json)
Hash identifier: 0ZfAgFV0+nYprkXkzaJqsOZxB4kdDq1Er75+t/GzkGM=
Subject key identifier: 1C:AE:C4:84:46:3C:EE:78:4F:CD:28:0C:89:AE:5E:7C:A6:4F:32:E5
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285849393E9028C7971F77FC3B5640
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b2bead0f-9aa6-3b2d-8cd9-5e5fe4d54419.roa
Signing time: Tue 18 Mar 2025 01:00:38 +0000
ROA not before: Tue 18 Mar 2025 01:00:38 +0000
ROA not after: Mon 16 Jun 2025 01:00:38 +0000
asID: 396555
IP address blocks: 2001:500:120::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:39:3e:90:28:c7:97:1f:77:fc:3b:56:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 18 01:00:38 2025 GMT
Not After : Jun 16 01:00:38 2025 GMT
Subject: CN=1fd2b898-fabe-464e-9dac-dbf5798af70d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a5:4b:bc:14:ef:11:6c:49:ba:7a:91:c0:ea:
5d:14:16:16:30:4b:0f:86:fe:1c:2a:ac:ce:5a:55:
78:71:86:92:62:22:dc:f6:56:9f:f2:12:08:a5:09:
be:77:09:45:4c:2f:2a:0a:18:24:3b:6e:67:26:df:
6c:35:c0:78:6a:dc:f1:8d:ab:33:1f:d0:96:09:a3:
47:b4:92:d6:41:b6:ca:e6:89:c5:e1:b0:9b:75:52:
1f:0a:2a:3a:b5:99:43:8b:4b:75:93:7c:95:fb:b6:
90:6a:1c:2b:bc:77:31:ca:52:ac:2f:dc:fc:13:2c:
c9:2d:6b:81:23:9a:32:87:91:bc:71:f9:3f:21:b2:
fb:ce:94:ac:b2:2b:fe:28:9f:03:f6:38:45:c5:64:
7c:4f:93:2e:1f:37:9b:7e:2e:f0:fe:f0:46:b2:49:
f8:f0:e6:a1:08:ad:b7:52:07:b1:9e:f0:b8:16:9d:
91:ab:29:6f:5d:3d:ea:98:ac:9e:33:c2:85:c4:58:
b2:f8:b7:29:e5:c7:0d:fd:99:2d:83:88:76:b8:6f:
6a:ae:ad:8b:4c:9d:a4:84:97:fc:74:16:e5:12:b9:
4c:64:f0:c2:31:79:70:98:e6:43:25:6e:fb:8b:39:
24:c8:93:72:da:db:02:55:5f:ae:30:23:71:86:81:
96:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:AE:C4:84:46:3C:EE:78:4F:CD:28:0C:89:AE:5E:7C:A6:4F:32:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b2bead0f-9aa6-3b2d-8cd9-5e5fe4d54419.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:120:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:5c:a1:f9:e7:91:70:b3:9b:5d:b1:3b:bf:17:2d:8f:eb:85:
fe:d8:9e:d0:e8:7e:c9:27:92:e9:a5:5d:5c:0c:9c:d0:25:a4:
37:3d:5e:28:ed:6a:02:fb:94:70:2c:de:33:e7:7e:59:f8:65:
94:3c:14:ad:f6:6e:56:af:fb:c5:f8:47:5b:8c:da:c1:1e:95:
2d:bf:48:cf:aa:87:c0:db:8b:de:ff:f6:af:a1:ca:dc:74:9f:
b9:1a:76:8a:64:5c:e9:fb:48:f2:ce:15:bf:7e:ba:44:2f:e1:
ae:48:2f:5f:c4:a8:05:90:f6:4b:d5:64:24:b8:3e:dd:53:36:
9e:81:1d:48:6f:99:40:5b:34:12:a0:c5:4f:e2:ad:4f:63:fa:
bb:31:c5:58:b2:f1:9e:79:68:58:e8:1c:b4:b0:8a:74:6c:7b:
e2:0e:b6:51:a7:65:d9:23:55:e7:74:96:d1:6e:1a:53:f0:f7:
ed:49:3f:ab:d2:31:c9:49:3a:2a:75:c8:aa:57:10:c0:f0:e7:
bd:d3:80:0e:61:9b:95:f3:fa:41:0b:db:83:7f:4f:f0:a7:4b:
ce:65:d8:66:78:0e:1d:6c:8d:9c:b9:1f:98:19:71:da:68:38:
13:36:75:1d:2a:84:8b:bc:ae:df:68:11:e2:26:f2:c9:5f:1a:
50:4f:69:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:31 2025 by rpki-client