Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b301b075-7382-36d3-9f52-a600b0abaeb7.roa
File: b301b075-7382-36d3-9f52-a600b0abaeb7.roa (raw, json)
Hash identifier: KxqWVChegIQ1QuFJRyn3UtziJHbojtgPpGQfgCUcEkU=
Subject key identifier: DA:DE:84:95:35:3F:50:91:11:1C:A8:F0:23:70:B3:A9:7B:CB:81:20
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285849244E928198B623AEE21AFCC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b301b075-7382-36d3-9f52-a600b0abaeb7.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 396614
IP address blocks: 2001:500:122::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:92:81:98:b6:23:ae:e2:1a:fc:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=673ba108-4f15-40a4-9d59-8ba82a85497a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:78:cc:8e:31:ae:4c:52:92:3d:b5:8a:83:72:
4a:a1:2c:62:c8:df:81:f0:f1:dc:db:00:34:02:02:
a4:75:5b:90:18:a3:8e:ca:d4:ba:a4:60:a8:10:83:
58:72:42:af:39:ab:c7:4f:52:de:56:a0:56:72:c0:
76:7f:d2:1c:32:4d:67:7c:fa:af:6c:97:b4:d9:48:
fa:25:96:58:05:0e:50:d8:03:60:2f:df:26:e2:76:
8f:f7:fc:4d:97:18:8a:65:10:84:3e:e7:73:d6:18:
17:4e:c5:5a:d0:98:86:3e:ab:97:0f:17:09:1d:05:
59:53:07:cf:77:5e:be:0a:41:af:b0:0f:7a:95:ce:
94:97:ad:d3:f2:b5:b1:11:1c:91:9f:d5:e8:c8:d2:
ed:61:e5:8b:c8:61:b4:97:1e:7f:14:d8:52:9c:7a:
6f:8c:13:15:1f:4b:91:2b:90:ad:e3:ab:9f:ab:d4:
61:a7:58:40:21:5d:70:31:71:e9:2f:be:d0:59:c9:
a6:0c:63:bf:8d:25:79:25:45:9b:89:c6:f4:9c:3d:
e1:da:23:37:da:1e:f7:3b:17:e9:ac:82:3d:62:1d:
3f:9b:75:76:fc:01:15:fe:4a:79:09:f0:53:e9:ef:
cb:92:e3:24:eb:4b:3d:6c:4a:9e:6c:95:05:66:83:
c5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:DE:84:95:35:3F:50:91:11:1C:A8:F0:23:70:B3:A9:7B:CB:81:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b301b075-7382-36d3-9f52-a600b0abaeb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:122:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:08:ce:d9:2a:47:92:a7:1b:43:87:5b:1b:c3:42:e9:68:ba:
c3:df:91:d6:eb:59:a4:45:4f:fb:6d:a4:e0:f7:4c:a2:53:a9:
0f:42:9c:eb:67:30:9b:62:5b:70:19:77:92:f5:49:60:e9:00:
09:ff:a7:79:4f:06:0d:a3:9e:6d:4d:38:6d:37:71:3a:f1:f8:
08:e6:a0:e6:84:95:53:fe:5e:56:b4:38:ff:64:92:4f:d9:42:
16:13:17:a1:3d:5e:ff:31:da:94:c9:f4:9a:9d:33:89:07:d9:
c5:3b:24:5c:b5:a4:7b:c4:53:d1:1a:4b:ce:4a:20:0d:96:f5:
6e:73:aa:f2:57:03:d6:ef:ae:71:79:53:7a:81:da:fc:50:75:
63:fa:43:fe:1a:6e:44:75:1c:bb:7b:98:bf:eb:21:51:f0:bc:
be:09:b0:09:21:0d:ac:55:5a:e4:24:2b:a2:e4:f1:64:bf:50:
ab:95:bd:07:f2:1c:3e:7b:a6:e3:7e:d6:6b:1d:4c:a6:17:de:
dd:2d:b5:38:68:6f:1e:38:8b:9a:ea:dd:f9:5d:4e:19:dc:54:
b8:a8:99:b6:12:db:ed:35:37:f0:46:b0:cf:00:77:90:82:10:
eb:07:5a:92:6b:0b:4c:44:21:be:1d:47:9c:7e:fd:54:7a:11:
da:97:dc:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:35:33 2025 by rpki-client