Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9f9cab4-584f-3aa4-a3ac-c4be4c4e1a09.roa
File: b9f9cab4-584f-3aa4-a3ac-c4be4c4e1a09.roa (raw, json)
Hash identifier: 6XfezTJT/iy1K5Rn1sSLszyLFDJY44J+WdwAgoTk9o4=
Subject key identifier: 57:F0:42:13:71:C0:C2:98:4B:CC:89:B3:59:85:5E:E7:33:B0:5C:98
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183CFF2B8F20644090B9B80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9f9cab4-584f-3aa4-a3ac-c4be4c4e1a09.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 397193
IP address blocks: 2001:500:127::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:cf:f2:b8:f2:06:44:09:0b:9b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=8dc0740a-af7b-40bb-965d-fed806c2a512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9c:8e:28:43:84:a9:36:a7:3f:63:93:3a:ec:
ac:e2:2f:c6:b5:3d:af:b3:6b:d4:f5:d3:43:64:75:
df:bf:aa:f6:69:b7:49:7f:dd:12:b6:b1:d7:4e:94:
1f:b9:5b:ea:f0:6d:02:2f:31:79:57:a7:53:c4:7a:
9d:93:37:47:61:18:ea:13:3f:7b:48:96:30:94:bd:
ed:68:ca:4f:24:5a:22:06:49:0f:fb:fb:7c:21:3f:
52:41:8e:87:19:cf:2b:75:ab:58:78:14:6f:9a:e0:
dd:bd:a4:74:ee:de:c4:3b:de:ad:54:73:e2:37:1c:
45:a0:c6:7b:10:f3:3c:ae:b4:62:ac:c3:ee:d3:9c:
81:61:9f:06:a3:d3:58:c9:4c:15:15:04:5d:b8:1c:
10:b6:34:df:59:58:96:2a:89:74:70:0f:a1:5f:9b:
d2:0d:23:25:50:f5:85:6b:67:de:a7:f4:e4:e5:6e:
68:7e:e4:a1:a2:fb:21:28:d4:10:ae:66:f5:a1:cf:
d9:49:18:e4:41:86:0d:d7:01:83:a3:9e:3d:45:d1:
1b:96:fb:26:91:6d:0b:f5:4a:18:54:3e:99:c9:8d:
51:38:c7:74:d8:d3:e3:5a:12:b0:69:73:5a:dd:5d:
ce:9b:31:d9:5c:67:a3:c5:99:21:fd:b6:24:7f:28:
58:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F0:42:13:71:C0:C2:98:4B:CC:89:B3:59:85:5E:E7:33:B0:5C:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9f9cab4-584f-3aa4-a3ac-c4be4c4e1a09.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:127:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:bd:ec:c2:f0:4a:29:6d:a4:80:f6:0e:1c:86:57:cb:38:ba:
c3:19:b7:28:bd:e9:d4:9e:f3:c8:8c:79:0d:c3:62:b9:fc:e7:
d3:66:bb:c1:c7:6c:6b:0a:63:b7:92:85:4e:68:4e:62:27:9e:
8d:f3:54:50:83:b2:53:73:28:eb:35:32:81:cb:fd:3e:57:95:
8b:86:1d:c2:88:ec:2d:f4:4a:64:de:df:dd:17:cc:bd:25:82:
06:80:d8:30:be:b0:dd:b1:dd:ea:67:2a:0f:c8:b3:7e:5a:7b:
28:b2:68:c8:35:5f:f7:32:2e:3f:f9:79:8a:68:84:7b:f2:ce:
c4:74:44:5c:70:f1:9f:2d:5e:a2:85:37:23:9c:a1:2e:11:d1:
64:96:63:89:a5:e3:ee:55:87:c0:ca:38:5a:82:4d:82:57:5d:
3e:27:7c:8e:1e:8d:77:a0:2a:41:28:7e:9b:d3:9e:0b:09:86:
0b:1c:5d:e4:b9:dc:50:e3:6d:aa:7a:d4:06:4f:89:16:49:f6:
1c:b0:a3:08:24:bd:4c:ab:22:bd:b4:62:0e:ad:fc:31:06:f4:
38:42:44:2e:e3:fc:48:d2:08:2e:20:91:bc:42:a7:6c:63:51:
78:20:a9:d9:94:b1:f7:ee:65:ca:f4:61:5b:4d:a2:8f:3c:0f:
b8:2f:47:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:13:35 2025 by rpki-client