Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bcb24079-2d0b-3e40-bed3-130a35ca85a6.roa
File: bcb24079-2d0b-3e40-bed3-130a35ca85a6.roa (raw, json)
Hash identifier: zJPb/udCG4lnWX9a+n+55pOrznFKtJeRAigUDMbdiHo=
Subject key identifier: 3F:F5:0B:32:6C:01:4C:B7:22:1C:29:DB:34:46:5D:70:0E:36:7E:8B
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183D4D1067F44BAA18A5480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bcb24079-2d0b-3e40-bed3-130a35ca85a6.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 396616
IP address blocks: 2001:500:127::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:d4:d1:06:7f:44:ba:a1:8a:54:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=832c4206-a199-4a2b-80fa-ed3c54e4eb6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:12:35:c6:82:00:74:64:4b:10:07:8f:4f:ea:
cd:f3:be:20:de:a5:61:1f:77:77:aa:2f:25:73:6e:
65:6f:7d:98:ab:78:c7:27:69:d1:e6:30:8f:06:ab:
5c:cc:db:99:05:e4:9d:0e:be:51:a4:dc:d0:62:98:
66:3d:a0:3e:d4:25:f4:72:8a:4e:11:a2:5f:51:5e:
93:3e:1a:ef:c1:01:ca:f4:fa:97:98:c3:f8:de:d3:
ed:22:f6:69:a1:a7:69:62:6e:3b:ee:88:bc:7e:ae:
9a:ad:52:61:49:ab:17:07:5c:44:90:c5:f6:6c:f9:
e3:d2:34:a8:15:c7:97:7a:e0:9e:25:da:6a:f6:5e:
d6:44:1f:4f:91:01:fe:06:ed:51:3e:a9:ef:a4:25:
d1:76:78:47:b1:b8:51:e5:df:aa:c4:a5:da:c2:c0:
41:70:9b:6c:e6:56:64:b0:c2:05:b0:bb:16:f0:64:
89:06:96:c7:0f:64:52:26:70:e4:eb:a5:51:12:ac:
3d:49:4d:c6:0b:1a:91:54:49:8f:7c:3b:c8:0f:6d:
75:f2:28:18:64:0f:09:91:8f:3f:87:ed:99:14:da:
28:fc:1c:39:6f:42:0f:c0:21:56:8a:83:7a:25:c9:
fb:0c:39:b6:c7:b0:16:40:98:d8:00:ae:8d:01:0d:
fb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F5:0B:32:6C:01:4C:B7:22:1C:29:DB:34:46:5D:70:0E:36:7E:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bcb24079-2d0b-3e40-bed3-130a35ca85a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:127:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:33:e0:cc:9f:40:12:88:c3:3d:92:25:5b:4d:3e:5d:97:84:
9a:00:36:ed:9e:f3:d8:3a:89:24:0f:83:26:29:3b:df:49:d8:
e6:56:99:3f:46:22:4f:7e:3f:ef:bc:08:8c:37:bf:5b:42:0c:
8e:3f:84:0d:58:1d:1a:47:65:ea:18:1e:a4:26:b0:82:fa:6b:
65:aa:fe:79:28:95:a6:0b:af:fd:d0:19:9a:f9:b1:74:6c:94:
5b:5f:61:45:16:96:91:9f:42:9f:4d:a5:a0:f6:0c:e4:68:75:
b2:86:5d:b7:e0:6c:9b:b3:02:63:c1:4f:52:aa:a2:27:48:2e:
54:96:97:10:51:43:ee:8c:f7:0a:91:80:3e:f7:ee:d6:b9:4a:
74:fa:13:66:d2:76:aa:0b:bf:3a:ba:7a:24:16:e5:71:80:a0:
26:cd:de:49:24:26:3c:6f:e0:00:34:10:c9:d9:78:05:dc:8a:
ea:ea:d4:45:30:2f:eb:c8:b2:f8:86:67:29:e8:ab:dc:56:54:
62:c6:ae:61:b0:29:ad:77:de:c7:9f:d4:50:3f:0f:e8:7b:50:
32:65:14:5f:2e:55:02:26:f6:35:6f:fe:bc:7f:b6:ce:93:f8:
62:9f:b6:8e:d7:b6:32:0a:b3:31:0e:51:38:34:23:6e:a0:90:
04:25:41:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:02:11 2025 by rpki-client