Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be8ddea6-73b1-319b-a8a0-16f1b2f8d5d0.roa
File: be8ddea6-73b1-319b-a8a0-16f1b2f8d5d0.roa (raw, json)
Hash identifier: 3IIYkAWCC9ZHXWd7iC3Ma3FxdFTWswfdYjkoi5J63to=
Subject key identifier: 08:4C:B4:30:F1:F2:00:87:61:7C:05:AB:49:93:2C:4E:A4:98:C9:97
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183C080A34EF4C8F80AE480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be8ddea6-73b1-319b-a8a0-16f1b2f8d5d0.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 36624
IP address blocks: 2001:500:125::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:c0:80:a3:4e:f4:c8:f8:0a:e4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=8f7dd1be-c1fc-4c89-bb5c-7fc9ea2c7801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5c:a2:f2:94:a2:54:f8:c9:64:50:b1:a2:b1:
5f:9a:90:68:2d:73:2a:ff:a1:34:72:6a:0f:d5:69:
40:31:70:85:69:0e:66:24:d6:f8:6e:ee:d9:bd:28:
9f:87:ea:30:e8:f3:a4:20:91:0a:08:8c:b7:b8:1a:
5f:fe:ea:ec:b5:05:2a:29:e8:5d:06:4a:df:4b:c4:
a6:2c:c8:9b:07:6f:97:61:04:f3:cb:51:31:3f:a3:
e8:e3:c4:b5:b9:62:94:1e:25:74:fd:45:fd:0a:56:
8d:98:23:33:8c:90:6d:4a:cf:b1:8f:6d:dd:ae:76:
c5:72:9e:d5:f6:a4:1a:4d:69:3b:b0:69:7f:f5:4a:
cb:56:e1:10:72:b3:f3:b8:7e:a4:7d:9c:9b:d4:6c:
71:9f:b7:5c:08:07:59:ff:df:ad:fe:07:7e:6b:ba:
86:a5:8e:77:44:c1:90:f6:a2:79:b0:0d:ff:38:58:
b1:82:cc:97:78:da:fa:9a:2a:87:40:a7:e9:e1:6d:
c6:75:c1:21:94:e3:d9:25:5a:ca:7e:e8:a9:8b:9b:
72:31:df:59:06:b2:50:d5:a9:9d:58:72:ed:7f:3d:
24:13:61:32:46:fa:3e:f7:3d:17:6c:86:28:9a:1d:
77:05:62:0f:93:f2:00:8b:d4:88:39:51:18:42:e1:
5f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:4C:B4:30:F1:F2:00:87:61:7C:05:AB:49:93:2C:4E:A4:98:C9:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be8ddea6-73b1-319b-a8a0-16f1b2f8d5d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:125:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:7a:09:bc:60:41:8a:7f:ba:d5:b5:57:31:f1:71:6e:4d:c9:
64:b6:e6:b1:42:6f:61:5f:88:71:3f:42:8f:76:29:11:e7:de:
7e:b8:d4:0f:cb:18:4a:00:e0:0f:44:a9:bc:3a:fb:4d:f9:f4:
60:5a:b0:08:e4:42:ac:d6:bb:eb:25:72:12:32:c9:13:2d:b0:
dd:ac:51:48:00:8e:49:97:9f:1b:9f:04:36:e9:b6:a8:63:0d:
b7:4f:f6:84:3f:44:54:57:d3:9f:ea:41:fe:90:48:02:b6:b0:
0a:15:13:20:22:7a:b1:2d:12:87:25:fc:72:27:40:5a:36:56:
fa:ef:4a:70:38:95:42:08:c2:a8:6f:12:bc:69:a9:f6:87:7d:
2a:e5:4e:90:fc:eb:68:e5:12:67:07:05:c5:64:58:00:39:47:
71:2e:b2:87:c4:05:69:b2:25:f1:bb:c0:be:57:83:5e:73:62:
69:25:6b:e4:6a:f8:1d:a4:2a:42:f2:aa:25:e7:dd:01:16:ff:
6d:cd:dd:1b:d5:0b:fd:7e:71:b8:ad:27:78:c0:ba:2c:26:6a:
33:02:b0:5d:c1:f8:b8:05:7d:6e:df:a0:4c:e0:2e:51:c4:af:
d9:5c:c0:ee:62:77:2e:60:ce:f1:ae:95:ab:c0:60:97:9d:a7:
bb:2d:41:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:13:37 2025 by rpki-client