Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf4b7815-a8c3-3384-8d0d-d6661c0c8451.roa
File: bf4b7815-a8c3-3384-8d0d-d6661c0c8451.roa (raw, json)
Hash identifier: lUML6tAOCnkqOOBITyCDoeuGjiMMtR5CC4LA5W6YBFA=
Subject key identifier: 4B:28:ED:1F:C6:25:A3:57:41:E6:C1:9B:03:4C:0C:C9:6D:C3:2B:E4
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285849244E91DB300DDD6E24852200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf4b7815-a8c3-3384-8d0d-d6661c0c8451.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 211369
IP address blocks: 2001:500:122::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:91:db:30:0d:dd:6e:24:85:22:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=e6510292-473b-44b2-9609-33639ff5b6de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a3:5d:a9:af:3e:21:31:74:9f:5e:43:fc:fe:
8d:55:d6:36:17:4a:d6:cf:cc:89:da:37:8c:b9:cb:
cf:0d:97:bd:15:bf:46:7f:04:fa:93:25:3e:ba:09:
fc:0f:5f:73:47:2b:3e:28:27:4b:73:52:9e:15:64:
d6:45:fd:23:fe:0e:8d:e1:77:d5:1b:0b:95:0a:19:
7e:40:15:5d:b4:34:82:c1:35:78:77:06:54:fe:91:
c2:d5:ba:69:5b:7b:72:18:95:0d:13:bf:7d:ef:c7:
38:68:b4:47:3f:75:a9:5f:d1:66:cd:43:99:1d:bf:
06:5e:41:83:b3:39:0a:ec:21:c1:5a:fa:08:6b:7c:
6d:d4:c5:31:08:1f:a6:58:31:32:1e:c7:85:6e:ba:
a5:aa:b9:56:b5:a7:5b:47:36:a3:c4:e4:4d:e0:70:
d8:e9:ce:ad:40:87:eb:88:14:cb:3b:fe:3f:16:07:
f6:48:32:5c:c9:2b:23:ae:b1:37:89:a1:1e:88:13:
06:30:9a:44:bb:7e:08:d9:3b:6b:f1:84:a7:90:f3:
7c:27:21:b0:a2:f0:e2:d5:0e:d5:d4:8c:b5:02:b1:
27:e4:ba:45:b0:66:47:b1:ce:fd:38:00:6b:31:a5:
fe:32:c5:92:de:04:eb:16:45:76:b5:e5:2e:dd:24:
4b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:28:ED:1F:C6:25:A3:57:41:E6:C1:9B:03:4C:0C:C9:6D:C3:2B:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf4b7815-a8c3-3384-8d0d-d6661c0c8451.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:122:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:8a:f2:5d:95:87:b0:49:eb:e5:80:46:0b:f3:67:d1:48:db:
c0:8c:61:e9:74:16:ce:5b:10:13:69:b7:38:70:97:ec:9d:5d:
b0:f6:86:d8:c4:1b:b0:95:85:d3:1b:9f:42:60:53:ce:6f:72:
35:ab:34:ee:78:2c:5c:62:15:e8:66:eb:07:74:6e:0f:ec:2a:
07:8a:a5:fa:25:90:2f:40:e5:20:e3:87:49:93:cd:1a:42:73:
ed:e1:47:7f:84:d2:aa:f7:07:55:67:d6:8d:d4:88:62:cd:75:
a3:3e:23:03:27:3c:e9:93:0b:33:37:b7:e8:6a:4d:0b:f5:8e:
c3:69:98:9d:35:f2:c4:e1:43:5e:95:c9:e8:5f:7f:d8:67:cc:
23:8d:b7:bd:5f:b5:48:71:dc:56:0c:1e:ff:38:32:98:66:18:
60:3d:70:fe:fc:c1:40:6c:c7:e9:3d:68:76:48:c5:34:9b:63:
fc:da:6e:83:cf:0f:af:84:f7:2d:d5:dd:47:49:77:2d:a0:74:
a6:0e:82:91:64:38:5d:93:b7:74:82:89:52:68:e3:70:6a:ac:
7b:93:a8:99:03:10:f2:0a:bb:26:20:c8:dc:94:b7:ea:95:df:
2d:f0:dc:28:ce:e6:06:1d:91:48:1a:91:c2:92:0e:10:0a:71:
1f:4d:46:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:08:36 2025 by rpki-client