Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c6661790-c5a0-36b5-99aa-d99ac52a4a6b.roa
File: c6661790-c5a0-36b5-99aa-d99ac52a4a6b.roa (raw, json)
Hash identifier: ezxwKpWRMqQactDuzNCMyY+QtWVxmPxvdJV2pWoltkQ=
Subject key identifier: 9A:45:72:CF:77:62:1F:EF:36:9D:A3:E5:CC:D1:88:4C:55:54:E6:5E
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285849403983D7668137EE186AC380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c6661790-c5a0-36b5-99aa-d99ac52a4a6b.roa
Signing time: Thu 20 Mar 2025 13:00:53 +0000
ROA not before: Thu 20 Mar 2025 13:00:53 +0000
ROA not after: Wed 18 Jun 2025 13:00:53 +0000
asID: 396560
IP address blocks: 2001:501:8a29::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:40:39:83:d7:66:81:37:ee:18:6a:c3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 20 13:00:53 2025 GMT
Not After : Jun 18 13:00:53 2025 GMT
Subject: CN=1e8859a9-fb36-4e9f-9600-d0be26a9201b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:37:b0:8e:b2:d6:fd:fa:9f:2b:18:71:17:80:
72:d8:77:a7:91:d5:89:47:b5:12:c6:04:d8:d4:d7:
5f:1a:ab:38:1f:24:1b:84:f7:67:19:10:c9:3e:b5:
7d:e4:6e:5d:f8:9d:7b:24:09:5b:3e:dc:68:50:4b:
f1:c6:ad:78:3f:79:63:77:c2:6c:03:b1:97:9f:f6:
fb:07:3b:1c:a4:03:bd:e9:3c:44:3f:65:de:43:52:
ea:35:2e:98:af:7b:6a:0e:a1:59:7a:8b:41:12:22:
b2:14:59:f5:e9:5e:95:0c:55:e7:d8:62:80:dd:57:
89:49:6f:41:15:12:6a:01:f5:83:56:04:e0:9c:86:
bb:49:9f:0c:46:8f:3b:8a:28:ee:ec:2c:23:25:03:
a6:89:1d:00:ec:f5:46:42:19:04:5c:42:b2:ef:85:
ec:5b:26:37:83:76:35:6f:df:68:3a:45:55:40:8b:
88:cf:aa:2e:bb:a5:3e:fb:0a:fd:df:e1:06:ea:91:
fb:ed:f7:5e:20:32:6a:76:5f:54:d8:4b:aa:8c:95:
bc:b4:fe:7f:a5:f0:a6:17:26:4d:01:ce:45:21:fe:
33:1a:f2:2a:b5:68:4c:78:5e:01:3d:5b:4c:b7:49:
2b:83:2d:44:36:2d:e5:d5:81:7d:55:07:82:09:6b:
2e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:45:72:CF:77:62:1F:EF:36:9D:A3:E5:CC:D1:88:4C:55:54:E6:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c6661790-c5a0-36b5-99aa-d99ac52a4a6b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:501:8a29:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:f7:1a:92:15:2a:5b:e9:6d:96:85:85:8d:6b:8f:5f:e9:77:
60:dd:c0:7b:3a:64:d6:83:b9:f0:30:a9:1a:c9:af:9a:f9:12:
10:16:36:de:3d:b5:89:e2:1a:e7:1e:91:8f:a8:64:8f:6f:ad:
07:8b:3b:e8:2a:af:39:13:4a:04:de:28:af:68:b4:43:ae:84:
87:6a:68:f4:23:fc:df:68:01:5f:f7:81:59:8e:de:be:bd:8f:
86:b8:2f:3d:e1:31:a1:26:fc:d3:bf:e2:67:30:7c:c8:0a:37:
ae:79:fa:36:7d:1e:95:bd:fc:89:74:b8:d3:3d:28:5c:f5:f6:
2d:18:99:ce:30:50:7d:ad:77:01:61:1e:00:55:0f:31:e6:69:
dd:7f:c8:23:c4:2b:7b:02:01:69:0b:69:8b:43:10:72:44:bf:
1c:96:0d:8b:f4:f6:95:93:e2:bd:10:5b:2d:93:df:9e:75:4a:
bc:6c:69:3d:a0:c2:e6:88:73:56:7a:8c:25:ed:41:fa:1c:c4:
16:68:8d:9c:c4:cc:d9:d2:13:ad:15:08:01:43:e3:89:ae:08:
72:10:54:7a:83:d7:e3:1b:14:59:cf:51:36:38:b3:bb:f0:56:
df:82:db:06:fb:ac:ac:3b:75:17:7a:ac:a6:d5:9c:1f:f4:97:
05:d4:72:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:33:26 2025 by rpki-client