Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c86bea9a-2b90-3624-a5e2-2428810756d4.roa
File: c86bea9a-2b90-3624-a5e2-2428810756d4.roa (raw, json)
Hash identifier: hDzR5/mpq+24lowJ1l/jniDaJbgXXTgW4bCBfdpZ96E=
Subject key identifier: 60:C4:44:A7:61:6E:99:24:FD:BF:91:A2:02:B7:10:74:A3:3C:AC:E2
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858494039859131CB2F28035FCFB0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c86bea9a-2b90-3624-a5e2-2428810756d4.roa
Signing time: Thu 20 Mar 2025 13:00:53 +0000
ROA not before: Thu 20 Mar 2025 13:00:53 +0000
ROA not after: Wed 18 Jun 2025 13:00:53 +0000
asID: 40717
IP address blocks: 2001:501:8a29::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:40:39:85:91:31:cb:2f:28:03:5f:cf:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 20 13:00:53 2025 GMT
Not After : Jun 18 13:00:53 2025 GMT
Subject: CN=7f4187f6-54f0-40cf-ab1a-bca4411224d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:bc:00:24:09:67:7d:30:f7:16:6f:4b:33:20:
39:db:c0:82:e2:37:e9:1f:18:bb:e3:e3:de:31:5c:
53:51:3b:50:1c:1e:38:83:52:26:38:f8:10:7d:f7:
08:df:7d:54:cb:3a:ed:dd:bd:5b:93:f2:0f:5c:96:
2e:41:ae:40:f0:94:c1:bb:f4:c4:96:a1:76:9a:77:
7c:29:f2:8a:2a:db:aa:62:77:d0:32:da:c2:83:7b:
77:f3:8f:16:90:f1:8e:88:75:a6:e8:35:3a:06:1a:
95:d3:8c:e2:55:6f:78:51:f1:a3:d2:1a:75:51:99:
cf:7e:e2:82:9e:fe:50:1e:bd:37:33:63:1c:1e:c1:
e3:c6:0a:a6:00:0f:e7:45:d5:6f:7d:c1:a9:0a:60:
d0:f7:9c:99:50:19:8a:18:da:90:da:71:d8:66:f2:
cb:9a:ef:d3:89:3d:4c:6c:71:58:f2:62:f1:1f:a7:
85:7b:34:c1:33:25:20:e8:d8:64:e3:f7:20:1b:56:
a8:12:57:72:bd:ce:f2:6e:d9:e4:3c:f6:55:fd:68:
69:f3:95:b8:d1:26:d2:e8:88:6d:b0:98:3a:df:be:
fe:3d:ca:17:0c:6a:6f:12:3f:35:9d:9c:e8:11:48:
b0:40:32:ab:3e:79:19:c6:f3:a9:80:eb:e4:34:aa:
0a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C4:44:A7:61:6E:99:24:FD:BF:91:A2:02:B7:10:74:A3:3C:AC:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c86bea9a-2b90-3624-a5e2-2428810756d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:501:8a29:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:63:56:56:4f:98:76:36:42:9b:33:e7:83:7d:43:0b:1d:9f:
7b:b6:bf:6b:e9:b9:21:f8:45:8f:f7:3a:03:05:8d:ef:8e:bd:
ba:c7:8e:c7:9f:8d:6b:d6:40:d3:a5:85:90:79:ce:06:0a:f8:
16:23:29:6e:7b:eb:ce:74:b1:43:23:de:a9:af:f5:c9:c5:61:
77:b4:c3:3e:d5:81:9d:ed:83:1f:b4:66:ca:38:c9:43:63:b2:
32:d1:41:35:2b:c0:94:22:a5:21:6c:19:6f:9c:17:6f:8d:5d:
c7:cf:da:db:88:69:1a:07:2f:5d:35:0c:7d:93:d9:3d:41:85:
d0:25:a1:16:be:94:77:3f:25:6f:98:82:37:17:ba:17:b3:ce:
97:77:42:06:bd:e5:aa:df:32:23:52:75:93:3a:c7:0b:57:ca:
83:b3:2e:d7:37:e9:4b:eb:fd:2e:51:7f:03:48:70:4d:64:ee:
b1:c0:77:03:b3:cb:91:1c:92:73:ba:dd:c0:ed:7d:d5:a0:49:
9b:12:e0:81:d1:d9:2c:29:72:a1:f5:dd:f1:db:46:cb:be:cd:
fa:92:96:74:c6:bb:ce:fe:f6:f6:4f:fb:eb:54:86:2c:01:cb:
71:2b:42:92:3c:87:ea:87:ae:ea:56:70:f8:76:8b:82:b9:32:
a6:0c:3b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:35:06 2025 by rpki-client