Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d67f9c11-9d78-3b93-8e5f-36da655f8d5b.roa
File: d67f9c11-9d78-3b93-8e5f-36da655f8d5b.roa (raw, json)
Hash identifier: b+SwIC18hViaIESpW6t5p5rQTw5KK0MmZlFN9g6UEzo=
Subject key identifier: BB:43:D3:AC:8E:9A:0D:54:8E:C7:B8:B0:44:AA:3C:CC:A2:9B:5D:8D
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183D7A540B8F7DD94456000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d67f9c11-9d78-3b93-8e5f-36da655f8d5b.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 396596
IP address blocks: 2001:500:125::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:d7:a5:40:b8:f7:dd:94:45:60:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=caf474ce-5190-4b99-a7d7-0d4c38cdf937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:93:84:da:dd:1f:82:5c:b1:14:52:2d:75:4a:
8d:c9:47:e8:ef:87:66:b7:04:76:ae:95:f6:f6:30:
51:fb:3c:a6:81:39:10:7b:73:89:91:00:d7:e2:68:
47:13:53:cd:9f:4a:e3:f1:e2:aa:10:6b:35:e8:a1:
ad:63:81:6f:15:4e:ac:50:58:b8:9b:81:da:87:8f:
0a:8c:4a:73:59:20:cc:0b:82:6c:23:aa:5f:a5:7b:
4c:09:83:84:b7:46:f2:b1:1d:18:0c:90:e3:9b:c7:
b0:e0:fa:d0:9d:6c:d1:85:9e:35:19:01:3e:d7:1a:
d4:89:66:98:af:c9:fb:b6:57:36:cc:6d:c5:19:24:
f1:49:26:db:4d:e7:d6:e8:0d:0d:a0:05:89:33:a3:
0a:bf:28:27:c7:1d:1c:0d:40:0a:35:60:9e:3e:af:
60:fb:2d:9c:98:b6:c2:d9:a8:65:da:fb:1c:ba:95:
4a:3c:db:68:54:61:4c:82:b6:0a:69:01:4a:2f:34:
6a:a2:e0:8c:e1:f9:3d:9e:9e:01:e8:d5:4c:9f:8a:
26:ac:28:1b:b2:e1:86:fb:58:d2:09:8b:8f:3a:7b:
30:b3:aa:77:5f:60:75:aa:a2:05:68:43:36:b9:fc:
38:50:c3:8b:f8:32:21:14:72:38:b5:7e:01:f9:1b:
52:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:43:D3:AC:8E:9A:0D:54:8E:C7:B8:B0:44:AA:3C:CC:A2:9B:5D:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d67f9c11-9d78-3b93-8e5f-36da655f8d5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:125:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:d4:de:57:d3:78:aa:ab:67:c5:c5:23:3b:c1:95:ab:85:59:
88:fc:7d:0e:77:92:82:2e:8f:7f:e3:ab:59:03:36:8d:b7:66:
c8:57:33:b9:d8:bc:ec:82:57:38:41:78:3d:03:a8:65:a8:26:
df:20:4b:9c:ed:73:65:c0:ba:98:36:fe:77:61:8b:44:d0:a0:
49:91:99:59:e1:4f:80:04:9c:30:d4:f3:68:14:26:51:63:8b:
ef:d0:57:da:1d:3a:18:3a:48:37:4c:af:94:8e:9a:fc:29:1a:
10:20:07:23:5f:1e:17:e4:ef:94:73:db:c1:aa:42:87:59:e2:
b7:88:ca:b4:eb:ba:30:20:1b:94:01:dc:6c:6e:f1:30:9d:10:
03:38:3e:3b:1c:a7:9a:4c:1f:62:5f:2a:0f:61:ac:e0:a7:ea:
99:2b:a0:4c:1f:a3:7a:81:6e:54:e8:18:f7:35:2a:40:e1:26:
72:35:05:4d:74:97:9a:33:6d:f6:13:f3:05:59:f5:ca:5a:d9:
bb:8b:01:6e:a2:f9:be:4d:0b:05:a8:2c:96:dc:2f:89:e0:a6:
bd:36:a6:70:51:6b:6e:5a:c3:b4:54:8b:b0:86:be:4c:6d:a2:
6f:f2:59:bc:51:81:a3:d5:41:72:6e:88:92:8b:61:f5:bc:0e:
6b:b3:6c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:57:43 2025 by rpki-client