Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d9b3f1d6-2a64-3a24-8609-1c2198435f4f.roa
File: d9b3f1d6-2a64-3a24-8609-1c2198435f4f.roa (raw, json)
Hash identifier: gUHQ0NqJY1L8P4p/ohWit410riKNbt5I/2ibJyMYWKA=
Subject key identifier: 46:C3:F9:E0:E0:08:57:42:83:6B:79:DE:F9:18:AE:EC:A2:D9:24:66
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285849393E8DCDF826E6D52544A900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d9b3f1d6-2a64-3a24-8609-1c2198435f4f.roa
Signing time: Tue 18 Mar 2025 01:00:38 +0000
ROA not before: Tue 18 Mar 2025 01:00:38 +0000
ROA not after: Mon 16 Jun 2025 01:00:38 +0000
asID: 36618
IP address blocks: 2001:500:120::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:39:3e:8d:cd:f8:26:e6:d5:25:44:a9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 18 01:00:38 2025 GMT
Not After : Jun 16 01:00:38 2025 GMT
Subject: CN=0d94f40d-baf9-4f3d-9f4d-b805e298b41a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:53:a7:49:60:1e:31:28:a6:eb:62:a9:10:7f:
ef:52:c8:cf:7d:87:3b:c0:c9:88:cf:8c:ad:47:ab:
73:70:68:7e:59:ac:ae:ff:3b:0f:87:a7:8c:84:76:
84:af:df:8e:77:07:2d:8a:f7:a3:b5:db:f2:b7:8d:
5c:e0:c1:ce:97:39:35:98:fb:52:a3:83:d2:bf:b7:
2d:84:f5:fb:d1:23:d0:7e:a8:f2:24:80:d1:95:ee:
c8:ab:39:a3:ca:89:e9:7a:3a:dc:36:ea:63:c8:60:
91:04:26:42:45:66:4b:fc:5b:ce:7b:5c:90:47:30:
41:8f:9c:e2:c6:0b:b4:f3:00:d2:ae:29:44:49:9c:
b5:a4:32:24:d4:15:f9:87:ef:8f:3f:37:da:42:ec:
9e:ff:2a:3b:07:fb:00:48:78:70:2e:c6:30:b6:98:
d8:57:2e:f9:34:a5:88:8b:ea:4f:6c:2b:32:c2:ef:
8b:b0:71:54:fe:2a:e3:1c:1d:05:b4:d1:c3:a3:ba:
8a:ff:99:bb:1f:de:c7:7a:44:4b:d9:32:32:2b:48:
6d:52:df:40:f2:d3:87:ea:49:d5:ce:da:1f:aa:40:
1f:d1:0d:74:c8:19:0a:92:e1:81:ad:7e:53:aa:5a:
51:a8:57:4b:fe:04:ff:a1:90:22:6f:6c:d6:5e:a9:
56:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C3:F9:E0:E0:08:57:42:83:6B:79:DE:F9:18:AE:EC:A2:D9:24:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d9b3f1d6-2a64-3a24-8609-1c2198435f4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:120:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:c9:cd:d8:84:c1:85:bd:0e:4e:52:5c:5b:72:b8:d0:02:de:
d1:24:07:60:20:ca:cb:ac:a7:da:2c:f1:7e:81:9d:46:ee:aa:
cc:34:25:d9:27:77:41:4d:79:15:4b:76:99:5d:40:89:ce:f3:
9c:da:5a:11:20:06:7b:60:fb:69:2c:cc:03:40:2d:a7:1e:73:
b5:65:ff:bd:47:7d:12:40:20:21:c8:f6:3c:9f:bf:e5:31:61:
b4:56:6c:d9:26:e7:ad:66:4d:39:6e:86:9b:6c:b7:34:3f:f6:
17:41:1c:99:d5:79:c6:59:c7:8f:79:5b:d2:cc:d8:81:60:5f:
bd:51:90:1f:43:84:b4:7e:eb:ba:c3:bd:56:5d:a2:67:9c:81:
d4:88:9f:7c:9e:e1:fb:c5:10:08:19:df:71:5d:76:82:60:cc:
8a:8d:f3:b1:4c:12:d9:75:c4:84:34:d7:42:2f:1f:94:ab:dd:
20:5a:72:2b:b4:7b:13:ac:02:37:84:94:73:86:68:73:1b:30:
80:7e:20:27:b0:73:7c:5a:f1:c5:37:2b:cd:c1:21:78:ea:73:
d9:1a:aa:d2:11:17:a6:fa:3c:ea:05:b6:08:00:56:3b:e8:cd:
42:30:7b:25:b0:e1:8f:c4:84:21:0b:6a:d9:b9:77:20:1d:07:
6b:3f:9c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:13:25 2025 by rpki-client