Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f8ded0f0-0269-3614-8f0a-f69c5e22dc40.roa
File: f8ded0f0-0269-3614-8f0a-f69c5e22dc40.roa (raw, json)
Hash identifier: G8FrUCNiqHU24HOxnt9gdg4Hu+MkKBcC2axomyHZng4=
Subject key identifier: F5:12:7F:C8:D7:41:3B:F3:86:F6:83:51:62:27:7E:EC:60:C8:57:D3
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285849393E9470F0F96CF11ADC3B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f8ded0f0-0269-3614-8f0a-f69c5e22dc40.roa
Signing time: Tue 18 Mar 2025 01:00:38 +0000
ROA not before: Tue 18 Mar 2025 01:00:38 +0000
ROA not after: Mon 16 Jun 2025 01:00:38 +0000
asID: 396578
IP address blocks: 2001:500:120::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:39:3e:94:70:f0:f9:6c:f1:1a:dc:3b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 18 01:00:38 2025 GMT
Not After : Jun 16 01:00:38 2025 GMT
Subject: CN=438613d4-2408-4a39-a2ed-802754daef85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:38:5f:91:b5:63:e8:da:74:32:bf:8c:fa:37:
cc:96:5d:61:33:5a:0c:08:b7:ae:21:c1:de:79:9c:
b6:5e:16:8b:a3:44:41:81:71:ae:4d:ab:94:c4:64:
71:09:20:65:f7:3d:c6:62:b4:7c:42:a8:99:8f:f1:
5e:80:42:8f:f0:ca:b4:ff:97:a3:b6:9d:5b:c0:73:
a3:f9:e4:4c:d8:21:28:86:19:63:35:19:80:de:7f:
34:24:f9:fe:74:47:d0:bc:60:b8:0a:43:37:61:59:
fe:c5:6b:29:de:42:75:5e:44:f4:63:12:b5:58:f5:
56:29:52:72:f9:94:96:47:5c:c8:a3:fb:39:46:76:
2e:ac:c6:04:5b:57:fb:da:26:af:3d:14:68:8c:ad:
6b:15:05:29:aa:2f:b0:ed:ca:a9:28:d5:0c:f7:b9:
a3:14:73:06:c5:15:b6:e4:7b:2b:8b:02:56:f8:f3:
3d:57:6c:b7:e4:c2:e5:b5:d0:b6:3c:39:5b:a6:4b:
1c:98:bd:dd:eb:e0:f1:f1:40:ef:a9:c6:d1:c8:27:
c1:80:c5:42:9d:19:b8:92:d9:00:ca:de:f0:16:36:
74:44:e0:6c:f2:49:5e:9e:63:f5:2d:33:89:37:1f:
7b:f7:49:5c:e3:d4:aa:c9:e0:0f:56:8e:8c:71:b0:
2d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:12:7F:C8:D7:41:3B:F3:86:F6:83:51:62:27:7E:EC:60:C8:57:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f8ded0f0-0269-3614-8f0a-f69c5e22dc40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:120:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:44:d4:d7:e9:18:5e:9d:8d:f6:fb:aa:90:38:40:41:41:6b:
83:c0:81:07:a3:7a:54:08:3e:1e:0c:a7:25:41:63:fb:58:b4:
26:22:ce:b1:d9:fa:af:4f:09:86:ec:d6:3b:6f:83:2f:17:cd:
6f:9a:e0:ec:97:d8:53:8a:41:8d:a0:d3:6b:b3:d0:24:d0:64:
f4:7d:08:52:7d:dd:88:fc:3f:ad:84:bb:84:11:88:32:15:d6:
1b:96:82:1c:e1:b7:8d:95:56:b5:bf:55:66:eb:30:3e:a5:3c:
04:4d:0c:08:ca:37:42:f3:d3:18:2e:96:aa:85:50:1f:c4:5a:
02:78:b6:45:45:1a:e3:8c:1d:b2:8f:e1:4c:e8:62:4b:ac:f9:
09:ca:38:f5:17:76:50:21:c3:46:95:c5:8d:b8:53:c3:02:69:
87:bb:63:fa:fa:c0:99:8b:86:cc:c6:65:44:e4:6b:b4:e8:1e:
3d:e3:7e:2b:cb:64:da:a2:65:fb:92:87:5e:9e:0a:97:fa:be:
ee:14:21:46:7f:3a:74:94:9b:86:de:b0:b2:a0:ae:3f:40:b8:
6e:56:50:ad:5d:7c:c8:91:fd:7b:be:39:e7:6c:ca:64:d2:d8:
67:64:b4:b4:6a:de:dd:41:fa:58:3a:fc:9f:d4:04:6d:5d:e0:
d9:ae:f1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:35:34 2025 by rpki-client