Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4e9e6fa7-65b3-311e-a4b5-1101a3ab0c95.roa
File: 4e9e6fa7-65b3-311e-a4b5-1101a3ab0c95.roa (raw, json)
Hash identifier: LTQNDfvVlb2/OtuPXgcURUlvU9Chci/5AearBqvjVSM=
Subject key identifier: 51:EB:83:A3:0C:54:24:E6:05:94:A1:AF:A9:5D:36:30:D2:AD:68:F2
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858484243246F5D8EA45DF3850AA0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4e9e6fa7-65b3-311e-a4b5-1101a3ab0c95.roa
Signing time: Thu 19 Dec 2024 13:45:31 +0000
ROA not before: Thu 19 Dec 2024 13:45:31 +0000
ROA not after: Wed 19 Mar 2025 12:45:31 +0000
asID: 36627
IP address blocks: 2001:500:125::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:43:24:6f:5d:8e:a4:5d:f3:85:0a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 13:45:31 2024 GMT
Not After : Mar 19 12:45:31 2025 GMT
Subject: CN=147f73dd-37bd-436d-b205-e5142a9b9379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f0:97:55:95:51:4e:53:eb:9b:8a:a2:c7:64:
05:52:7d:33:23:df:e8:ea:6e:45:1a:2d:a8:c2:cd:
56:c9:7c:74:6a:b4:07:60:e4:3e:23:ad:43:c8:f7:
fe:d5:e4:d5:20:f1:f7:9e:fb:e5:bb:a4:31:9d:48:
1a:5f:05:75:12:40:fe:87:b5:0a:53:b8:bc:6f:70:
55:11:96:e6:11:d4:1c:ff:5f:c0:58:79:d5:44:96:
db:85:6e:cc:87:ae:45:db:18:52:e1:52:f1:ea:bf:
cb:20:76:0e:4f:ff:c2:32:f2:8e:bc:15:fa:7c:3d:
55:95:be:c1:3b:d8:61:81:00:3b:12:6c:30:30:f8:
76:63:f0:58:c2:5b:47:3b:e7:1f:8d:ee:ba:0f:a4:
17:a4:14:84:52:f3:90:75:f9:2c:97:50:d9:81:93:
6d:9e:d5:4d:b9:07:43:fc:81:39:85:24:15:e4:6c:
08:08:05:c7:1e:e8:4f:98:d3:7a:05:8b:32:29:9d:
17:d2:e1:9e:cc:1a:6e:8e:ad:28:29:0f:a8:ad:8d:
3f:0c:49:30:ce:42:7a:32:9a:b0:51:4e:d7:47:2b:
c4:e3:91:0e:d8:1d:16:39:41:37:36:1c:e1:e5:cb:
bc:d8:6d:36:f7:d0:69:f3:7c:35:91:d3:8f:c0:b6:
df:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:EB:83:A3:0C:54:24:E6:05:94:A1:AF:A9:5D:36:30:D2:AD:68:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4e9e6fa7-65b3-311e-a4b5-1101a3ab0c95.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:125:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:7b:26:1a:ac:c9:a5:77:da:b5:d9:38:61:e2:f0:eb:c2:f6:
5d:b4:8d:ad:2b:e1:26:b5:d8:50:7e:ac:ef:97:7a:ee:78:5b:
d3:96:bb:44:8f:25:f0:9d:7f:f1:89:d6:cd:73:75:27:32:b1:
06:e2:21:0d:ed:0d:85:f2:09:ea:65:3b:6e:6f:35:eb:92:71:
58:55:8d:8c:47:cf:c9:24:78:dc:98:41:63:e7:e7:0f:ab:ea:
e4:e3:c7:e1:b9:42:5b:01:9f:f2:26:d7:61:ba:35:aa:86:d3:
6f:9a:5c:aa:e9:34:5c:8d:70:1b:fc:11:10:6c:76:5f:c4:88:
07:65:4c:5f:90:f8:05:2e:0e:e7:04:8d:fc:21:cb:eb:be:3b:
2f:82:1b:44:7e:42:0b:47:89:33:3a:ca:b1:36:40:65:58:af:
b3:fb:f3:32:6c:93:e1:01:08:49:6e:aa:10:c6:bd:d6:1a:00:
7a:7d:52:6c:b4:d0:a3:c8:f0:b5:77:f9:29:b3:55:06:2c:41:
b0:d0:25:9c:fe:05:a1:30:55:e5:44:ea:c7:52:9e:70:d9:9d:
33:b1:17:d4:3e:c3:88:68:2a:ba:7e:28:a3:6f:c6:23:03:a6:
12:3d:6d:14:c2:18:aa:0c:48:19:87:83:04:f3:85:5b:8d:bf:
6d:94:dd:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:52:27 2025 by rpki-client