Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9a102025-f316-3a7d-9352-a3321ac695a6.roa
File: 9a102025-f316-3a7d-9352-a3321ac695a6.roa (raw, json)
Hash identifier: N3EJTGXVyugDJKOlIcCaxX61pEUjYCiH1F5eMf6KRAk=
Subject key identifier: 45:FE:36:67:9A:6A:96:62:5E:7E:1C:80:D8:2A:6E:21:56:07:02:60
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858484242EBB2DD9E1181B361D780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9a102025-f316-3a7d-9352-a3321ac695a6.roa
Signing time: Thu 19 Dec 2024 13:45:05 +0000
ROA not before: Thu 19 Dec 2024 13:45:05 +0000
ROA not after: Wed 19 Mar 2025 12:45:05 +0000
asID: 396585
IP address blocks: 2001:500:125::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:42:eb:b2:dd:9e:11:81:b3:61:d7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 13:45:05 2024 GMT
Not After : Mar 19 12:45:05 2025 GMT
Subject: CN=fd978947-f2ed-4e8a-85d7-03fb0d4ab33d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:73:df:fd:69:8e:be:be:a4:48:59:58:a7:d2:
48:31:57:97:90:82:73:8b:a3:98:99:a5:73:b0:eb:
d9:e3:47:8e:75:b4:ae:92:2d:29:14:55:76:8f:1b:
3a:47:c8:6d:14:54:e2:58:c5:d9:ae:81:30:fa:1c:
ec:6f:f2:46:0b:3c:4d:0f:b7:96:fe:23:e1:53:6d:
9a:b4:2c:41:e8:0d:f1:14:e5:f9:ea:91:c5:8a:b9:
a6:43:2f:0d:45:25:e3:ab:73:ab:35:b2:d5:1e:11:
39:60:7c:22:8e:56:05:d7:aa:bd:c1:91:55:eb:51:
88:f8:e7:ab:ee:f1:9e:5b:13:ac:ec:60:73:46:fe:
b5:a5:a9:4f:11:69:22:e7:e3:3c:7d:cd:46:ba:b7:
a0:87:c2:47:20:7e:07:53:28:7d:d1:f7:56:7d:59:
ec:47:3a:8c:3a:ac:36:4f:1e:42:1f:e0:39:bc:a7:
6c:56:91:da:dd:26:b1:47:85:d7:69:8f:3f:a9:cd:
e4:fe:ad:ce:09:dc:15:9b:79:3a:d4:f0:dc:6a:71:
1b:bd:29:ec:92:e3:85:ed:b8:d0:b2:ec:ce:f0:23:
10:a3:05:89:71:11:85:1e:76:d9:81:53:c7:e7:74:
8a:91:23:a5:d2:e8:2c:23:39:c7:6c:84:d6:ac:e0:
c7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:FE:36:67:9A:6A:96:62:5E:7E:1C:80:D8:2A:6E:21:56:07:02:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9a102025-f316-3a7d-9352-a3321ac695a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:125:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:8a:f6:d6:65:a2:2b:67:9c:35:f6:8f:a4:11:40:31:43:04:
90:6d:1f:e8:6f:e5:7a:6e:72:96:88:f5:e3:27:7d:d0:06:58:
53:16:c2:3f:fb:24:4c:72:f1:9d:05:d6:c0:87:51:d1:29:0d:
54:20:05:dd:3f:80:6f:29:11:b1:89:d4:a6:df:d7:2b:ae:49:
38:0e:73:b3:48:e1:b9:9a:9e:81:7d:ef:22:cd:8a:bc:bd:03:
8c:ca:19:3b:77:0a:fc:be:ee:a5:44:b6:98:3a:1d:d5:b8:e3:
2f:e5:68:5d:5a:75:d7:6e:15:3d:a9:63:b7:b8:ce:d9:3a:ed:
8b:21:23:30:87:21:c7:46:51:6d:51:0a:7f:fa:1a:f1:90:11:
6a:1a:15:46:cc:87:bc:cb:0a:87:dd:07:f8:7b:50:22:70:e0:
23:4b:fd:80:bc:1b:85:d9:f2:6d:0b:07:85:e3:3d:70:34:b1:
8a:72:59:af:75:f0:37:ad:b5:bc:52:fd:9a:be:fe:eb:ac:80:
d9:a2:ed:34:91:e0:1d:ec:06:af:2e:86:9c:e6:5c:5c:fb:ac:
ba:05:0a:28:4e:42:c2:f4:f5:3f:81:81:1a:e1:61:5c:32:07:
18:f1:85:95:1d:97:c8:f4:5e:95:a1:b6:1d:12:dc:c1:1d:ca:
d9:00:86:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:23:53 2025 by rpki-client