Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0ca5835b-bb46-3027-94f0-5e5867970634.roa
File: 0ca5835b-bb46-3027-94f0-5e5867970634.roa (raw, json)
Hash identifier: MWAv8gQM/S08mEcNpvXSASSgXT9dHckSRMKOg8O8LvI=
Subject key identifier: 96:D1:FA:3C:37:31:A9:26:77:C7:56:29:3E:29:E3:79:53:91:E4:95
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858494039834CA11402B45FB48B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0ca5835b-bb46-3027-94f0-5e5867970634.roa
Signing time: Thu 20 Mar 2025 13:00:53 +0000
ROA not before: Thu 20 Mar 2025 13:00:53 +0000
ROA not after: Wed 18 Jun 2025 13:00:53 +0000
asID: 397198
IP address blocks: 2001:501:8a29::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:40:39:83:4c:a1:14:02:b4:5f:b4:8b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 20 13:00:53 2025 GMT
Not After : Jun 18 13:00:53 2025 GMT
Subject: CN=3aa339fd-4a22-4866-82e1-0cfe52d58a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:48:05:fa:20:55:f2:42:7c:28:6b:cd:9b:e3:
aa:98:2b:e9:67:30:22:5e:07:66:2c:94:08:5a:9c:
d7:9c:3b:6e:a4:d0:f0:4a:be:03:14:09:df:ad:38:
d8:8b:fa:b0:63:a9:5b:a1:75:9e:e4:98:a5:80:2a:
0f:98:ab:96:f6:f0:35:21:6c:19:f2:0d:16:be:a3:
15:28:14:96:90:89:09:70:3c:36:67:7c:09:e9:c5:
37:0f:6b:e1:7c:4a:13:4e:35:26:ae:54:e4:81:c5:
8e:6f:bf:4e:f5:4a:06:69:04:0a:fa:08:a0:83:27:
1e:88:20:4b:dd:bf:ad:89:26:d0:ad:c8:3b:8c:5f:
50:01:44:57:2c:00:ce:33:58:4b:83:c3:42:9e:2d:
99:ad:27:df:4b:b4:ec:66:c8:1a:8f:68:26:dd:97:
1d:fc:14:41:38:d2:f7:d5:64:79:3e:db:00:fe:75:
4b:03:d3:b3:12:71:10:d6:7e:41:27:a1:56:37:d7:
3a:84:88:2d:6d:b8:d9:70:52:54:95:57:e2:55:19:
3e:5e:0c:e5:2c:4b:c8:b3:cc:aa:ba:00:7d:bf:5c:
85:3d:3c:51:80:d0:20:8b:02:36:87:8c:91:b0:5b:
a1:de:53:61:46:13:df:24:e5:ee:f4:d9:77:fd:f8:
07:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D1:FA:3C:37:31:A9:26:77:C7:56:29:3E:29:E3:79:53:91:E4:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0ca5835b-bb46-3027-94f0-5e5867970634.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:501:8a29:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:2d:b7:24:47:2b:fd:51:9f:ce:3c:21:88:01:1a:ac:1a:ac:
dd:da:b7:25:bd:1d:9f:9c:af:17:0a:41:2a:fb:45:34:f9:51:
23:be:45:92:c4:22:53:70:0e:e0:e7:f5:ff:d3:27:57:b6:c5:
ba:d1:e3:53:fd:fc:ef:69:ec:a3:21:88:09:cc:69:e9:f9:45:
d1:df:d2:d1:8d:c8:f8:1c:39:a5:c1:00:95:37:7e:a7:2a:ff:
00:f6:94:e6:d0:52:4e:a8:51:5c:41:0c:eb:a3:18:29:08:59:
e0:f4:b8:2f:22:b2:bd:b9:cc:ee:17:40:6d:c6:d2:f0:a5:b0:
e9:f1:15:75:16:98:d5:f5:fc:58:57:39:a8:34:01:07:c8:26:
00:00:35:ca:b0:ce:08:87:2a:82:fc:04:31:f7:4e:3e:94:4b:
5e:dc:d6:09:55:a0:41:d9:f6:c9:06:44:f8:c0:8b:2e:ed:2e:
3a:2c:8c:56:da:9f:5b:0e:76:72:11:73:a4:63:6a:7a:fb:cc:
74:46:eb:95:3b:96:81:6d:ad:69:fe:6a:5f:56:b2:86:39:23:
e8:02:3f:4a:58:99:91:f5:bc:47:49:88:6a:51:ec:82:93:9c:
e7:0a:7a:07:52:05:30:1d:27:16:d9:89:f9:15:d8:10:df:bf:
e1:d7:e3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:26:31 2025 by rpki-client on console.sobornost.net