Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/009b96bd-c7ac-3611-9e26-6e307701bc03.roa
File: 009b96bd-c7ac-3611-9e26-6e307701bc03.roa (raw, json)
Hash identifier: LQnKfEDeV0du1B3F7iOiZ0wAx/+DTqIie1QGYWLm8/A=
Subject key identifier: 8A:9E:E6:48:01:69:A8:D3:38:76:AD:EE:7B:B4:D1:D1:5D:B7:FD:5B
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848372014C8C94E6A085C3A793E
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/009b96bd-c7ac-3611-9e26-6e307701bc03.roa
Signing time: Sun 15 Dec 2024 14:00:53 +0000
ROA not before: Sun 15 Dec 2024 14:00:53 +0000
ROA not after: Sat 15 Mar 2025 13:00:53 +0000
asID: 20431
IP address blocks: 2001:500:123::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:37:20:14:c8:c9:4e:6a:08:5c:3a:79:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 15 14:00:53 2024 GMT
Not After : Mar 15 13:00:53 2025 GMT
Subject: CN=15dd443f-581a-4995-a265-ab4c9b05d484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:05:7b:cd:8e:bb:ce:7a:81:54:a9:0b:6f:d5:
c5:74:b6:7b:46:ff:0d:9c:9b:d5:ce:bb:78:e0:93:
88:86:5f:8b:15:01:c4:95:56:79:37:54:2f:05:79:
73:00:06:c5:83:8e:5a:f1:09:28:64:5b:34:27:61:
01:c2:18:44:a0:b4:92:b4:85:93:92:6c:04:33:73:
4c:54:74:b5:a7:ea:95:6c:9d:9a:41:51:88:4b:3e:
79:99:86:d1:72:5b:ce:50:6b:d4:32:31:43:55:a6:
bd:ff:a0:2f:aa:d0:06:f3:ab:14:f1:6f:e6:4b:0d:
f9:51:09:ec:24:f8:58:67:c6:9c:34:a0:61:f8:43:
f9:d9:65:41:82:1a:8a:01:62:f1:f8:8e:a0:7f:2f:
d0:d1:cf:6d:c5:e5:39:32:83:73:69:32:e3:a0:ce:
e0:0e:a6:3b:96:56:6b:0b:a7:88:ed:61:fa:8c:0e:
5c:fa:0d:fc:0d:41:58:51:ec:3b:44:d9:81:36:cd:
d7:c9:e8:07:46:5a:43:0c:7d:29:5e:75:3e:52:e9:
ee:83:24:19:c8:9c:4e:1f:b1:ee:54:9a:8f:ab:18:
39:d6:d6:07:c6:49:6a:91:bc:7c:51:d6:80:3a:40:
03:f2:60:06:a9:25:42:98:e1:f0:75:f6:98:ae:45:
58:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:9E:E6:48:01:69:A8:D3:38:76:AD:EE:7B:B4:D1:D1:5D:B7:FD:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/009b96bd-c7ac-3611-9e26-6e307701bc03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:123:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:94:ba:10:32:68:6e:a6:1d:13:8d:42:fb:2a:0b:4d:a9:00:
eb:47:a1:74:65:48:cd:ae:33:5d:ff:ce:30:94:3c:60:08:a1:
10:be:6a:52:1e:95:39:bf:52:df:a4:f9:b3:83:86:ff:d2:88:
67:9a:9d:42:ab:0d:cf:76:5e:5f:f4:33:a8:4e:b1:d6:3c:82:
c1:54:46:bc:51:6d:cc:c9:30:49:83:78:39:8f:21:cf:dd:b5:
02:e4:ec:4a:b5:25:25:cd:01:d6:bc:c4:73:db:db:de:70:2e:
35:c5:ee:d7:18:7d:fb:2c:02:d0:2e:f6:90:67:da:3f:ed:3a:
5b:18:e5:12:15:7e:f6:07:5a:cf:c9:12:7e:a7:2c:3c:5d:57:
79:80:a2:d6:99:dd:44:4b:a7:4a:f4:eb:35:a1:4f:fa:b4:ec:
48:2b:cd:ae:b8:3b:b9:40:60:79:4a:ba:f2:f6:f8:26:65:42:
0f:da:7a:ab:5e:19:5e:85:31:dd:58:27:04:c7:ba:57:9d:95:
76:21:26:47:dc:23:6b:98:bf:b3:bf:11:22:0d:5e:aa:0d:dd:
db:31:18:3e:80:c8:de:b5:f7:7e:9a:d7:e2:4f:24:d0:2b:4f:
84:a4:7d:da:95:df:2f:23:c7:94:59:7f:54:6e:15:7f:3b:61:
55:ba:2b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:52:08 2025 by rpki-client