Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0642a26c-064d-3031-bad8-393037ecbc81.roa
File: 0642a26c-064d-3031-bad8-393037ecbc81.roa (raw, json)
Hash identifier: gW3jka/PVpBDfWWPuab71xSRusFZq1mpvK3FfiwPbx8=
Subject key identifier: CB:DA:3E:CF:98:75:FA:70:B0:EF:95:20:AA:CA:C1:A1:DE:84:04:7C
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858488DAB781E0DE75EDEA023C200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0642a26c-064d-3031-bad8-393037ecbc81.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 396567
IP address blocks: 2001:500:7967::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:78:1e:0d:e7:5e:de:a0:23:c2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=3ad8c0e1-2c9f-4c5b-b9f9-38c3bee6fd9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d4:72:9e:41:08:49:42:8a:bd:78:2f:b6:26:
c6:57:0f:b7:74:9d:9d:c7:82:70:b5:ff:07:16:ba:
3b:0c:2d:f3:76:51:fb:61:c4:6e:be:89:50:26:9b:
4e:eb:99:50:f3:d0:66:fb:30:ab:55:1c:38:00:14:
0a:79:3f:37:f8:cd:24:5d:e7:dd:63:d6:20:7d:7c:
7e:1c:6d:2d:d8:87:2f:ab:22:1e:54:84:c3:21:e4:
5e:e4:f7:08:26:cc:0f:f8:09:da:d2:a7:30:37:2c:
b7:b9:45:30:d9:27:cf:8c:67:27:df:4e:a6:77:f1:
84:10:eb:19:ba:32:c7:6d:b8:8e:6b:e0:d9:1b:bd:
f6:38:60:40:55:1f:8f:12:fa:6b:cf:b5:91:8f:b4:
9c:30:99:1c:18:c3:5a:5c:ce:e3:fc:43:8a:92:e4:
75:05:0f:45:79:55:e3:87:00:80:a1:aa:9a:7a:ea:
54:04:d4:59:b6:46:a0:f1:02:53:8c:b1:10:b2:ed:
c5:50:1a:02:d1:48:47:4d:55:c0:b2:ec:e3:5d:e0:
c7:4f:0b:42:14:67:e9:56:ca:ba:60:50:e8:08:17:
df:7e:fd:21:16:4e:d1:92:de:f7:54:36:19:87:fd:
91:8d:d5:43:98:af:fc:92:0c:9b:f7:e9:f0:c1:93:
43:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:DA:3E:CF:98:75:FA:70:B0:EF:95:20:AA:CA:C1:A1:DE:84:04:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0642a26c-064d-3031-bad8-393037ecbc81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:7967:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:2d:6d:b3:f8:2e:e4:52:cb:03:6d:49:7f:15:f0:c4:4e:eb:
00:a0:f2:93:62:28:a8:22:56:0d:04:d4:f4:5d:1e:9d:7a:3b:
7d:d4:f6:43:48:84:85:50:83:ff:c4:e3:5f:08:b4:32:c5:a0:
63:b2:47:56:6e:d4:9a:3f:10:0f:e1:de:6e:28:a5:2f:e7:fc:
b7:ff:ce:94:ee:a3:6b:b5:4b:9f:d0:9e:f7:31:86:01:e9:68:
bc:a0:e0:49:6d:98:56:dc:d2:81:a5:ff:e4:f7:82:39:67:29:
50:17:26:34:1c:cb:88:00:f1:bd:06:68:99:41:93:ed:35:71:
52:c8:5e:61:ce:32:d6:59:1c:9f:d3:9f:ee:31:9d:12:d9:91:
3c:e6:9d:07:26:cc:49:fd:74:a0:61:d9:7b:4e:cf:41:18:a7:
04:bf:c6:55:e8:6e:4b:27:ae:16:7e:89:e5:86:c8:d6:ff:7a:
61:fa:b1:0d:cf:e0:f2:56:ef:c2:12:cc:e3:ec:f2:1d:70:e5:
82:7e:5a:7d:45:7d:24:65:de:f2:c5:4e:b6:11:08:12:23:f6:
05:24:2c:5f:ad:a8:7b:fc:f3:2e:66:fd:6b:d7:cb:51:e6:fe:
c2:9e:b7:4e:13:98:82:72:ac:15:bf:fb:49:3f:13:38:2d:0b:
31:2d:1c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:30:31 2025 by rpki-client