Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/08baaa81-1c31-362c-9680-50567e86d446.roa
File: 08baaa81-1c31-362c-9680-50567e86d446.roa (raw, json)
Hash identifier: sfF+6O6mNbnEmHAEwHTmk+QcmLLA+DTCE3L916vYqgA=
Subject key identifier: 0B:EA:A4:CB:0F:8E:A7:99:F4:59:4F:DD:EE:80:72:F3:74:F5:64:F8
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858484515797397FC834FA17CDF00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/08baaa81-1c31-362c-9680-50567e86d446.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 396606
IP address blocks: 2001:500:122::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:79:73:97:fc:83:4f:a1:7c:df:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=6a145701-967c-4703-a5e8-de03e8e2c639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:72:29:50:62:3c:b6:25:5d:72:fd:d5:97:12:
4a:47:7a:67:23:da:44:c1:a3:54:65:aa:51:75:98:
21:99:67:ad:0f:b1:6b:29:94:c2:73:15:81:32:4b:
37:c2:ac:1b:10:4c:9e:f5:46:db:57:e5:98:ae:09:
8e:d8:8b:0b:02:30:fa:0f:3f:09:09:7d:a6:99:32:
51:fc:47:d8:18:b0:ad:ae:94:a8:49:e6:27:be:3b:
55:e5:c0:c5:e9:9a:d6:53:d2:bf:33:1c:30:26:8c:
50:58:a4:8c:44:0a:14:09:fa:91:92:71:b4:59:82:
b1:c3:38:65:b8:45:c3:1d:56:48:08:53:23:cb:3e:
ef:88:5a:76:c5:cd:90:55:13:a1:4c:74:4e:73:ee:
1b:7c:b1:cd:ca:30:33:3b:06:70:ff:0f:5f:55:5d:
72:4a:90:0f:65:49:0f:4f:72:d8:24:c1:91:73:3f:
e6:7b:b5:9d:f7:9d:44:c7:e7:60:e1:43:53:05:d4:
e3:ea:66:26:f4:c7:bf:f5:06:ba:9b:4a:6d:a4:8d:
e9:03:ec:c3:f7:15:67:86:4d:11:a3:b1:04:91:f3:
f5:54:16:bf:3a:ed:c1:c8:59:ce:09:97:75:a4:cd:
22:9a:a8:e0:1d:05:fa:e3:ea:3b:d2:19:60:f6:ea:
97:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:EA:A4:CB:0F:8E:A7:99:F4:59:4F:DD:EE:80:72:F3:74:F5:64:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/08baaa81-1c31-362c-9680-50567e86d446.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:122:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:6d:3b:b5:d0:96:54:de:3f:b0:98:13:54:63:d8:70:16:3d:
2d:d9:52:07:a5:46:e8:96:69:35:30:e8:c4:00:7a:57:97:d4:
b8:b4:20:31:19:61:fb:12:d5:97:36:f7:9d:0e:84:43:3f:6a:
83:10:69:db:23:5c:d2:2d:2c:6a:f0:18:15:cb:7a:2a:43:2e:
55:64:ec:ce:d1:98:60:a7:2c:22:9e:a5:30:6d:b4:10:4f:72:
da:14:27:d4:7e:8c:8e:83:cf:f7:56:e0:fb:ef:27:7f:47:f7:
3e:e6:93:82:fd:26:cf:59:5b:ef:8f:ac:45:fd:e1:c7:d7:ac:
62:44:d8:ed:9a:91:b1:f3:9b:c3:07:4a:a7:71:a9:e9:6d:44:
d6:c1:0f:bf:60:fd:30:94:c7:f8:db:61:3a:ab:8a:c1:6f:0c:
54:a2:69:fe:e8:13:cc:3e:fe:7b:1d:05:2e:41:f3:d0:66:58:
7d:ac:f9:43:0e:a8:71:99:b4:3a:87:fb:78:3b:cc:13:49:bc:
16:b9:a1:64:2b:be:97:f3:3c:3f:b7:bf:a4:a7:45:b4:04:8e:
12:3b:a5:64:dc:be:e9:6e:de:27:bd:84:5a:f4:42:51:a5:bc:
ec:03:8a:79:f3:e7:38:5c:b9:d8:5a:e8:85:67:1f:cb:cf:12:
59:b5:71:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:55:47 2025 by rpki-client