Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b8ef084-52b0-309e-b90d-78e265d1b91d.roa
File: 0b8ef084-52b0-309e-b90d-78e265d1b91d.roa (raw, json)
Hash identifier: iasBtyXWCiBRmTNLKIYenkxEO3rYyQKWj1ZOV+r1cSo=
Subject key identifier: E3:A1:81:47:EA:18:2A:0F:5B:F9:D3:5D:33:E6:48:E1:A5:F2:EE:08
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858484243353A3AD97C1C06F59A40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b8ef084-52b0-309e-b90d-78e265d1b91d.roa
Signing time: Thu 19 Dec 2024 13:45:39 +0000
ROA not before: Thu 19 Dec 2024 13:45:39 +0000
ROA not after: Wed 19 Mar 2025 12:45:39 +0000
asID: 396569
IP address blocks: 2001:500:125::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:43:35:3a:3a:d9:7c:1c:06:f5:9a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 13:45:39 2024 GMT
Not After : Mar 19 12:45:39 2025 GMT
Subject: CN=05a5e450-c469-4582-a894-a61671e3cbc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0a:0d:61:2f:8a:09:1b:cb:b1:8e:29:55:73:
50:46:c7:ac:63:48:9c:6c:ac:c2:b3:f8:38:10:3f:
06:32:fd:e4:d8:6d:57:62:4e:a7:1e:05:c5:d3:95:
90:7f:fb:4c:53:5d:3f:17:2e:dc:13:7e:db:00:75:
81:12:30:59:8f:b8:8b:7e:18:81:3b:11:22:47:65:
59:79:b9:c0:88:e5:d3:4a:ca:33:9a:2b:16:c1:89:
05:1f:c6:78:d4:f4:32:7a:c4:01:52:28:c9:53:df:
5e:7d:72:38:a8:32:fe:e9:66:e9:d9:08:04:f0:bc:
f4:01:2b:86:0e:cc:c0:62:26:6a:9d:08:97:e6:be:
ee:87:99:83:0c:f5:bb:e7:55:58:6b:28:f6:7d:e0:
41:81:15:bb:41:8e:44:9f:31:e4:e4:39:1a:15:42:
cd:b8:60:34:d0:5e:73:cd:72:1f:ea:72:c8:d8:96:
06:fc:27:b1:68:70:6f:87:71:e6:19:1d:3d:e8:64:
30:55:06:64:75:3c:6f:0a:5f:29:7b:3a:1e:22:8d:
02:8a:9d:5f:0e:a8:1b:4c:81:70:fa:65:a0:47:f9:
91:91:17:c1:e9:79:8b:6e:99:7b:46:24:44:6d:29:
1a:eb:ff:5c:99:d8:ea:f2:a9:6e:62:41:e5:e5:3d:
45:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A1:81:47:EA:18:2A:0F:5B:F9:D3:5D:33:E6:48:E1:A5:F2:EE:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b8ef084-52b0-309e-b90d-78e265d1b91d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:125:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:12:05:ea:6d:10:fe:57:09:2f:ad:60:b9:cb:07:cc:84:94:
34:b3:67:7f:15:55:f4:58:2c:ac:cf:03:1d:41:d2:7d:18:53:
fa:94:38:85:89:61:21:a0:2d:99:27:ff:b7:d6:dd:e0:0c:ad:
00:e0:72:bd:1d:82:a1:ac:bc:48:0b:85:0a:c0:3a:0d:56:0f:
ac:74:17:d6:d2:7e:be:39:a5:c4:36:d6:5c:b5:ea:e3:2f:fc:
48:a9:fe:61:be:91:01:74:c5:ef:08:0a:77:83:5f:ff:42:3d:
24:4b:a5:d6:0a:40:2c:c4:7a:9e:82:26:d5:a1:19:a9:f8:6b:
bb:09:5d:d5:d9:f0:62:26:c6:82:ce:6a:f1:ba:2c:05:14:50:
05:e4:1e:b9:1a:28:eb:08:5b:0c:28:2f:22:28:f0:34:8e:be:
50:73:f8:a6:17:75:8f:86:9c:18:25:72:3e:0a:0b:35:b9:09:
79:46:ae:5b:31:86:2b:db:fb:46:4c:c6:eb:82:bc:e8:b5:1f:
20:86:61:64:89:8d:a4:bc:36:f4:07:ad:5b:86:7d:1b:b7:b8:
9b:d3:96:94:20:2b:eb:7a:29:1f:85:23:c7:15:fb:74:28:4f:
7e:a5:4e:79:ef:66:e8:fe:fd:97:f9:30:2e:15:34:6d:e2:dc:
db:10:10:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:51:53 2025 by rpki-client