Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0bd7f4e8-1b7c-3b7a-9d2d-a4a237b63c46.roa
File: 0bd7f4e8-1b7c-3b7a-9d2d-a4a237b63c46.roa (raw, json)
Hash identifier: i7qf9NU86WzNUogu9YefWl3foydx5Kxu3tXiYD95oz8=
Subject key identifier: 15:B1:C2:DD:DC:AE:C6:37:29:29:03:E2:98:30:CA:65:97:CC:6F:F8
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858483720118B62CC2A1500E07520
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0bd7f4e8-1b7c-3b7a-9d2d-a4a237b63c46.roa
Signing time: Sun 15 Dec 2024 14:00:53 +0000
ROA not before: Sun 15 Dec 2024 14:00:53 +0000
ROA not after: Sat 15 Mar 2025 13:00:53 +0000
asID: 396608
IP address blocks: 2001:500:123::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:37:20:11:8b:62:cc:2a:15:00:e0:75:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 15 14:00:53 2024 GMT
Not After : Mar 15 13:00:53 2025 GMT
Subject: CN=03a5a428-3a2e-45c8-b05f-a5cad7ffd42c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c5:2c:70:7f:58:fe:00:de:64:74:ac:a1:e7:
f1:03:85:91:ce:00:06:55:cf:4b:ef:45:71:a9:c7:
b3:7d:69:83:a5:40:f6:29:f3:d1:b8:41:3b:99:37:
5c:ce:de:c5:ce:ed:97:d0:3b:ab:23:c1:0a:43:57:
87:e1:ce:e3:2e:c2:7e:73:9d:b8:58:38:cd:5a:0c:
06:e4:26:a0:f1:1b:eb:c9:10:13:a7:10:af:04:3f:
ee:44:3a:16:86:7e:45:9a:53:00:14:ad:09:78:dc:
a3:d6:d2:92:40:f6:bb:75:96:4d:04:ba:34:40:9b:
30:ba:22:8b:6a:fe:8d:f8:d0:d1:00:f2:58:7d:42:
22:14:94:39:9d:92:ff:da:96:36:93:05:d4:7a:fd:
21:56:d6:52:69:67:10:6b:31:4b:31:3b:83:a2:07:
bb:6f:90:4e:5a:e4:6e:c1:a3:27:04:88:00:63:f0:
4a:f8:03:76:76:a3:5f:f9:13:7d:b9:8c:97:fa:51:
8a:56:e2:db:cf:cb:ee:85:0f:19:e2:74:b3:8d:46:
80:f4:77:40:10:84:c4:a3:98:53:1d:ee:e4:f2:25:
29:18:4f:d8:d9:a3:a7:0c:14:58:9e:64:c6:d7:92:
92:dc:5e:3e:cb:09:7a:95:61:c3:c9:c5:32:9c:4f:
a7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B1:C2:DD:DC:AE:C6:37:29:29:03:E2:98:30:CA:65:97:CC:6F:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0bd7f4e8-1b7c-3b7a-9d2d-a4a237b63c46.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:123:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:b7:6b:b7:7e:c0:16:f7:a8:7a:a7:4e:66:81:7a:49:38:e1:
f7:88:05:86:33:b0:17:7f:38:bd:9e:58:6a:52:56:9e:80:7e:
15:85:8b:0d:27:36:7e:d3:26:6d:3d:14:11:f0:79:68:93:49:
1c:ed:cb:d5:31:d1:ff:c9:2d:22:03:5d:73:24:15:05:82:4e:
39:f7:ef:a0:4b:d4:fe:e6:f6:4d:cf:ac:56:e7:80:8e:8f:6f:
35:c1:e5:79:a8:0e:77:4c:13:12:22:6c:cf:20:14:0e:51:51:
b4:78:aa:bc:55:5b:dd:1e:5a:6e:82:e7:f3:16:fd:54:4d:43:
26:90:19:fc:c3:60:05:bd:17:2d:d8:d2:05:bc:82:f1:ee:e6:
77:15:ba:b4:c2:7a:48:07:5b:cb:ac:e9:5e:fd:61:4d:6c:87:
ee:26:f7:58:02:0c:39:ce:6d:3a:1f:fe:6b:fd:66:88:d5:71:
7f:2d:83:3d:fb:38:0f:ba:a1:11:51:dc:f9:c9:ac:80:56:ce:
d2:5c:b7:28:85:fd:2e:1c:26:b2:5d:4b:f2:a8:0f:da:7e:aa:
5d:45:ab:89:b4:14:ee:1c:f9:0d:c2:a1:c2:68:39:71:a0:b5:
51:73:c5:25:23:25:58:e9:54:58:dd:e4:12:47:0b:56:e7:20:
a4:1f:04:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:52:37 2025 by rpki-client