Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0eb0f096-ca3f-3108-9003-4bcdd6a58975.roa
File: 0eb0f096-ca3f-3108-9003-4bcdd6a58975.roa (raw, json)
Hash identifier: o5nmVgqoIWbHJ578dbbDgjJ2vo33nc+4fXWCIwMAoug=
Subject key identifier: CF:22:94:0B:81:C9:C8:DA:B2:A8:D7:AE:94:1E:FB:C3:05:AF:0E:C3
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489E5E44B9D628474EA5EC82E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0eb0f096-ca3f-3108-9003-4bcdd6a58975.roa
Signing time: Tue 21 Jan 2025 13:34:33 +0000
ROA not before: Tue 21 Jan 2025 13:34:33 +0000
ROA not after: Mon 21 Apr 2025 12:34:33 +0000
asID: 20431
IP address blocks: 2001:503:39c1::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:5e:44:b9:d6:28:47:4e:a5:ec:82:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 21 13:34:33 2025 GMT
Not After : Apr 21 12:34:33 2025 GMT
Subject: CN=9f3e87d0-d06a-4544-bbc0-852086717aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:25:88:7b:25:47:02:2e:cc:27:28:33:f9:8a:
0e:28:25:fb:5d:c8:a4:d1:77:c5:19:2d:13:fa:0a:
0f:bd:06:8d:4e:d9:3e:c1:a2:21:95:10:80:58:0c:
e8:8b:3e:33:7c:91:c1:7e:c9:6b:e1:46:8a:7f:80:
3d:3d:a8:a9:b7:02:5a:b4:c1:b4:aa:a6:65:62:ab:
ba:61:f5:d0:3d:48:3c:f4:8f:55:19:e4:05:6e:ff:
c4:2c:92:3e:7f:13:3e:17:58:72:28:1d:43:96:9e:
4a:0b:a6:dd:7a:ca:81:89:57:3f:ce:82:38:a3:52:
cb:f3:95:8b:41:e0:1a:53:ee:26:ae:9b:fa:ca:01:
fb:e7:dd:99:b1:c9:82:bb:d3:62:13:d2:57:e3:dc:
fc:60:7c:0f:bd:e8:3e:2f:da:b6:d7:71:80:42:74:
5a:7f:d1:bc:02:fe:c6:8f:5e:9e:48:45:d9:0e:b9:
2a:84:ec:c6:19:c1:c7:b0:c5:e1:a5:3a:eb:ca:91:
6d:c3:9a:eb:69:c6:b1:7f:b2:a9:38:60:25:bd:3f:
f7:db:93:b0:af:e1:cb:85:3a:42:0f:d8:50:57:b3:
a1:7d:ef:00:90:10:1d:bc:47:a4:51:90:ab:1c:20:
9b:52:fc:c7:e0:30:a7:f0:7f:21:3f:8d:4a:a4:9f:
a0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:22:94:0B:81:C9:C8:DA:B2:A8:D7:AE:94:1E:FB:C3:05:AF:0E:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0eb0f096-ca3f-3108-9003-4bcdd6a58975.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:39c1:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:06:04:da:c4:13:ab:09:78:2f:18:e9:41:bd:2c:8d:67:86:
fd:1b:75:93:a3:d5:e0:a4:82:ac:e8:df:12:d8:28:e6:0a:8b:
b4:d1:00:14:89:c1:20:ac:34:af:3e:54:65:03:90:ed:fc:e2:
89:b9:e2:17:32:60:3b:ae:8e:cf:56:57:87:0a:5e:33:c6:03:
2f:77:c9:4b:d7:f4:78:bc:3a:91:4b:4d:5c:11:23:75:d5:1f:
c4:33:26:b9:63:82:1f:b9:86:17:1a:53:f9:9f:2b:ee:03:be:
71:21:b7:b1:ba:80:ed:3e:3d:92:74:bd:d4:df:37:86:8f:5b:
45:1e:d2:ee:43:b4:d9:5f:dd:3e:d8:d0:28:63:c1:e6:26:80:
ac:a6:e7:60:6f:bf:95:f8:9a:af:df:08:85:fe:71:4c:1d:65:
1b:96:62:71:45:fd:1d:33:47:5e:be:55:da:b9:d3:67:01:9a:
95:08:e1:ef:8e:1a:65:e8:2e:1b:b5:3f:a7:0e:25:0f:7d:0b:
ad:d8:be:2c:3a:3a:20:97:05:4c:a9:e8:cc:f5:f0:ae:c2:6d:
80:2e:59:c8:f0:8f:8c:4d:b8:c7:82:84:88:18:9f:f4:58:01:
cf:a4:c3:6e:99:27:fe:54:37:57:29:79:df:2a:57:7f:55:ca:
bc:46:45:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:27:35 2025 by rpki-client