Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/11a59f8c-dc55-39e1-8e19-e6c70da4a5f1.roa
File: 11a59f8c-dc55-39e1-8e19-e6c70da4a5f1.roa (raw, json)
Hash identifier: sm8jkHPSDlrSjHOVxh3oA+xEV8l7SFd5n/KbAnf46eA=
Subject key identifier: 03:50:BB:EA:10:3B:45:12:62:F1:9F:B3:69:57:21:95:3D:47:FB:B5
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584845157C1089B3E1A38533DB00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/11a59f8c-dc55-39e1-8e19-e6c70da4a5f1.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 396563
IP address blocks: 2001:500:122::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:7c:10:89:b3:e1:a3:85:33:db:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=d90cb036-cc12-49b5-b8ac-bad3a4e4f824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:24:95:c2:15:6a:7b:77:16:90:c0:90:6f:33:
24:89:09:42:e1:fb:53:1b:48:35:bd:57:4d:95:48:
56:ce:d7:a0:e2:fd:96:54:88:b2:4e:d5:2a:92:78:
95:20:f8:03:c1:3a:26:dc:82:d8:55:b8:15:e0:e1:
73:e7:4d:6e:2d:6b:63:28:e2:b9:d1:06:f2:0b:a5:
3a:31:0b:51:11:97:42:29:f6:3b:3e:6c:00:43:9a:
fd:84:12:9b:d0:b1:57:e5:7d:e5:ae:e6:5e:06:5b:
94:e0:03:61:53:23:f3:46:5b:59:38:00:ae:71:a3:
56:c4:37:72:2e:9d:5e:b4:e6:3c:b0:88:47:0e:90:
fd:2a:3b:0c:05:e8:88:9d:e5:d4:63:4a:1b:ba:cf:
12:4d:6b:32:64:83:d9:a5:55:e3:5b:0d:4c:38:2d:
91:18:44:ab:16:58:39:9d:6d:88:39:db:05:c9:73:
a2:7d:ce:57:03:1e:de:a9:43:0c:76:78:b4:1e:9f:
6f:30:2f:20:1c:a2:92:bb:6e:92:02:c7:a1:89:50:
29:11:11:64:39:b0:b1:12:34:f5:67:c0:ee:ab:a9:
5b:87:36:22:5e:05:47:07:16:9f:70:c2:27:6b:ab:
51:55:db:94:1d:3b:93:e3:3e:21:38:d9:ae:07:21:
45:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:50:BB:EA:10:3B:45:12:62:F1:9F:B3:69:57:21:95:3D:47:FB:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/11a59f8c-dc55-39e1-8e19-e6c70da4a5f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:122:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:af:ce:24:d7:20:22:ac:c7:7b:d1:02:47:f4:2f:9e:49:a3:
26:99:eb:1c:72:d9:29:55:a0:0b:57:0b:a8:65:ca:6e:fd:c5:
cf:26:5a:fd:f4:c6:c3:92:80:7c:35:37:c7:57:a6:d5:39:5a:
ab:87:26:08:80:75:c4:eb:12:58:b6:9b:a1:e6:6a:09:1d:28:
ac:f9:a3:a2:be:8d:f0:71:96:49:dc:87:9f:d7:c4:24:01:c4:
a5:1c:49:cf:9f:b0:3d:40:d7:8f:a5:7a:da:ad:fd:2d:d4:38:
ee:c3:1d:4e:da:47:e3:7d:83:de:42:c1:2b:ad:fe:90:2a:a9:
e7:50:b0:4d:01:af:89:69:e1:b6:f9:c7:b2:76:81:86:44:85:
cf:39:d1:a9:27:d7:61:87:0e:35:bc:43:39:46:02:bc:a5:a3:
09:3b:b1:b3:1b:6b:24:a4:1c:01:b6:82:3c:7d:b6:b1:9b:e6:
8e:eb:4d:97:71:1f:b2:bd:52:86:82:e6:32:93:fe:b6:0b:8e:
dc:39:88:f6:64:fd:6d:f6:22:43:5e:65:62:ea:18:4d:d0:9c:
8b:5d:7c:f8:45:76:fc:80:7a:d4:d0:a3:7e:76:94:45:f7:c0:
c6:58:15:96:aa:83:55:8b:7f:45:a3:55:be:de:c6:9a:b3:d7:
67:06:d0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:50:03 2025 by rpki-client