Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/12023c89-51df-3696-84ce-0c11f8fda1fe.roa
File: 12023c89-51df-3696-84ce-0c11f8fda1fe.roa (raw, json)
Hash identifier: DtI74xVMIGHRTDWYboh8mYPy3qbMC4TSRKcgxgn5XNE=
Subject key identifier: 52:C4:00:1D:FC:89:7B:B6:99:74:20:AC:C2:8A:14:FA:C0:20:96:F3
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858484AAADCC11282750FE9657000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/12023c89-51df-3696-84ce-0c11f8fda1fe.roa
Signing time: Sun 22 Dec 2024 14:00:51 +0000
ROA not before: Sun 22 Dec 2024 14:00:51 +0000
ROA not after: Sat 22 Mar 2025 13:00:51 +0000
asID: 396609
IP address blocks: 2001:500:121::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4a:aa:dc:c1:12:82:75:0f:e9:65:70:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 22 14:00:51 2024 GMT
Not After : Mar 22 13:00:51 2025 GMT
Subject: CN=be1a04c2-db09-4dee-b9b8-96b3e2032a28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:eb:a3:a6:40:1f:a3:a4:1e:d6:4e:a1:9d:08:
04:d9:7f:ea:cd:84:eb:5c:68:2a:08:b0:8a:a4:18:
c0:d1:3d:1e:87:7a:fb:84:ee:8c:45:ad:37:50:28:
37:d2:5b:97:34:df:4f:d4:2f:ab:01:d3:84:4e:f3:
99:96:ee:af:fe:a8:f5:62:30:eb:47:f9:30:98:a5:
7b:e6:78:43:1c:7f:ec:7e:e7:00:68:d5:cc:5f:94:
b2:8b:07:dc:24:74:43:4f:10:5a:91:7f:f5:a0:c0:
20:bd:01:09:31:5d:9f:46:37:ef:ff:a5:6e:7f:2b:
ce:86:d2:ac:31:5a:cf:9d:e6:3f:22:4a:aa:d8:d1:
30:e1:f3:12:0b:88:8b:1a:0f:c4:9a:82:45:4b:01:
44:00:53:aa:6e:3d:b7:cd:7a:7c:bc:f6:af:34:8a:
52:3a:78:67:fb:1b:e4:7b:89:9a:53:d9:38:f5:8f:
e3:b8:ad:21:1e:68:b2:1c:85:ea:78:55:95:9c:56:
12:8b:3b:b3:64:14:fb:cb:df:bc:89:36:4e:61:f6:
e3:70:b4:27:70:db:3c:8f:9d:9d:f6:0b:08:d4:2d:
a9:0b:24:13:d0:be:b3:11:5d:0b:f1:e7:7d:e8:58:
d6:70:91:f3:07:05:c9:ed:ec:7f:3c:63:c4:bc:7d:
5f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C4:00:1D:FC:89:7B:B6:99:74:20:AC:C2:8A:14:FA:C0:20:96:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/12023c89-51df-3696-84ce-0c11f8fda1fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:121:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:a3:4b:4e:06:9b:0c:1f:cc:83:47:a2:51:29:fa:4d:b6:03:
cc:4c:d2:3b:77:03:21:09:4c:f1:b3:e3:94:43:95:a9:c7:7c:
3d:b9:16:71:bf:be:1f:b3:7a:cf:7c:b5:20:97:2c:ad:30:99:
66:ab:77:15:de:3e:dd:c3:37:eb:3b:b3:fc:62:83:ef:a7:17:
dd:e3:96:47:dd:f5:37:c3:e2:4e:b6:a7:fa:9c:2d:8d:e9:07:
50:b6:6f:c0:a1:96:d7:fb:0f:73:d6:8e:e0:c6:49:1f:fd:cd:
62:ba:89:57:0c:3b:4b:15:d4:2f:34:2d:5e:03:cd:0a:17:c7:
25:35:3f:f1:72:52:c6:9a:ec:62:f6:72:ff:96:dc:c5:b1:33:
90:43:5b:2b:ca:9a:21:cb:4c:cf:93:74:fd:5e:f1:59:1c:4a:
1d:1d:25:95:45:7e:4f:75:08:5a:8a:9d:8e:80:c2:7e:d9:f3:
38:ee:88:bd:5e:51:37:fa:05:00:eb:e2:e5:1c:5a:37:ad:4f:
bd:06:6f:cc:0a:c3:a9:d8:61:fd:5b:3b:db:bb:2f:04:1d:64:
d1:a9:88:2c:70:c9:72:99:b1:bc:40:75:76:20:15:1b:5d:3b:
f0:6a:6c:16:20:d9:ff:e0:f0:66:37:57:b5:18:4a:7e:12:02:
17:9f:b0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:40:01 2025 by rpki-client