Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18ebfe4b-5ceb-3e42-ad2b-22b02bd75287.roa
File: 18ebfe4b-5ceb-3e42-ad2b-22b02bd75287.roa (raw, json)
Hash identifier: uYV3s8fMCyqHKxq4UbflSt0FVf866phUU4XrkHQQ+lo=
Subject key identifier: A0:28:2B:0B:C1:C3:17:37:D6:B1:72:5B:CB:2E:0C:A0:E0:D0:DC:B2
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489BA0BC25F0F70BF4D1A22D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18ebfe4b-5ceb-3e42-ad2b-22b02bd75287.roa
Signing time: Mon 20 Jan 2025 14:00:51 +0000
ROA not before: Mon 20 Jan 2025 14:00:51 +0000
ROA not after: Sun 20 Apr 2025 13:00:51 +0000
asID: 397203
IP address blocks: 2001:500:30ff::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9b:a0:bc:25:f0:f7:0b:f4:d1:a2:2d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 14:00:51 2025 GMT
Not After : Apr 20 13:00:51 2025 GMT
Subject: CN=0ebd51c4-dea6-4100-910c-51f3b94c24cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:51:6d:27:b4:77:ba:1a:68:36:09:da:68:1d:
3d:14:88:b0:4c:e5:63:ce:2a:05:4a:91:94:8d:70:
06:50:57:0c:22:df:26:1e:60:2c:d6:1b:d0:39:af:
06:e0:57:96:49:0f:fc:5c:37:79:ec:23:bf:46:60:
52:ea:b3:f1:43:dc:5a:19:5c:55:cf:1b:cc:dc:10:
7e:64:77:20:80:53:f1:5a:87:c6:9f:e2:3d:b6:ca:
78:1b:13:41:8c:f9:53:28:14:ea:45:13:be:f9:42:
e7:60:9b:ba:54:84:4e:0a:05:fa:29:cd:06:38:e6:
30:65:8c:74:82:d7:4e:45:94:23:1c:1b:93:49:5e:
2a:85:fe:3a:45:46:33:cc:fe:d9:26:6e:58:02:fa:
d7:cc:ad:f6:c3:48:80:f2:1c:69:bf:a0:c7:7d:e1:
74:7a:ab:ca:38:7f:b7:a0:64:03:bf:c7:d8:aa:06:
19:f4:de:c0:c6:48:61:14:c8:a7:7a:ae:75:43:98:
b9:af:5f:1d:cf:21:07:a4:e0:96:de:ec:f5:13:6b:
59:ad:20:1a:64:b7:ed:f7:1f:f7:14:2c:8c:78:e0:
7f:7a:47:06:bf:c8:26:36:7b:90:49:7e:0c:9d:2f:
ed:47:4b:07:6a:c9:b7:40:0b:16:8b:aa:bf:06:54:
d1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:28:2B:0B:C1:C3:17:37:D6:B1:72:5B:CB:2E:0C:A0:E0:D0:DC:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18ebfe4b-5ceb-3e42-ad2b-22b02bd75287.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:30ff:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:4c:1e:fc:3c:cc:e7:76:19:cb:f8:ac:55:46:0c:71:29:0d:
2f:b3:f0:78:88:c1:42:b1:c9:77:6c:d1:c1:41:0a:83:67:2d:
c8:99:86:2d:a6:74:27:9e:2a:9e:ff:16:fa:e2:ca:43:77:d9:
6f:86:2d:74:7f:48:30:d6:15:52:30:af:0d:84:9c:35:bb:57:
17:3c:ad:3d:bd:57:da:fb:7f:6d:c4:8f:3c:78:df:21:a0:5e:
06:7b:f8:4b:6c:30:51:40:06:ae:58:5a:43:ae:12:72:15:30:
0e:9c:26:5c:46:4f:5e:96:7f:11:91:57:35:a2:33:74:fd:27:
88:23:6b:e0:65:22:f1:0b:34:c9:e8:51:c1:14:f1:5f:d5:52:
eb:c8:0b:f6:6e:e8:8f:70:78:dd:40:6d:39:56:2d:b3:97:4c:
c7:6b:b3:eb:c2:fa:cd:7f:92:fd:ca:9b:d9:76:0a:8c:af:7d:
90:bf:80:c9:7b:b3:0b:33:19:76:a5:c1:8a:58:5c:24:e7:76:
eb:b1:68:85:bc:25:a8:ba:ef:40:7b:33:e3:8d:a0:cf:dc:6f:
5c:49:65:04:3e:c3:58:7a:82:d9:6e:3b:40:a5:95:89:2b:09:
5f:6a:a3:e7:ae:20:dc:86:da:d3:d4:66:65:bb:4e:d9:92:7f:
4f:73:a3:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:03:17 2025 by rpki-client