Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1c2dfe13-0d11-3fc3-b1a9-a4e446cfb473.roa
File: 1c2dfe13-0d11-3fc3-b1a9-a4e446cfb473.roa (raw, json)
Hash identifier: 6HJ/u5JG3k5D5XyEGFpeb4nbQzU+/kq6+MXaTx+AhLQ=
Subject key identifier: 82:08:CB:2F:75:A4:CB:62:B6:F3:38:2B:7B:9E:83:17:B7:F0:05:03
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848530B03AF3134C668BD6BC840
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1c2dfe13-0d11-3fc3-b1a9-a4e446cfb473.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 396586
IP address blocks: 2001:502:cbe4::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0b:03:af:31:34:c6:68:bd:6b:c8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=140df861-7b28-449d-91ef-258422b8fb52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:31:62:ac:76:77:75:49:59:9a:53:b3:9c:1b:
81:57:69:a6:53:aa:46:9d:de:11:21:b2:f5:fe:cf:
35:9b:eb:1e:9b:00:5b:0d:a1:51:e4:15:93:da:be:
76:ec:c1:6c:9a:11:07:4d:3f:74:94:3d:63:03:35:
7c:05:db:b0:55:6e:21:7e:22:00:82:a5:0a:89:4a:
d3:e4:59:3b:61:45:ff:b7:80:d0:b1:3f:b8:f8:53:
25:da:d4:fa:2e:46:a5:b5:a7:ab:01:77:94:f3:d2:
9a:85:3c:99:02:f2:13:38:44:ab:d7:9d:ae:20:30:
44:79:8d:7c:a9:5e:3f:db:fe:05:ae:68:c4:7c:a2:
a4:6a:05:8a:2a:27:7a:1d:22:83:d9:b2:2a:a0:23:
93:3e:06:54:51:3c:73:c8:f1:7a:0d:d9:9b:8e:f1:
3d:1b:0a:39:c7:c2:85:af:ba:dd:03:12:55:08:bb:
19:7b:dc:05:61:ce:dd:4e:c9:12:b3:ce:b9:ec:3a:
bf:43:1a:b1:cc:1d:7c:cc:fa:9e:05:b0:72:7e:f9:
83:e5:e8:26:ee:1f:9a:23:77:26:f6:c4:9b:d4:e3:
87:c1:9f:1e:8d:c4:f4:df:ff:70:51:ad:87:4c:af:
13:94:15:0b:85:6f:30:1d:d6:c0:2c:e7:d7:cb:d7:
5f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:08:CB:2F:75:A4:CB:62:B6:F3:38:2B:7B:9E:83:17:B7:F0:05:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1c2dfe13-0d11-3fc3-b1a9-a4e446cfb473.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:cbe4:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:8e:71:d8:0f:5e:14:3f:c9:9a:21:8a:b4:34:de:15:0e:15:
e6:cb:44:6d:7e:ae:65:cd:da:0e:a2:04:1e:17:bd:66:e5:68:
65:75:2e:41:78:d2:2b:58:3d:b8:f0:e0:76:93:56:b6:d9:93:
d6:ff:da:01:b9:32:42:ad:f9:c8:56:90:a9:eb:10:18:80:71:
ae:aa:71:b3:44:bc:9d:82:67:fc:85:58:82:13:e8:71:32:56:
f4:0c:af:2e:0d:c5:fb:fd:9a:f9:3a:f1:f9:b7:20:f8:52:01:
c1:58:8c:48:32:59:ec:1f:f3:18:4d:32:bb:4e:e4:06:d9:9c:
ad:e7:83:0e:2d:1c:29:25:83:bf:3b:d0:7c:8a:16:03:20:e1:
95:13:bd:26:61:7a:cf:6a:bc:12:96:28:d9:13:1c:d2:7b:2a:
af:22:ca:06:87:31:76:97:65:b1:3c:2d:ab:93:3a:26:93:e7:
74:20:bf:e9:14:ce:45:94:e6:17:5b:0e:07:02:f2:52:d7:82:
26:4c:0a:45:a4:9d:e3:55:25:3f:80:10:2c:ae:7d:17:06:a9:
7a:84:4c:82:8d:9f:6d:f8:a2:e5:cd:e9:33:6a:de:a0:c2:6c:
cc:09:dd:2d:13:12:88:dc:5b:fa:f4:15:fe:26:9d:e5:97:3a:
9d:6b:b0:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:43:11 2025 by rpki-client