Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1f337c0b-7e3d-3486-90d4-8790e90f1581.roa
File: 1f337c0b-7e3d-3486-90d4-8790e90f1581.roa (raw, json)
Hash identifier: 6nNA882iEGb2wI4jDUUazy6Rqjl7qlgjZwN1Wr8Z8Co=
Subject key identifier: 02:AB:15:24:7E:60:4A:C0:E6:11:48:67:1C:8B:E6:FA:D6:DC:2A:C2
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858484AAAD44AD18CE9D9A8C781C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1f337c0b-7e3d-3486-90d4-8790e90f1581.roa
Signing time: Sun 22 Dec 2024 14:00:51 +0000
ROA not before: Sun 22 Dec 2024 14:00:51 +0000
ROA not after: Sat 22 Mar 2025 13:00:51 +0000
asID: 396583
IP address blocks: 2001:500:121::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4a:aa:d4:4a:d1:8c:e9:d9:a8:c7:81:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 22 14:00:51 2024 GMT
Not After : Mar 22 13:00:51 2025 GMT
Subject: CN=ab9ec901-2cad-4c4c-9124-74b0b39f64e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9b:1f:db:47:a2:6b:b6:e5:c1:1e:19:40:58:
4c:b7:d8:d8:ab:60:1d:47:b4:36:97:d6:3c:bf:7f:
a1:cd:fc:cf:25:69:94:15:be:94:a9:fd:b3:e7:c5:
75:28:03:b9:7e:49:2e:11:5a:22:12:f9:8d:61:a0:
31:4f:5f:ad:ab:b2:e8:40:6b:f2:1e:c7:ea:66:b1:
fa:30:c5:91:04:d8:a5:0a:87:3a:39:6a:0e:0a:39:
4e:a7:2d:e7:52:82:d1:3d:3c:81:70:91:4f:c3:f6:
02:c7:44:25:19:ec:5f:a1:63:08:21:15:31:a3:91:
b3:46:fd:fe:8f:d5:9f:1b:11:bf:8c:9d:42:21:85:
8e:07:9b:34:ff:a0:e7:90:58:28:f0:c6:e8:c6:ee:
ba:bd:b9:8f:33:5d:44:03:3f:ad:2d:96:b1:9e:8e:
f3:e0:c9:72:b2:08:b4:79:d6:9e:d3:96:09:e3:a4:
7a:ba:87:f3:a7:58:7a:9e:d0:a9:81:bd:1d:ce:12:
67:19:5e:0b:9d:f8:73:32:b6:02:08:3b:25:70:b4:
06:53:63:55:24:a4:4d:7d:37:45:be:82:30:a9:d8:
33:f7:36:48:8f:a2:7d:41:35:2e:47:06:f2:d2:99:
e5:5f:ba:65:7d:d0:5a:c7:a2:7a:04:63:8a:21:78:
82:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:AB:15:24:7E:60:4A:C0:E6:11:48:67:1C:8B:E6:FA:D6:DC:2A:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1f337c0b-7e3d-3486-90d4-8790e90f1581.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:121:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:79:04:5c:07:89:89:7b:48:29:00:d4:6c:b9:62:3c:0e:e5:
e3:be:75:18:cf:a3:f5:b5:e2:77:89:46:88:02:ac:a5:11:55:
a2:94:b8:26:90:26:89:c2:12:eb:ef:3a:d5:89:87:e0:ce:b1:
2b:18:b5:a2:eb:87:b3:57:86:20:92:fb:63:2b:53:1d:70:97:
54:b9:4d:e5:7b:c7:86:89:82:83:a7:e6:38:1d:e2:9a:fc:c5:
35:00:99:3d:3a:a9:ef:a9:89:32:a0:c2:e5:ac:89:21:dd:c1:
20:22:2a:63:03:0d:d2:dc:1f:c8:98:87:f8:30:1a:85:bb:38:
34:f5:6c:d2:9e:58:c3:1b:86:75:02:ad:ff:cb:b1:6a:02:e5:
63:64:69:49:18:d1:10:8a:cf:b4:1f:c0:66:22:0d:80:98:50:
0f:24:d1:d1:b6:d8:fc:e1:8e:d3:c0:06:d0:e3:5b:68:04:72:
5f:86:7b:9e:87:f2:d8:02:e6:41:8a:dc:88:23:5e:76:27:fb:
2f:de:84:23:68:47:9e:bd:ec:5d:e5:1b:f4:c7:4a:a9:31:53:
bb:74:76:f6:e1:fb:ba:bc:87:18:b8:22:03:81:56:84:50:20:
00:e5:65:1c:43:5e:50:9a:56:7a:d5:d6:56:a9:fe:88:1f:81:
70:04:ea:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:25:30 2025 by rpki-client