Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1fc6787b-be41-3ca7-bb6b-dd160a47c881.roa
File: 1fc6787b-be41-3ca7-bb6b-dd160a47c881.roa (raw, json)
Hash identifier: L5rJAkN+pd3FvTGt1QbKLZOCJbizwLHdBoW7Imqt638=
Subject key identifier: C5:A6:5A:59:56:1D:BF:C3:8B:60:07:6D:D5:5E:EF:19:19:0B:A5:95
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848424319186C77E90BB6D29680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1fc6787b-be41-3ca7-bb6b-dd160a47c881.roa
Signing time: Thu 19 Dec 2024 13:45:26 +0000
ROA not before: Thu 19 Dec 2024 13:45:26 +0000
ROA not after: Wed 19 Mar 2025 12:45:26 +0000
asID: 396553
IP address blocks: 2001:500:127::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:43:19:18:6c:77:e9:0b:b6:d2:96:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 13:45:26 2024 GMT
Not After : Mar 19 12:45:26 2025 GMT
Subject: CN=2100273c-92f8-4fb8-80bb-d939865f9050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:23:77:c7:dc:c0:25:c5:61:7c:ea:b1:5e:6a:
86:20:6f:f9:38:e4:70:e8:28:7f:df:31:74:a1:59:
82:7a:e4:b4:fe:39:b3:de:7b:20:eb:e3:5a:70:f2:
5b:66:cc:c2:28:74:34:f5:2d:a0:c8:ae:65:6d:be:
f0:24:4c:ce:c2:3c:f8:98:2f:f1:67:47:8f:ec:8f:
72:67:2a:42:99:71:ef:fc:d5:dc:ea:9d:95:58:ab:
8f:5d:9d:d8:ca:fa:20:92:73:8e:dd:10:ba:c3:c9:
51:67:23:34:bd:3d:95:ee:b2:2b:44:4c:73:de:fd:
7b:7e:ba:9a:55:bc:15:7f:52:06:83:ae:9c:04:db:
01:2f:0a:d8:88:aa:9e:6d:e8:9b:da:29:a6:87:59:
61:32:3e:82:bb:ff:ca:26:ac:41:e0:2e:63:17:23:
a0:2d:a8:6b:4c:3f:f9:07:73:03:2f:ce:db:04:92:
5d:c1:e2:4b:f3:aa:b2:ec:86:9b:3d:34:44:ea:58:
48:f6:64:98:e0:75:76:f6:6a:20:d9:63:bc:4c:f4:
12:8a:04:22:08:2a:62:60:dd:9b:ff:d7:20:49:42:
02:59:44:f6:24:a9:f0:72:53:76:29:67:38:2a:96:
77:d6:1c:f9:1d:78:72:b7:d5:28:b5:bc:eb:94:aa:
ec:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:A6:5A:59:56:1D:BF:C3:8B:60:07:6D:D5:5E:EF:19:19:0B:A5:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1fc6787b-be41-3ca7-bb6b-dd160a47c881.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:127:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:fe:72:29:24:5c:0b:3d:c7:a9:2d:46:14:76:39:5d:2a:29:
23:2c:5a:9a:a6:f9:15:88:29:50:c1:44:45:bf:dd:d1:1a:9f:
0a:36:40:3b:d6:81:b7:96:75:e8:88:9f:05:68:a3:dc:6b:7f:
19:ce:41:ed:5f:29:78:a2:0e:c5:6b:dc:db:95:97:09:6e:d4:
9c:ac:09:5a:7b:a1:15:a6:43:de:eb:0c:29:8c:83:7f:77:b7:
13:06:d3:32:01:35:5e:dc:1f:e5:fc:5e:39:e0:4a:25:d1:48:
e0:cb:84:e5:11:6a:22:d2:db:82:43:eb:7b:28:1c:5d:24:34:
41:2b:0e:20:61:95:c8:5a:3a:63:f5:d8:27:ac:71:ba:12:5d:
b2:1a:bf:81:4a:50:56:42:6c:b2:ed:bd:8c:24:bb:2c:a7:cd:
28:d8:e5:7a:0e:35:1b:31:bf:20:61:ee:9b:8b:ff:02:60:aa:
77:72:af:fc:28:00:4e:e6:90:fc:bb:ae:47:18:87:9c:1e:e7:
f8:5e:e2:da:41:2e:6e:ec:e7:1e:0e:fc:71:d2:5c:86:15:84:
1c:9a:bf:64:01:c0:0e:7c:b6:a8:44:19:e6:cb:3c:0d:41:18:
5d:d9:9d:0d:34:c5:24:d5:9c:a3:a6:26:5a:18:ee:80:22:8e:
67:06:67:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:43:08 2025 by rpki-client