Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/20b942eb-4abd-3149-ac4e-652d72bc8414.roa
File: 20b942eb-4abd-3149-ac4e-652d72bc8414.roa (raw, json)
Hash identifier: 9vvEPTOJWsaoAiHHM9fPbDS7WVPIgcXGKSdWh1AJ1o0=
Subject key identifier: B4:02:63:B2:29:1C:04:EF:DA:89:BA:B1:F2:A3:FD:A9:FD:A6:6A:5A
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584845157B4AAC2FBE790EAD9D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/20b942eb-4abd-3149-ac4e-652d72bc8414.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 396597
IP address blocks: 2001:500:122::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:7b:4a:ac:2f:be:79:0e:ad:9d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=ca078044-df6f-4cb2-acc5-b50fb3a4c937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:43:9b:b4:56:c9:0d:f0:a5:78:43:d5:82:55:
ab:e0:52:af:4b:fe:59:d1:3c:54:3d:76:2e:5c:9f:
0b:f7:90:c2:f9:18:03:f5:de:7a:e1:7d:2d:2e:a5:
79:5a:88:eb:e3:d6:a3:e4:5f:ae:0d:ab:3f:59:aa:
3f:bb:03:a8:aa:23:3f:33:2e:08:de:d6:5e:46:3c:
08:4c:93:ec:06:3a:55:cd:68:08:33:d1:80:1e:5e:
ae:b3:a4:bf:33:2c:14:5d:a2:c7:7e:a4:df:67:82:
b6:3b:30:0e:07:19:02:db:40:2d:2e:d2:8a:71:ac:
e7:1a:90:7b:66:fc:7c:35:48:52:f0:39:30:a9:ba:
d0:3d:39:65:1b:a9:cd:9a:53:a5:3f:bc:e9:c5:96:
71:19:5a:08:1d:d5:cb:2f:d9:ce:32:12:d4:63:25:
9d:0a:c6:ab:5d:29:9a:be:75:27:df:1f:d0:74:f4:
44:ab:a4:30:5e:68:be:2d:4a:b2:f9:02:35:68:3f:
63:b4:34:57:0b:3f:be:44:dc:88:d8:33:6b:88:b8:
8c:54:f0:cf:19:5b:6f:ef:76:ee:38:a6:07:ac:b1:
e1:e8:da:70:a0:6b:c1:2a:20:c2:d3:81:09:f1:ea:
d3:6f:ae:43:2c:eb:35:22:77:3c:f2:30:bc:1d:6e:
cc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:02:63:B2:29:1C:04:EF:DA:89:BA:B1:F2:A3:FD:A9:FD:A6:6A:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/20b942eb-4abd-3149-ac4e-652d72bc8414.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:122:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:8f:ec:eb:30:5c:80:68:22:fa:df:c2:6c:93:64:19:3c:51:
75:47:29:88:c0:05:32:4a:8b:8e:9b:3f:ae:60:aa:1a:bb:05:
63:a6:bb:ee:2d:0c:1d:71:b4:ba:d4:a5:67:6d:06:60:16:79:
52:9c:52:cc:4d:9a:96:11:92:b8:c2:26:76:a4:3e:15:7f:25:
58:3c:dd:1a:45:a0:ca:5d:52:be:1e:09:53:81:86:68:a7:d4:
10:f6:18:1a:14:78:0e:31:95:c7:c6:27:65:fa:ac:d6:1b:d4:
59:e5:fa:d6:47:65:64:71:e1:dd:39:99:cf:4e:2c:5c:e8:0e:
99:a5:5d:31:52:28:ca:57:45:df:9f:b4:0b:5f:9c:55:3a:aa:
34:73:c2:e9:e1:c3:57:60:ea:1c:20:9d:dc:af:00:06:4c:0a:
2c:b6:88:0e:1d:cd:c9:5f:96:0c:34:0a:df:5f:b8:c2:82:de:
c1:ed:60:86:95:ab:bf:4c:2c:48:97:d5:fa:59:12:63:1f:4a:
a6:0e:f3:b3:06:ee:84:46:54:90:52:d5:d0:c5:02:f5:a6:05:
40:02:2b:d1:5a:25:04:3f:c7:a0:38:b4:19:29:eb:ba:3b:ad:
66:d6:5c:c0:03:30:ee:45:a9:f7:6c:bb:72:3b:c9:52:f2:54:
42:ce:be:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:41:46 2025 by rpki-client