Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a85e5af-726e-3fc4-a7dd-ee94a828a998.roa
File: 2a85e5af-726e-3fc4-a7dd-ee94a828a998.roa (raw, json)
Hash identifier: 4hkb9MQQ05nCMNDhDZg1jRYLAIXpPsQO5PBAMJFptEM=
Subject key identifier: FC:19:B0:64:E4:96:74:02:91:6E:DC:7C:DA:9B:BF:75:A4:6D:05:C5
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848372010E35D49B62C4F5A5200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a85e5af-726e-3fc4-a7dd-ee94a828a998.roa
Signing time: Sun 15 Dec 2024 14:00:53 +0000
ROA not before: Sun 15 Dec 2024 14:00:53 +0000
ROA not after: Sat 15 Mar 2025 13:00:53 +0000
asID: 396553
IP address blocks: 2001:500:123::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:37:20:10:e3:5d:49:b6:2c:4f:5a:52:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 15 14:00:53 2024 GMT
Not After : Mar 15 13:00:53 2025 GMT
Subject: CN=5710b34b-6dcc-41cb-addd-459eabe6559d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:70:da:f8:fc:3d:76:ec:59:5e:ca:93:06:cb:
75:8b:d0:1d:2b:12:c3:74:dd:cf:0f:c0:50:ee:e8:
1e:11:53:88:c7:64:61:82:56:b1:32:31:b9:6e:95:
6c:08:71:57:ed:39:ae:5e:c1:79:72:c6:54:16:9d:
db:9f:83:41:ca:20:5a:f2:8a:ac:f2:03:35:51:5e:
62:23:18:b4:70:41:d5:a8:46:e8:83:d4:4b:3f:41:
f9:3b:ad:c4:fe:aa:73:96:91:d0:70:75:ca:d3:9b:
fe:7b:fe:dc:83:ad:ba:eb:42:84:70:3a:a2:09:0f:
ce:13:09:65:08:aa:ac:a2:39:76:1c:b0:e7:61:cf:
f5:1d:15:c4:cd:bb:4d:ca:1c:79:36:3f:72:2f:5f:
96:7f:43:8a:79:c5:ca:ea:41:60:78:63:71:4e:06:
13:a7:1e:f6:79:04:2e:d2:c0:82:b9:f6:10:b4:49:
65:fb:2c:29:ef:82:ed:c5:ba:6b:ff:fa:1e:d8:37:
48:f6:e3:67:14:da:06:77:3f:90:5f:e0:b7:f8:0d:
e8:0e:3a:26:2b:ec:80:1e:c7:8e:23:ff:6e:ce:fd:
1a:59:99:c3:18:00:aa:dc:a7:20:bd:0f:00:7d:ce:
5d:cb:60:a7:8a:81:4b:69:26:c7:92:49:53:7a:c6:
bc:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:19:B0:64:E4:96:74:02:91:6E:DC:7C:DA:9B:BF:75:A4:6D:05:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a85e5af-726e-3fc4-a7dd-ee94a828a998.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:123:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:70:53:d6:01:64:db:ae:b4:fa:80:1c:46:1e:1f:b6:f0:f0:
c6:b1:9b:df:ef:09:f4:a0:0e:65:d9:82:1f:9d:d9:61:f8:1a:
3f:4a:07:7d:a1:6d:9e:22:74:d7:80:62:16:c3:60:37:62:0d:
18:10:6c:0f:8d:f3:ff:b8:4d:7f:a5:f3:94:1e:ba:c9:cd:f3:
f7:01:13:6d:69:b2:e1:6e:09:d0:9b:31:9c:07:d3:04:17:d7:
fb:33:54:a6:a8:99:64:ba:2f:e7:93:81:7c:46:83:5f:88:e0:
57:8c:2a:d6:db:ec:72:ee:7a:9d:24:51:27:0d:d2:45:32:91:
a7:80:ab:1d:54:aa:10:d6:08:ce:29:25:4c:75:8c:b6:cc:b9:
f9:28:fb:09:ce:ba:26:0f:a7:35:c0:52:4c:b0:9f:0e:80:ec:
75:21:4e:14:27:7a:2a:10:7e:81:fd:32:cb:e8:c8:e0:a3:ef:
e3:a9:12:20:99:28:a4:98:03:0d:27:88:52:1e:1c:16:c4:10:
25:c0:82:21:f5:3c:97:df:a8:3b:ef:06:2d:3c:b0:05:cb:0c:
71:39:20:cc:9f:c6:13:c9:3f:ee:ca:5b:c1:5d:5e:4b:22:32:
55:44:57:ce:cc:ec:66:59:93:00:5a:d1:e4:dd:c4:9a:25:d0:
af:64:ab:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:12:28 2025 by rpki-client