Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2bd4d08b-166f-3f0f-b220-e0974919b8ee.roa
File: 2bd4d08b-166f-3f0f-b220-e0974919b8ee.roa (raw, json)
Hash identifier: PeiZ19lvEX7p2N9N/HcjtJ6SqxwyfGvU6Qt2AdqTEkI=
Subject key identifier: 13:BA:13:D8:01:C9:50:48:3F:10:7F:49:A9:25:59:B3:E7:97:84:0B
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858486100597671DA52691F84A480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2bd4d08b-166f-3f0f-b220-e0974919b8ee.roa
Signing time: Mon 30 Dec 2024 14:00:51 +0000
ROA not before: Mon 30 Dec 2024 14:00:51 +0000
ROA not after: Sun 30 Mar 2025 13:00:51 +0000
asID: 396558
IP address blocks: 2001:501:8a29::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:00:59:76:71:da:52:69:1f:84:a4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 30 14:00:51 2024 GMT
Not After : Mar 30 13:00:51 2025 GMT
Subject: CN=c2c561e1-10b3-4b74-996f-0144fa2c9885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3a:31:ce:3e:ce:76:21:5d:ee:60:50:a7:cf:
0b:06:8e:0c:12:80:73:9a:20:0b:92:91:e3:1d:20:
ed:a5:bb:38:73:dc:8e:b1:8f:b3:31:53:18:10:40:
e3:a5:b1:27:5a:05:1f:59:3e:ee:ac:23:65:71:ea:
37:d8:34:ed:e4:94:27:8a:20:c0:3a:00:1a:f5:a5:
56:3e:c8:99:91:fc:7a:86:29:0e:cc:e2:56:84:5b:
9c:f3:73:59:ff:c9:8e:be:33:74:38:c6:0c:e9:54:
b8:5d:6e:8a:90:c5:63:05:36:76:b0:03:57:e3:12:
40:e2:f9:66:31:ed:c5:4a:b8:1e:dc:6a:35:01:1b:
d1:e5:28:05:40:52:99:c9:a4:90:00:50:20:70:95:
97:49:7c:6a:81:0d:80:d4:81:3c:b5:38:42:92:6f:
a0:29:a2:4f:b2:f6:aa:b4:9f:f9:64:68:be:49:d5:
3d:8f:8a:b3:60:de:e4:51:05:3f:9d:61:34:a3:b1:
0e:c1:fc:75:f5:29:e2:f2:18:0d:1d:ab:ba:fb:a4:
39:da:ba:d3:bb:06:3e:ea:f5:68:a4:1a:4b:45:aa:
e0:f8:6c:2d:73:5a:a3:bf:8f:f0:61:bd:d4:53:29:
6d:95:df:57:76:4e:e6:56:21:a2:c5:b8:0b:43:39:
1e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:BA:13:D8:01:C9:50:48:3F:10:7F:49:A9:25:59:B3:E7:97:84:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2bd4d08b-166f-3f0f-b220-e0974919b8ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:501:8a29:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:1e:cc:32:e3:ed:0a:ac:f6:4f:9c:18:00:6a:49:a6:48:df:
b4:9f:9b:e7:73:b1:51:8e:95:de:fc:85:47:6c:9f:34:6f:91:
9b:68:ac:d6:83:11:8e:71:e7:65:1e:27:42:e7:0e:d4:0c:0d:
6c:00:8d:98:97:3b:2b:19:84:1a:ca:bf:a2:c5:ea:57:1e:80:
ca:20:e8:9b:0f:a4:8f:8d:6f:4f:97:1f:87:6e:e1:0c:6b:e6:
4a:0a:04:d1:41:29:ea:80:7d:9f:d9:8f:df:9e:00:5c:b0:b3:
6a:5e:24:3e:0a:dd:eb:9f:91:e3:ba:0c:8b:5f:49:a8:40:dd:
e5:98:f5:60:b0:5c:f9:23:52:8a:21:8d:94:a4:fb:cb:5f:ac:
08:00:bc:60:d8:e7:41:60:98:76:f8:90:bc:b6:be:e5:c0:b6:
e8:e6:5f:c8:26:2c:bd:49:fd:ee:5d:91:e2:c5:c4:f7:ab:37:
aa:ba:77:fb:57:ee:cb:24:2c:9c:82:67:02:7a:87:53:6f:ac:
c8:17:29:b4:5e:1e:12:90:d8:65:1a:5c:e4:76:1f:29:bd:71:
97:49:e0:a5:f5:96:10:d3:5d:1d:a5:14:c1:7c:86:b6:ae:6b:
ea:47:40:8d:b3:7b:ef:81:69:79:a2:c8:3f:b8:4d:6c:13:a8:
05:1c:b0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:56:19 2025 by rpki-client