Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2e7f35fc-a5e5-39a1-84ab-70f8447b4db7.roa
File: 2e7f35fc-a5e5-39a1-84ab-70f8447b4db7.roa (raw, json)
Hash identifier: cEPz5zgsoZAEoBeXRBdjTpxyE1q4ggPo8yzfcbwQxNI=
Subject key identifier: BD:1D:5A:45:E6:7F:FA:08:8D:1B:CB:68:70:E3:AB:17:11:34:5A:88
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858484243033DF1487C33E99E9100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2e7f35fc-a5e5-39a1-84ab-70f8447b4db7.roa
Signing time: Thu 19 Dec 2024 13:45:16 +0000
ROA not before: Thu 19 Dec 2024 13:45:16 +0000
ROA not after: Wed 19 Mar 2025 12:45:16 +0000
asID: 396581
IP address blocks: 2001:500:124::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:43:03:3d:f1:48:7c:33:e9:9e:91:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 13:45:16 2024 GMT
Not After : Mar 19 12:45:16 2025 GMT
Subject: CN=9f45d659-fc5b-45b3-9f45-082ced4014a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fd:97:f2:7d:77:fe:04:b0:2a:88:81:cc:d8:
0b:1e:ba:85:6f:4f:0b:db:2e:47:cd:5c:ab:e6:df:
9d:4f:51:b0:b2:25:b1:80:27:d4:7d:0f:18:11:e4:
54:c9:23:e6:e5:66:57:11:21:05:e4:61:52:e1:27:
5f:6a:e3:e7:12:20:0d:19:05:05:ac:a1:8a:0b:48:
6d:f4:f7:12:1c:41:9c:4e:ca:a0:44:ff:5f:ab:a3:
f3:db:86:73:6b:f6:25:8c:0f:a2:2e:3a:72:e5:5e:
c2:66:a7:e1:6f:03:f3:e1:05:a7:98:3e:c1:ae:39:
3c:69:bf:55:18:df:1d:14:71:6f:aa:fb:fc:16:a6:
9f:dc:0b:db:47:0c:47:68:48:b4:2a:9e:b4:0d:76:
8e:1b:c4:c4:5e:18:e2:55:05:fd:bd:6a:43:4a:46:
18:af:1a:31:45:65:53:8c:9b:11:e7:d5:ec:89:2d:
da:4e:66:5c:61:89:3a:c2:2f:56:1e:20:a0:65:aa:
45:64:96:2c:e7:7a:7b:58:4a:91:81:c5:26:7e:75:
ff:71:58:5d:8e:15:e3:bb:b1:88:5b:47:4f:df:40:
5c:9b:17:9b:07:7a:bf:11:2d:a3:b2:a5:26:d3:8c:
87:65:14:09:ac:9b:3b:28:5c:d5:2a:6a:40:22:ac:
e4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:1D:5A:45:E6:7F:FA:08:8D:1B:CB:68:70:E3:AB:17:11:34:5A:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2e7f35fc-a5e5-39a1-84ab-70f8447b4db7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:124:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:9d:8b:b8:2b:e6:33:9b:4a:20:2b:b4:46:b3:09:6e:d7:29:
dc:a0:f4:7d:90:93:bf:66:f7:bd:85:f1:b4:61:fc:b0:f2:a8:
f9:82:6e:c6:09:b8:23:a4:59:13:1f:e7:70:64:bf:fa:aa:90:
b6:8e:f2:b9:70:9d:7c:3c:c9:62:86:85:20:92:2e:56:06:55:
06:0a:d0:9e:ab:ee:3e:5f:17:be:37:77:1b:38:dc:bd:66:31:
c5:4e:ed:ad:b0:33:94:9b:f4:ac:ef:dc:65:fa:8f:7d:e3:ce:
01:fe:0f:85:ac:22:68:11:12:57:d4:03:f1:77:3c:a1:36:92:
70:1d:aa:36:86:a6:8c:56:0a:88:73:3e:95:08:92:4d:30:6d:
63:a0:17:40:ee:64:9d:d8:ca:4e:e8:61:69:bf:68:97:3c:78:
9e:47:24:ed:8f:b7:f3:fb:02:1b:be:40:86:7e:33:6a:cb:54:
2f:76:9d:2d:c2:c9:b3:7a:fd:a4:3a:33:20:29:db:60:ce:79:
e4:f4:9c:3d:4d:8c:5b:18:5a:59:d2:8a:7f:89:38:da:1f:a2:
8b:48:85:f7:70:3c:7e:ee:87:b2:8e:c3:74:45:0f:a7:2b:57:
98:c4:a7:e5:51:e1:96:9a:df:e6:8a:91:35:3d:b0:b4:67:02:
84:30:2a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:53:40 2025 by rpki-client