Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ea17f1a-3190-3717-93f5-2f67bf505718.roa
File: 2ea17f1a-3190-3717-93f5-2f67bf505718.roa (raw, json)
Hash identifier: DAYqtIEc0bg9hziy/bQsWsgWlXoVB/4HNQWJsPqqNrU=
Subject key identifier: 2E:13:34:54:A2:D7:F3:16:46:C8:D7:3B:7D:91:7D:C1:C1:E1:74:E5
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858484242E7FC932D6471B08D4E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ea17f1a-3190-3717-93f5-2f67bf505718.roa
Signing time: Thu 19 Dec 2024 13:45:03 +0000
ROA not before: Thu 19 Dec 2024 13:45:03 +0000
ROA not after: Wed 19 Mar 2025 12:45:03 +0000
asID: 396561
IP address blocks: 2001:500:124::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:42:e7:fc:93:2d:64:71:b0:8d:4e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 13:45:03 2024 GMT
Not After : Mar 19 12:45:03 2025 GMT
Subject: CN=fdbbb48a-c2e5-4fc9-939c-6d5a26bd073b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:0a:ec:ed:15:5e:79:6c:5d:c3:5d:e6:ac:10:
8d:51:fd:41:1a:1e:53:18:81:d4:ec:85:86:ae:82:
80:6d:eb:f7:0f:54:d4:10:8d:4c:19:5e:29:de:f9:
c5:67:2a:db:ba:84:04:e0:28:38:3e:e7:35:46:7d:
62:7e:48:07:0a:8d:77:7b:2c:b0:bf:fc:81:4c:7e:
80:74:22:d8:8e:2d:5a:84:77:3c:5b:da:6e:4b:54:
6c:ae:bd:ad:f6:cb:0e:00:2d:29:60:89:25:0c:3e:
25:a0:2c:67:f4:43:79:2c:e3:b6:b7:82:20:c0:b5:
d0:13:ef:e5:c1:83:5a:78:8c:48:09:36:2b:16:80:
de:87:43:d4:63:04:7e:d5:6e:85:8a:45:cd:db:aa:
c9:9d:61:db:49:2c:9b:01:30:a2:1c:df:5c:63:91:
ca:ef:8d:6f:dc:12:2e:2b:ab:f0:d5:63:25:98:29:
26:34:85:9a:ae:0a:22:e7:ae:fd:aa:18:6f:07:72:
6f:86:71:31:1d:7e:1d:7b:63:4e:fc:14:47:cc:dc:
51:86:75:80:0b:d1:b9:62:38:a8:aa:68:db:fc:41:
b4:73:50:ca:98:32:f4:dc:01:9c:6f:dc:dd:18:21:
01:1a:62:3e:c7:f8:78:dd:59:26:97:69:b2:47:b6:
d6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:13:34:54:A2:D7:F3:16:46:C8:D7:3B:7D:91:7D:C1:C1:E1:74:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ea17f1a-3190-3717-93f5-2f67bf505718.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:124:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:a2:08:25:af:d9:e7:c0:ec:97:12:21:50:de:00:f3:3c:df:
e9:24:12:58:2f:a3:41:9a:cc:e4:cf:be:b9:0b:8f:a3:cd:8d:
1f:ac:f6:d8:81:3c:af:e0:92:db:c7:60:ac:bf:fd:f6:75:0a:
84:3f:a8:d1:b4:ff:09:38:3f:e8:3d:97:a2:7b:f2:be:74:36:
8c:0b:6b:b5:6b:ad:93:87:f2:9b:78:81:f7:db:aa:6c:e0:25:
b5:27:81:19:49:56:b5:a4:ae:1f:df:37:cc:60:e6:e7:ed:67:
28:7f:64:ac:1a:91:d5:9c:1a:99:92:60:b0:4c:82:b4:65:20:
9a:00:50:72:c3:c7:93:b8:9d:66:76:ef:b5:08:83:c4:20:3b:
93:51:68:7f:d9:46:c6:87:58:e8:45:c5:94:75:9d:bd:0c:32:
d5:b8:4d:6f:2a:55:cc:bb:f3:0a:be:9d:d7:e9:21:d4:5a:43:
71:e6:81:9c:9b:82:da:fb:9a:a5:60:6f:3e:be:28:ab:e6:2a:
93:38:e3:ad:48:83:de:3c:2d:94:ff:3e:d0:48:33:fd:b1:30:
be:fa:f6:9f:84:f0:36:69:d0:cc:e1:18:21:6c:7e:02:b9:1e:
ac:b3:80:7d:78:47:4a:a1:8f:46:d0:a7:51:71:da:69:ea:23:
9e:1a:36:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 22:52:12 2025 by rpki-client