Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/305f28da-be5f-3a06-b9df-40c6e00684ad.roa
File: 305f28da-be5f-3a06-b9df-40c6e00684ad.roa (raw, json)
Hash identifier: 8PVzqALcDwsKcoUJwQH+6Xlyx5I41Nhx4u1f8dgFCa8=
Subject key identifier: 57:F8:D0:AF:83:D6:B7:36:BC:E6:03:ED:EA:D6:8A:99:C7:A1:C8:34
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858484AAAD8D48AAC6853481091C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/305f28da-be5f-3a06-b9df-40c6e00684ad.roa
Signing time: Sun 22 Dec 2024 14:00:51 +0000
ROA not before: Sun 22 Dec 2024 14:00:51 +0000
ROA not after: Sat 22 Mar 2025 13:00:51 +0000
asID: 36621
IP address blocks: 2001:500:121::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4a:aa:d8:d4:8a:ac:68:53:48:10:91:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 22 14:00:51 2024 GMT
Not After : Mar 22 13:00:51 2025 GMT
Subject: CN=8ebcbd68-a521-45ad-9570-a6fd09740813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:95:32:a4:76:a7:8d:f1:33:0d:5a:16:22:c9:
a8:a9:c0:13:40:47:8a:dd:c4:1a:ab:4e:ba:8b:9a:
44:af:3b:20:60:3d:d4:ab:15:be:1d:a0:4b:12:d9:
25:a7:17:51:92:6b:1a:7a:7a:de:b1:ae:62:bb:1a:
df:ca:2b:99:48:94:72:29:7d:5f:a4:55:27:b4:81:
77:f2:1e:a4:bb:04:84:3c:fd:a3:59:f6:71:dc:ad:
79:4b:64:57:7e:21:82:b1:64:1d:54:d4:95:97:10:
dc:52:3c:df:71:09:8b:78:ec:e5:8d:d2:34:64:01:
3d:11:60:54:a3:fc:be:88:b2:19:fe:68:be:36:ac:
da:f0:05:18:67:a6:d2:54:b7:35:25:37:56:3c:37:
33:d0:15:bf:bf:81:09:3c:85:7a:07:c4:3b:2f:9d:
d3:f5:3e:4a:8f:58:eb:04:8c:35:eb:23:69:f3:4f:
a9:af:ff:90:e8:9a:1f:34:60:62:19:60:12:1b:3a:
a0:fc:73:38:2d:8d:1a:46:0b:e3:f8:05:e6:eb:37:
c7:a3:fb:23:32:c5:db:e4:d0:e8:f7:6c:7e:58:da:
12:35:b8:1b:a7:c8:31:87:88:9d:c8:15:0d:40:90:
a8:af:33:dc:af:7d:d3:85:92:f6:44:c5:a5:04:ca:
ce:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F8:D0:AF:83:D6:B7:36:BC:E6:03:ED:EA:D6:8A:99:C7:A1:C8:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/305f28da-be5f-3a06-b9df-40c6e00684ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:121:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:66:c4:7f:b1:04:8f:d3:a5:4d:78:5f:09:67:6e:d9:20:21:
a3:bf:2f:db:64:9d:11:31:f8:2e:2d:44:4c:1f:b9:2f:f9:23:
3d:9e:59:50:22:92:83:e0:06:00:94:2a:b9:65:e0:b4:57:67:
4b:fd:6a:65:a2:36:ad:56:ec:83:33:b9:44:6e:71:63:26:e1:
5c:39:fa:27:eb:18:99:ad:22:46:ca:b7:67:23:d0:ac:9d:26:
4d:8a:ca:ec:1a:f7:72:a6:57:b1:34:5e:a5:c1:1b:9f:42:de:
1d:e2:85:ba:1e:2d:d1:97:f0:90:fb:c9:d4:5d:fc:4d:1c:96:
09:f2:40:6c:5f:6e:1c:b6:d2:eb:28:3f:bb:12:56:64:c2:ed:
30:00:1d:c5:4d:7a:e0:bd:e1:03:1f:75:8e:c2:3b:42:a1:f5:
6e:1e:1a:8b:6e:e9:ba:ae:50:c9:06:e8:19:7f:64:5c:f0:b1:
f9:f2:bb:38:9a:ef:14:7a:69:d4:5b:df:d0:d1:3f:9b:0b:94:
bf:29:e4:65:d2:57:24:a6:4e:08:d0:68:e3:de:33:31:02:b7:
06:40:19:e0:9b:71:ce:d5:a7:1c:6a:9b:ec:b5:9d:8d:66:a1:
39:f4:a5:50:4c:99:31:45:fe:30:f0:54:bd:85:9e:75:a8:58:
65:10:fb:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:56:02 2025 by rpki-client