Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/32e3d2a9-cb29-3373-bdbe-4419c68fa5ec.roa
File: 32e3d2a9-cb29-3373-bdbe-4419c68fa5ec.roa (raw, json)
Hash identifier: OKwqN6MO8yLdfeHQNDCQFon/Ela4TNENgV3DaG7RTgo=
Subject key identifier: E3:12:7E:9C:10:B1:2D:84:B8:65:6A:9C:5D:3D:A6:4C:67:05:E1:BD
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848451577E2F2F122F64E066800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/32e3d2a9-cb29-3373-bdbe-4419c68fa5ec.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 36628
IP address blocks: 2001:500:122::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:77:e2:f2:f1:22:f6:4e:06:68:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=d0e05f1d-9f21-4ec8-be59-9ee3a726e54d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3d:73:27:2f:c4:62:ef:68:59:3c:80:76:38:
c7:7b:e0:d9:91:56:7a:17:0e:a7:6c:47:85:87:4f:
4e:0a:3a:77:3f:76:fe:7a:3a:86:07:89:80:4f:62:
1b:74:64:f1:7b:5f:01:a3:7c:72:93:f6:b0:6c:80:
22:af:9a:6d:b6:4b:82:8c:37:58:02:ac:3a:94:e8:
44:55:7b:b4:be:2b:c5:4f:6b:ce:c4:49:14:88:c6:
ad:38:e3:b6:b8:25:44:af:fe:d0:0e:5b:20:19:85:
10:ae:b8:e9:15:b1:4c:88:ab:b9:67:c0:e8:30:27:
59:07:ab:1d:9d:6d:10:63:3c:72:e4:32:64:7a:01:
73:c4:89:73:fb:37:06:e1:1b:b3:10:4b:53:a4:7c:
40:10:c5:09:02:82:e3:0f:78:49:25:62:be:3d:b2:
23:53:7d:7a:c6:18:ea:e7:1d:2c:5a:ab:a1:bc:f0:
81:ce:6b:11:24:51:70:b4:d6:22:f0:76:22:cb:f6:
c4:3c:61:7f:b2:02:5d:44:ee:8d:73:cb:5a:44:e1:
8b:85:7a:82:c9:49:fc:34:d6:1b:80:b3:3a:22:2b:
1c:9c:46:a2:f7:06:72:f6:63:69:fa:97:02:77:f3:
b9:80:db:ba:d7:05:95:4a:fa:04:50:9c:7c:f8:3f:
c0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:12:7E:9C:10:B1:2D:84:B8:65:6A:9C:5D:3D:A6:4C:67:05:E1:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/32e3d2a9-cb29-3373-bdbe-4419c68fa5ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:122:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:03:e7:76:7c:8f:d9:7d:ea:6a:c7:37:cb:f6:66:db:89:26:
6d:bc:37:76:52:6a:7f:ea:a5:0d:f5:94:18:1f:2c:67:e9:d2:
15:bc:b2:de:40:59:ea:38:64:0b:ad:2a:8c:02:65:33:15:8f:
21:26:8e:fa:cb:ba:28:17:d3:67:03:67:6b:48:e9:48:2a:94:
82:62:d4:0f:6e:9e:d9:03:09:a1:e1:20:f1:be:1b:b7:d7:0b:
56:97:21:32:f0:40:9d:47:40:42:76:a8:e9:24:6c:bd:32:0d:
89:9e:9b:c2:91:85:44:d3:8f:99:7a:09:7d:23:55:5d:a2:42:
2b:9b:08:a6:0a:2a:3d:77:cb:99:8a:a6:46:22:dd:67:26:58:
6a:a1:d5:4d:5b:e0:00:90:be:b6:a6:0c:3c:3b:4c:62:1c:a5:
cf:7c:23:74:cd:70:e0:48:6f:20:5b:ba:5e:ea:8d:82:b6:f4:
27:fa:de:66:3e:5c:78:46:82:f2:51:10:48:7c:72:30:a7:23:
bb:d4:7a:8b:f9:ca:4e:e5:af:8f:31:2e:3f:0b:96:9b:86:a9:
99:54:be:eb:09:f1:eb:a7:5a:8f:5d:3b:8d:77:aa:61:b1:1c:
8d:da:f3:f5:62:df:f4:cd:1c:11:61:8e:28:a5:dc:b9:be:0f:
8f:98:af:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:39:09 2025 by rpki-client