Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/34714fc8-0d18-3e30-b35c-efaa91f26c16.roa
File: 34714fc8-0d18-3e30-b35c-efaa91f26c16.roa (raw, json)
Hash identifier: rxYm13e2Ge+fHk4Qjsp7fOX1Lv8+QHJ7ZD0NxkMP7nQ=
Subject key identifier: 4F:8C:60:94:16:7F:8D:8B:28:0C:97:13:A8:C8:BF:09:9E:FE:99:DA
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584842434B0D25F559E773D84100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/34714fc8-0d18-3e30-b35c-efaa91f26c16.roa
Signing time: Thu 19 Dec 2024 13:45:50 +0000
ROA not before: Thu 19 Dec 2024 13:45:50 +0000
ROA not after: Wed 19 Mar 2025 12:45:50 +0000
asID: 211369
IP address blocks: 2001:500:126::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:43:4b:0d:25:f5:59:e7:73:d8:41:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 13:45:50 2024 GMT
Not After : Mar 19 12:45:50 2025 GMT
Subject: CN=a5dddd76-89b5-4dd4-a18d-52d8e451102e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3e:95:17:45:4b:7d:ef:ef:c6:4d:36:a9:60:
bf:17:48:18:40:9f:b1:7a:b6:28:62:89:fd:0c:64:
4d:ac:db:01:b1:08:25:3c:70:41:da:95:06:b6:ab:
d2:86:a6:a0:10:d1:65:28:27:85:e4:e2:0b:aa:5d:
0c:fc:6d:64:f1:83:f1:79:ab:fe:80:b0:2f:84:63:
93:ac:64:0c:12:49:a2:cb:f0:f3:09:5e:e8:2e:84:
0c:2e:fc:9e:f8:cc:61:e8:cc:26:f7:59:87:a6:85:
38:aa:44:03:54:07:d2:12:b4:38:b4:ef:e5:22:22:
cf:97:ea:fa:a3:a8:1b:2a:2a:bd:8d:ad:82:50:1c:
02:bb:b3:a2:28:3e:91:d6:7e:41:c0:21:8c:68:80:
50:a8:2b:13:99:33:1c:e8:b4:98:94:32:55:a8:91:
65:d9:81:46:6a:14:a3:dc:5e:b9:aa:e8:c7:c5:95:
28:14:e9:c6:5d:c3:49:48:ae:08:ec:e9:bf:67:af:
bc:45:40:bd:ea:4b:f0:36:ea:b3:51:ca:4c:84:98:
e2:0a:52:54:63:f7:ae:05:d1:5f:31:37:f9:3a:a6:
b9:a9:83:37:b6:e0:e4:f6:3c:f1:34:d9:1f:fe:f1:
ec:c7:73:7d:4a:f4:34:c9:61:ac:5c:cb:33:fd:44:
c8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:8C:60:94:16:7F:8D:8B:28:0C:97:13:A8:C8:BF:09:9E:FE:99:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/34714fc8-0d18-3e30-b35c-efaa91f26c16.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:126:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:86:49:ba:80:89:5f:3e:16:34:ed:20:8a:8a:06:e6:5a:f6:
01:b4:1c:8a:d2:d4:df:98:55:ad:f0:84:83:63:ff:48:e3:79:
58:d1:d3:f7:b7:73:66:ad:3b:bd:93:3c:e3:55:61:fe:bb:12:
c0:0a:7c:ef:44:57:d9:bc:03:6f:48:ed:ec:a8:91:84:85:ee:
20:a6:d5:7f:35:1c:ce:e5:4c:e5:b4:76:a2:59:b1:dc:cc:09:
61:4c:fe:46:7f:17:ec:3a:f4:c1:9d:4e:4c:13:2d:cc:9d:7e:
c8:81:ee:6b:93:b6:79:6a:df:4e:d5:b6:d1:7a:6a:75:9b:b4:
e4:fd:6e:86:bb:0f:34:3c:c6:23:4b:6b:7f:79:ac:66:4b:23:
09:33:ed:26:93:e8:90:5e:2c:2c:46:02:35:f1:fe:43:7c:61:
d8:9a:fd:b9:1d:3f:da:f1:76:86:3d:32:1f:33:f2:fe:53:b1:
f5:bb:59:fa:05:c3:38:de:b0:4e:2b:6a:6b:a0:84:ae:45:06:
d8:03:d4:39:ab:a8:f7:61:10:d3:7b:43:c3:aa:f7:a6:d7:34:
e8:d1:88:43:1e:29:ed:c2:52:5b:66:98:67:de:e5:f0:f5:6a:
c2:10:78:be:1d:48:6f:1f:0d:6d:ed:eb:81:7d:e2:94:ef:ed:
d9:eb:9c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 01:40:25 2025 by rpki-client