Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a38d017-41d5-3b4d-90ac-33ea69bfc92c.roa
File: 3a38d017-41d5-3b4d-90ac-33ea69bfc92c.roa (raw, json)
Hash identifier: QWJI4dsj3qz1HtC96YCCoP0exgJ8TGVH4dImpNG+zq4=
Subject key identifier: 73:A7:47:CA:A6:0F:50:09:15:1D:CA:A8:60:12:1E:78:6F:66:0C:76
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858484AAAD9CE6FF95EA73621F800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a38d017-41d5-3b4d-90ac-33ea69bfc92c.roa
Signing time: Sun 22 Dec 2024 14:00:51 +0000
ROA not before: Sun 22 Dec 2024 14:00:51 +0000
ROA not after: Sat 22 Mar 2025 13:00:51 +0000
asID: 396587
IP address blocks: 2001:500:121::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4a:aa:d9:ce:6f:f9:5e:a7:36:21:f8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 22 14:00:51 2024 GMT
Not After : Mar 22 13:00:51 2025 GMT
Subject: CN=9230b431-4c10-4c55-8609-d9a0b1fd2889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d0:5d:10:3d:73:af:6d:95:41:63:5c:3e:89:
78:55:61:55:3d:21:4b:dc:23:b8:7d:0c:a6:97:02:
44:33:53:5d:f0:64:ef:b2:f8:47:87:0b:02:03:35:
db:47:a6:65:c7:d8:ce:e1:d4:eb:7b:52:98:5d:ca:
fd:cb:1c:2e:e5:bd:20:28:18:c8:25:75:2d:44:09:
dc:fa:66:c4:ba:fd:f4:a0:67:64:25:93:a8:13:88:
65:59:4e:a5:d0:a7:e3:e9:97:95:13:69:5d:7b:b0:
f4:19:f5:bc:4d:b9:63:94:51:79:2b:91:cb:dc:da:
19:7a:1f:e2:00:de:ee:da:74:9a:ab:53:63:59:b9:
09:5a:fd:3e:5f:2d:5e:45:d5:dd:31:7a:b9:52:fd:
b3:37:d7:f1:59:a1:b0:bb:fc:56:40:3b:36:8e:c5:
59:21:c7:52:b4:f1:5c:cb:8f:8c:37:ca:77:26:9b:
c0:23:08:2c:e2:80:bc:53:44:71:c0:22:a2:30:8e:
22:8f:25:fc:65:9c:4a:e8:f0:3f:80:f3:42:58:0e:
4a:ab:25:73:50:bd:17:11:d4:19:cf:f1:84:47:b2:
c7:ea:17:96:b1:95:c4:72:b9:62:fc:ad:a9:a7:18:
ce:96:ae:2f:7a:89:3a:48:1b:27:b8:f2:89:57:ef:
f3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A7:47:CA:A6:0F:50:09:15:1D:CA:A8:60:12:1E:78:6F:66:0C:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a38d017-41d5-3b4d-90ac-33ea69bfc92c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:121:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:a9:62:cc:fd:a5:9e:2f:75:3b:f5:b3:2b:64:46:56:47:c0:
b8:44:03:21:d1:78:31:3c:32:a4:b3:6a:d6:9a:25:5b:52:7a:
05:f5:16:f7:0c:c2:71:e2:51:29:7f:70:c6:bd:93:d1:33:92:
63:d0:ad:a8:8c:fa:43:a9:80:24:1a:3c:b7:68:9d:da:45:cf:
0a:ef:97:28:10:0c:d9:b6:e3:d6:ea:3e:46:f1:36:06:12:c8:
20:85:c2:eb:f8:db:c2:8b:05:30:86:9c:27:21:aa:7f:18:e4:
ee:f5:20:6a:b9:eb:54:0c:dc:e5:e7:96:49:e8:f0:69:45:e6:
ec:f6:20:60:68:f7:4e:25:dc:29:d4:fa:18:5c:87:ae:58:5e:
51:bd:a9:ff:7f:4a:c8:b3:b1:db:05:a8:70:b6:bd:79:ba:c9:
a5:10:f8:c6:ff:90:b7:88:91:f0:f9:49:76:29:8e:2d:5d:18:
75:53:7d:2d:5f:2b:dd:09:32:dd:d4:fa:76:09:a4:91:53:b0:
38:19:65:7e:a0:0e:8c:5f:04:2b:44:1b:76:17:de:97:37:e0:
b2:89:6c:df:b0:36:83:c0:55:08:a0:d9:5e:e9:50:e6:7c:56:
ca:28:99:51:f4:e4:c4:37:99:e0:b2:a1:d2:6c:96:5d:ad:90:
68:63:37:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:53:35 2025 by rpki-client