Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a668d2e-a72e-348a-8c94-c35024f1f175.roa
File: 3a668d2e-a72e-348a-8c94-c35024f1f175.roa (raw, json)
Hash identifier: fi0wKlRqhsukwF7HevRr++Wvf/IoySxmL82RP34+RlQ=
Subject key identifier: 35:20:AF:BF:C9:EC:9C:4C:80:3B:F4:3D:4C:5D:5C:72:A7:38:4B:58
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489BA0B8A3AF519B44D9EF0100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a668d2e-a72e-348a-8c94-c35024f1f175.roa
Signing time: Mon 20 Jan 2025 14:00:51 +0000
ROA not before: Mon 20 Jan 2025 14:00:51 +0000
ROA not after: Sun 20 Apr 2025 13:00:51 +0000
asID: 396559
IP address blocks: 2001:500:30ff::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9b:a0:b8:a3:af:51:9b:44:d9:ef:01:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 14:00:51 2025 GMT
Not After : Apr 20 13:00:51 2025 GMT
Subject: CN=51537aac-ba36-4025-8c20-a8be78885153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:38:5d:a3:97:74:88:65:37:5f:e9:72:b2:66:
6e:ab:6c:80:91:11:54:d1:e9:5d:8b:48:27:28:33:
d9:7c:6d:bd:4b:d8:f6:eb:73:82:fc:db:b1:df:b5:
f2:46:de:e6:94:64:7f:6b:69:cc:09:60:71:b3:79:
73:22:82:36:28:66:e2:81:76:a6:ab:5f:e0:aa:8d:
98:2d:46:de:66:9a:86:2d:39:96:4c:77:e6:f2:c3:
05:a8:e8:1c:0f:9c:14:7d:8e:6b:fb:b1:2b:10:cb:
26:b2:b5:1a:9f:b1:dc:aa:d0:73:00:2e:f0:0f:c0:
fe:51:30:5c:10:c9:29:c1:cd:4c:14:cb:9f:53:72:
b6:5d:2d:4b:13:23:fa:3f:21:d9:82:8a:10:f7:cc:
03:f9:1c:f7:1a:d5:41:b1:b7:83:a0:8e:3c:77:7b:
e7:72:2c:e2:d2:d6:7c:eb:16:53:ff:0e:6f:7d:82:
39:94:83:2d:46:89:9e:be:ae:30:a3:b0:65:2b:56:
5c:36:88:dc:94:88:95:6d:54:66:3f:fe:3e:91:27:
e1:3b:cc:ee:2f:35:33:1f:ec:3a:26:4e:1c:06:54:
03:80:ee:08:01:29:06:4a:ca:7f:29:64:5f:98:33:
67:dd:4b:95:95:15:28:f6:74:4d:86:b8:98:99:c7:
15:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:20:AF:BF:C9:EC:9C:4C:80:3B:F4:3D:4C:5D:5C:72:A7:38:4B:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a668d2e-a72e-348a-8c94-c35024f1f175.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:30ff:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:99:33:c1:3d:69:9a:3e:c7:88:55:e3:79:95:31:5e:20:97:
00:2f:6a:c5:f8:d8:f7:ee:31:ef:7c:21:72:be:28:21:2f:46:
09:5b:77:c9:b2:b4:72:13:9c:33:dc:c4:c2:f9:76:a2:6f:2f:
1c:0c:08:bb:4f:6a:31:3d:b1:d0:b3:ec:a4:e6:c3:e6:89:27:
61:57:68:c3:c6:30:a7:35:ad:66:99:5b:5a:c1:af:94:1f:16:
37:cd:c0:a9:c0:8c:76:79:d3:51:ae:22:dc:34:96:6b:73:54:
fe:32:c9:99:07:5d:99:0c:b2:50:24:62:70:56:c9:99:d6:38:
ea:32:2b:df:cc:90:68:f8:e6:b9:e9:37:51:db:4a:9b:20:da:
99:4d:69:82:ac:7b:93:71:85:21:c8:d8:f6:17:95:b5:5a:89:
04:f9:95:e6:ee:1d:a7:1f:a6:aa:47:88:d7:86:ba:d9:02:99:
a2:ed:48:ad:7c:7b:88:10:79:e4:45:63:87:e5:6e:30:96:5e:
9f:5b:32:68:d7:cc:4a:8f:1f:af:db:0b:c5:21:b0:04:96:0a:
0b:65:40:fc:89:18:b3:be:14:80:e1:6f:4c:df:16:17:12:46:
11:5e:6b:64:13:9e:41:d5:01:3b:01:e3:6f:25:90:d0:9b:cf:
94:fd:62:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:59:52 2025 by rpki-client