Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a88b321-e458-3859-b51a-662aa9fe79f6.roa
File: 3a88b321-e458-3859-b51a-662aa9fe79f6.roa (raw, json)
Hash identifier: RIegJ/B2BWPcw+vpxDEFTIyfB63hO4yPbvAzIyKQNss=
Subject key identifier: 5E:4C:E8:57:54:BF:0B:F6:36:23:B9:16:1B:31:23:20:E4:58:8C:94
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858488DAB76CCDD7689229DDA4700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a88b321-e458-3859-b51a-662aa9fe79f6.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 396551
IP address blocks: 2001:500:7967::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:76:cc:dd:76:89:22:9d:da:47:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=63472049-22b8-4b0b-be78-2b48d1f46cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:72:80:77:c3:a7:d5:b6:5f:46:c0:a2:7d:1e:
a2:45:84:0f:f9:89:98:1b:31:ba:51:26:77:48:ae:
bb:92:09:bf:bf:ca:76:36:e6:ee:37:23:14:d8:5d:
67:0f:3c:5f:d9:15:9c:2a:28:59:5b:e8:e7:6c:1d:
01:c6:6e:7a:de:c0:f6:9c:6a:f4:47:21:10:04:05:
51:67:18:5d:e1:45:76:a9:ea:41:45:27:22:9f:0a:
11:30:18:66:1c:d9:f9:2b:1c:49:f8:64:30:c1:4e:
3f:b5:43:e4:28:29:83:a2:b3:07:b1:cb:6e:5d:80:
d3:6b:34:94:e8:6b:20:e7:7e:bb:e0:4d:d7:0b:3e:
61:59:8d:cb:24:79:ab:4d:7f:4d:d5:e3:6b:03:ac:
28:d4:2b:20:e8:32:3f:7d:d5:93:e4:50:e1:61:04:
84:d5:f1:bc:54:ac:47:05:ab:da:99:77:76:f6:96:
09:6f:06:55:3e:8c:4f:be:1a:08:5b:0f:23:0c:88:
3b:d5:85:5e:f8:1a:fc:ac:9e:59:28:4d:33:de:76:
9f:e0:3c:70:23:ee:a1:0d:f6:90:f5:05:16:93:37:
77:2b:b5:a1:9e:d4:5b:80:0f:ec:18:23:bc:25:b1:
f0:1b:26:93:4e:ac:f9:1e:e6:4c:39:37:0b:cd:c7:
87:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:4C:E8:57:54:BF:0B:F6:36:23:B9:16:1B:31:23:20:E4:58:8C:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a88b321-e458-3859-b51a-662aa9fe79f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:7967:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:63:94:0c:be:e5:19:fa:60:a8:ed:41:76:da:65:2e:a0:58:
02:35:60:9a:a0:e9:9a:44:5e:56:64:48:b4:ba:a8:42:8a:5c:
38:15:b8:cb:be:4e:76:3c:30:15:e2:38:41:23:eb:f6:25:ea:
b7:0d:92:39:39:f8:b7:1c:44:f8:68:f6:ce:bd:de:00:47:81:
9f:e0:84:09:4b:f9:e8:1e:f1:07:7e:05:d7:b5:05:f1:c7:87:
7d:37:7c:48:70:16:0d:1f:bd:79:f1:c9:52:54:d5:ce:e9:99:
ef:60:aa:24:4a:34:61:0a:44:8d:9f:cf:2d:cc:e2:ea:3b:a5:
64:2a:c9:f6:c1:88:34:bf:d6:3e:1e:2a:73:9d:d9:f1:9a:63:
26:3e:ed:1a:4e:56:12:c7:c4:65:15:00:fc:0c:7b:cc:6c:22:
ea:0d:bf:d1:d4:ac:3b:b3:38:89:23:3b:4b:3c:6b:84:6b:05:
18:6d:f6:d9:4f:48:94:3d:4b:8a:cd:3f:15:3b:96:bd:7d:3b:
96:11:e7:88:f8:3d:f0:ea:d9:30:c2:59:ec:66:fc:27:77:3a:
15:1d:e8:7c:a7:90:a9:f7:a9:95:9f:95:db:bb:ca:b9:39:52:
7a:5c:5b:00:e5:39:f8:41:9e:71:4f:bf:89:72:5b:21:3c:55:
8f:f1:a1:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:00:07 2025 by rpki-client