Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c60fb76-4cd9-3363-a326-df8d4337d23f.roa
File: 3c60fb76-4cd9-3363-a326-df8d4337d23f.roa (raw, json)
Hash identifier: iIJY51SdTJa0A9Dhsl35aQPAjw+Lk9+ZoCXg+xt+hBg=
Subject key identifier: A9:DF:13:56:26:E0:C2:F8:B4:A5:CF:34:33:B9:1E:F1:50:FA:54:3D
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584842433CAAA4C5B4E3C61D2A00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c60fb76-4cd9-3363-a326-df8d4337d23f.roa
Signing time: Thu 19 Dec 2024 13:45:43 +0000
ROA not before: Thu 19 Dec 2024 13:45:43 +0000
ROA not after: Wed 19 Mar 2025 12:45:43 +0000
asID: 396587
IP address blocks: 2001:500:127::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:43:3c:aa:a4:c5:b4:e3:c6:1d:2a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 13:45:43 2024 GMT
Not After : Mar 19 12:45:43 2025 GMT
Subject: CN=94d40606-3f9b-4db2-ab02-5f404aee94cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f0:3f:96:5e:1f:ce:cb:00:82:c6:4c:11:a8:
3b:2b:0b:0f:eb:6c:fe:f8:0c:0c:6c:e2:48:f9:61:
75:ac:4f:bc:77:16:06:b9:e9:09:f4:d5:71:ff:a5:
2c:52:ab:1d:38:12:00:80:11:79:55:5c:25:1d:da:
36:57:4c:17:58:06:bb:be:a8:bf:59:97:8c:bf:b2:
46:c5:7f:fe:9e:8d:f9:7b:80:c2:fd:e7:1a:81:54:
1d:e1:6c:1d:9d:c5:a6:0a:e4:c5:07:8a:f7:87:22:
65:19:3a:92:16:76:c6:d2:b5:d4:14:41:05:38:64:
d5:0f:94:35:b7:57:ec:7e:71:0e:dc:fa:0e:65:76:
8f:e3:e8:68:32:07:e3:a6:bf:67:07:ea:e9:db:00:
8a:35:b2:68:07:26:d2:a3:f5:c7:6e:ac:08:21:dc:
ab:54:36:98:da:2b:ac:a4:34:a3:03:58:64:80:a3:
b7:82:5b:60:79:2e:04:a2:52:73:fe:7d:d4:fb:a4:
65:4c:15:a7:46:1e:f9:ac:32:82:22:ff:52:5f:49:
12:83:b1:77:64:a4:36:18:aa:fd:37:26:fd:cf:58:
c2:d8:d2:0f:b2:10:4e:60:6c:59:b5:cf:46:46:91:
5d:c4:6d:fe:8e:d6:59:1d:e5:a2:5e:b7:59:67:b5:
e9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:DF:13:56:26:E0:C2:F8:B4:A5:CF:34:33:B9:1E:F1:50:FA:54:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c60fb76-4cd9-3363-a326-df8d4337d23f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:127:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:d5:ba:98:98:87:28:06:04:8e:02:2b:04:9a:51:5a:5a:08:
fd:2d:ed:b5:dc:0c:e2:8c:9e:fd:68:ef:54:2e:e6:38:3b:54:
9c:3c:54:04:ed:c6:c9:bb:88:46:1e:7a:32:b1:66:d5:4b:38:
a5:0c:60:87:8f:83:33:b0:a6:4d:ca:d9:6c:b7:6a:9a:1b:e9:
60:5e:21:d9:65:f7:d0:64:35:d0:88:23:9a:59:11:ac:8a:92:
6b:86:f3:cf:e7:23:93:db:75:c7:98:10:2c:79:b5:9f:a1:5c:
96:c6:0b:1f:c8:b1:86:89:49:26:eb:82:f1:e4:fa:af:1e:8f:
2f:66:26:da:fb:2d:91:86:ef:cb:73:e2:ce:e8:55:05:e3:eb:
bd:40:d0:b8:78:eb:db:7f:d7:4e:00:d3:33:21:47:54:3b:e6:
23:3b:ae:12:07:6b:ed:35:17:24:8d:ea:53:3c:0d:4a:f7:8c:
83:c5:4c:77:cf:81:a9:96:72:20:c2:5a:9f:45:a4:d2:b8:23:
71:de:8d:9d:4c:d6:b0:13:59:08:5a:43:5c:fb:a5:b1:2b:84:
54:b3:5b:cb:3d:2e:ec:77:4d:05:4b:1e:70:c6:6d:25:11:41:
28:62:87:93:4d:b3:c9:e1:33:f7:30:86:11:3c:07:de:2a:06:
b2:34:bb:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:54:58 2025 by rpki-client