Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3fc0b5e2-2efe-3f6d-a351-f6925eae79cd.roa
File: 3fc0b5e2-2efe-3f6d-a351-f6925eae79cd.roa (raw, json)
Hash identifier: KaAreY7NPtDbXgY7XNzx9t0YqbsX7bPLck2GMQrfptU=
Subject key identifier: BF:98:0B:C3:44:37:06:9C:52:1D:9E:06:69:16:68:7F:88:A6:A0:1F
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848906AB6C7D494BF62A8481200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3fc0b5e2-2efe-3f6d-a351-f6925eae79cd.roa
Signing time: Thu 16 Jan 2025 13:38:18 +0000
ROA not before: Thu 16 Jan 2025 13:38:18 +0000
ROA not after: Wed 16 Apr 2025 12:38:18 +0000
asID: 397203
IP address blocks: 2001:502:1ca1::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:6a:b6:c7:d4:94:bf:62:a8:48:12:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 16 13:38:18 2025 GMT
Not After : Apr 16 12:38:18 2025 GMT
Subject: CN=c429ff15-d79a-409a-b985-6d46edf32bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a0:41:78:eb:50:fb:57:09:5f:8f:8a:81:d6:
f9:c3:15:45:1d:46:db:a5:bc:3a:a4:4c:3a:96:db:
3d:4f:49:8e:72:6a:6c:32:3d:5f:3f:b4:1c:de:4b:
d9:e0:18:e3:e0:ef:4f:51:5f:b6:64:fa:ff:86:d2:
0f:e5:b7:ac:4f:f6:fb:04:4a:d9:7e:44:b0:51:d6:
05:3a:0c:22:e7:94:f6:37:7b:a8:64:29:0f:a6:e2:
fd:33:1c:64:e5:7a:12:cf:ef:a3:4b:a1:81:62:db:
11:fb:7c:e9:07:08:1c:76:70:a8:ba:15:5d:e5:2b:
11:71:61:53:82:c3:cd:8e:0f:87:ad:80:7f:85:af:
8e:a2:7b:ed:44:40:68:b0:bf:df:97:a4:f4:82:ac:
bb:fd:d3:8b:0d:1a:75:34:0e:06:39:57:ac:01:c3:
ec:d2:74:3d:4d:71:03:9b:eb:3f:16:37:51:d4:5c:
95:9f:a9:82:4d:89:e0:21:ad:1e:7f:cf:a1:4e:c7:
94:d6:23:1c:19:5d:73:98:1e:8b:0c:bc:2c:bd:2c:
a3:0a:7f:27:87:d2:a8:04:16:83:a3:90:e3:59:15:
e5:23:83:ee:9f:af:60:f6:9a:19:e1:5e:1f:8d:ab:
48:82:96:29:80:fb:1a:03:e6:85:02:3d:c1:8b:a7:
a6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:98:0B:C3:44:37:06:9C:52:1D:9E:06:69:16:68:7F:88:A6:A0:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3fc0b5e2-2efe-3f6d-a351-f6925eae79cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:1ca1:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:d1:d1:41:78:a1:7e:ff:d0:be:9d:e5:ff:c3:9d:d8:f0:f4:
ad:ef:f7:1c:78:35:69:3f:cb:0a:4c:bc:a4:91:68:7a:58:13:
3c:98:16:48:78:bd:d9:67:0f:67:e3:84:ff:33:f0:a5:7d:1a:
28:e5:93:59:9a:a6:75:41:20:08:be:57:ea:e9:e5:f7:79:b7:
4e:a0:86:a3:fd:dc:8f:80:d9:80:7f:86:0a:e3:0f:37:f0:82:
8c:81:e9:85:85:02:b4:33:24:d0:05:02:8a:ed:66:83:1b:04:
0c:92:fa:8d:bf:24:26:e4:d8:db:72:44:3f:81:2d:05:35:0d:
35:c1:28:35:96:97:36:44:9d:ed:9f:98:13:d8:f1:40:7b:58:
3f:2a:5c:7c:a8:0c:64:bb:cf:88:e6:03:7c:d1:8c:e1:c3:54:
8a:51:85:af:e9:06:19:e0:28:ac:13:e7:74:5a:12:5a:b1:ba:
f7:f8:d4:ca:a4:53:b7:e1:d1:04:f9:0f:96:01:6b:1b:9e:e3:
a9:04:32:a9:01:b5:10:47:fa:d3:a6:b2:d5:78:13:37:56:2c:
a8:3a:ab:da:fb:a5:c0:2e:13:3d:9c:de:f4:33:17:c7:6c:77:
2e:56:53:a7:a5:4a:89:5d:c4:a1:b7:50:a6:d0:9e:91:e0:4f:
b0:80:6a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:57:31 2025 by rpki-client