Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ff2de3e-0352-3f14-a3b6-442216b882d0.roa
File: 3ff2de3e-0352-3f14-a3b6-442216b882d0.roa (raw, json)
Hash identifier: CnDRt1BNYx2X8kUDqb53OMND0FewRn37Gp273wLOsX0=
Subject key identifier: 34:79:59:9B:85:83:71:65:F6:2D:55:9A:16:E6:A6:62:4D:2A:67:1C
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848530B0019F12983F152413740
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ff2de3e-0352-3f14-a3b6-442216b882d0.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 396559
IP address blocks: 2001:502:cbe4::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0b:00:19:f1:29:83:f1:52:41:37:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=12c95a0a-718a-4f14-a09d-8daf4d3583de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ef:92:69:ed:07:e3:ec:42:04:23:f7:08:48:
0f:d8:e5:46:b6:51:1f:eb:b2:d2:e3:7a:56:23:f8:
29:ea:87:22:26:ab:53:98:46:dd:d6:31:5f:50:8e:
7d:ba:46:e3:df:42:94:73:2d:1b:c8:9c:8a:79:4e:
0f:f5:1c:e3:69:de:b8:fe:98:b7:97:4a:8d:55:b6:
51:8e:43:0f:8d:ca:73:76:cf:a7:1d:86:55:b6:81:
28:ff:62:e9:73:72:9c:c0:c9:93:c5:31:02:b1:53:
93:73:d9:d9:2b:a2:ab:d4:79:8c:2d:93:44:17:44:
d8:b2:8b:a3:fa:12:4d:29:b3:d3:e6:b8:9f:f7:4f:
e2:ae:ef:52:92:9d:ee:72:b3:e7:4d:62:76:9f:1b:
38:89:26:d1:aa:3c:95:56:64:01:ee:cd:c5:97:f9:
f1:b7:7c:d8:c2:de:0d:ac:22:c6:21:9f:f8:18:41:
45:f3:1b:67:07:54:fd:fa:cf:ce:e8:71:37:aa:2b:
53:71:38:73:94:ea:18:72:30:2c:b4:ae:87:e8:ea:
c1:7f:a1:eb:9b:c0:8e:6e:54:51:0c:bd:e9:2c:44:
cb:e2:bb:6e:af:53:c5:15:7f:a0:07:7d:58:81:91:
3c:b7:21:63:25:cf:8b:2e:c6:41:95:77:82:30:01:
b6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:79:59:9B:85:83:71:65:F6:2D:55:9A:16:E6:A6:62:4D:2A:67:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ff2de3e-0352-3f14-a3b6-442216b882d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:cbe4:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:14:35:9d:61:a4:e5:41:51:34:c1:30:ef:0f:5c:ba:11:71:
c9:bc:0e:ad:7a:c4:82:c3:a7:0e:8a:98:39:2f:a6:39:53:14:
73:ac:2c:14:b9:ea:9e:a3:ba:26:b5:92:36:1b:0d:1b:f9:c0:
a2:d8:0e:d6:66:de:8c:49:d0:4a:ef:78:52:62:24:a1:a9:0a:
8e:9e:60:64:5c:35:1e:f0:d6:61:1f:15:21:5f:9c:43:d7:62:
89:d8:78:e0:58:dd:d3:41:28:72:84:2d:98:29:a8:40:c8:ca:
10:37:de:68:73:f8:43:59:51:c6:e0:b9:d6:07:83:fa:10:57:
63:82:f0:fc:6a:b4:fe:45:27:24:d4:f6:90:22:16:0d:b3:71:
7a:69:bf:0b:52:5e:2a:4a:de:0c:9d:4f:db:6b:eb:f4:6f:dc:
b0:54:55:1d:2d:3e:14:53:42:ff:c1:96:27:32:8f:8b:8c:fe:
ed:06:8d:88:29:fd:d2:1c:8b:51:18:4c:ba:e7:d9:a7:2a:3d:
6c:70:8e:79:1a:93:6d:2a:00:c5:a1:b8:30:31:2b:66:77:0f:
a7:ea:b4:07:a1:cd:29:16:e1:65:45:8a:f7:c0:d3:1d:f8:10:
54:8c:41:98:7e:32:3d:b7:f9:41:ae:72:34:cc:0a:3f:c9:20:
5f:04:25:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:58:04 2025 by rpki-client