Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ffdb7ee-6ae7-30c9-8cef-0887e93d82ce.roa
File: 3ffdb7ee-6ae7-30c9-8cef-0887e93d82ce.roa (raw, json)
Hash identifier: /ixlxPvZ2TIcsYRuHs1ev6V8+y/WSuSnzp2K/KWzhtQ=
Subject key identifier: 8D:90:E3:C9:31:66:64:9A:03:44:A4:11:EB:DB:A4:90:E3:11:95:8E
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848451577394AD13FEB731E9800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ffdb7ee-6ae7-30c9-8cef-0887e93d82ce.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 36625
IP address blocks: 2001:500:122::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:77:39:4a:d1:3f:eb:73:1e:98:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=85121bc7-0a00-40a5-a75a-e89dbecb584b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8d:36:33:5e:10:ce:eb:b8:d1:e6:d0:36:4b:
46:54:99:29:46:d0:38:5e:37:9b:fa:10:42:cc:20:
94:5a:bf:30:9c:30:bc:73:7a:9a:87:e2:ca:df:51:
0f:ed:3d:9b:fc:e3:d7:f3:44:77:2b:83:18:d3:26:
b1:cf:2d:e3:33:f9:8c:a6:83:01:23:c1:a0:05:bf:
8e:64:8d:3b:25:57:17:37:a8:8c:7f:c1:41:20:15:
2d:50:7e:4a:02:b7:4a:a7:07:a7:5d:da:30:93:26:
7e:a6:49:f7:4f:8b:96:3a:09:02:61:30:bf:99:5c:
8a:9b:31:17:b7:c8:7b:32:82:71:82:58:bf:da:3e:
2e:d2:58:24:7a:f7:61:39:2c:f2:cd:36:15:ce:c5:
09:7d:0c:f6:80:ac:7d:40:9b:22:97:f1:97:6d:4d:
7d:81:ee:b6:2f:ac:eb:ee:03:8f:a3:ed:8f:44:cb:
b3:24:1a:85:07:e9:d9:1d:45:26:c9:14:25:1e:5e:
10:b0:02:6a:ae:13:24:d5:a2:1a:d6:0d:51:7e:bd:
9c:77:2c:c4:ba:1d:78:ee:50:45:63:b1:38:13:e3:
a3:4a:21:88:d0:16:78:ce:a7:3f:f3:07:c4:68:64:
72:8d:25:ba:1c:6f:d2:ad:33:9c:fa:e2:d5:aa:37:
36:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:90:E3:C9:31:66:64:9A:03:44:A4:11:EB:DB:A4:90:E3:11:95:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ffdb7ee-6ae7-30c9-8cef-0887e93d82ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:122:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b6:d2:59:45:44:f4:db:0b:a9:a9:d5:cd:26:3f:60:01:7a:40:
ea:62:3f:63:ab:f7:d7:d7:26:05:63:bf:bd:34:d9:0f:44:75:
8a:15:17:37:8a:ab:f5:6b:0a:88:9a:14:41:dc:50:53:1e:0b:
88:d8:dc:a6:09:6b:7a:6d:49:29:0f:78:5c:50:8a:16:d5:93:
4a:b6:10:f5:77:cd:9b:47:d5:c0:f3:35:a5:f9:90:c5:a6:4b:
83:ae:45:c9:cd:5b:50:f9:53:b7:af:00:4b:1f:81:fa:cd:57:
03:96:9f:4d:48:87:9d:45:07:9d:47:c2:0f:a8:97:2d:0a:3d:
5e:7b:43:7d:69:d9:fe:5b:2e:61:a2:f2:b4:d8:c9:c6:81:1d:
2e:13:e4:b8:50:65:79:4c:30:e4:f4:61:15:88:27:50:1a:7d:
8c:dc:07:98:54:99:cc:ac:0f:7a:c2:80:73:21:42:a3:f0:8a:
63:1c:00:75:aa:7e:05:b7:30:c5:74:19:cb:57:35:99:80:64:
c7:1c:46:53:9f:b3:0f:b4:7f:4d:8f:3a:b6:8f:65:e0:67:47:
fe:b5:5f:6f:47:42:c3:c4:56:66:17:8e:ed:37:34:33:a9:3c:
f4:70:a4:89:01:c6:2a:ab:31:ee:cf:6f:4b:98:a1:a1:2c:a4:
61:49:55:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:10:15 2025 by rpki-client