Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/407bf5f1-b7b5-3a6b-85fb-1bd641fe077b.roa
File: 407bf5f1-b7b5-3a6b-85fb-1bd641fe077b.roa (raw, json)
Hash identifier: +O9zKdkTdcSjrj0e/wLJgn8koCwkyJhDkISI1Rw4fUk=
Subject key identifier: A2:B0:89:07:57:AE:20:87:47:A0:33:FC:A7:8A:A8:90:2F:F1:56:F8
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584845157B383551A094713CD6E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/407bf5f1-b7b5-3a6b-85fb-1bd641fe077b.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 396600
IP address blocks: 2001:500:122::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:7b:38:35:51:a0:94:71:3c:d6:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=23415277-d8aa-4607-829a-5598a33de113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:bf:23:b4:c3:78:a6:2d:be:21:84:02:31:7a:
2a:e6:b7:b3:d0:57:67:42:78:e7:d0:4a:52:dd:e0:
88:a7:1f:a3:65:8f:4c:86:91:bf:87:ac:ac:15:a9:
bc:34:96:bf:f1:b9:35:70:b6:1b:d7:81:48:95:41:
9a:ab:bd:b5:f9:37:94:e0:c3:4e:01:9e:ea:8a:27:
0f:1e:ca:52:00:62:f2:e3:1d:56:88:03:06:90:23:
65:56:74:de:0b:ee:86:d7:b4:e6:19:bb:3c:0f:a2:
8e:84:ce:5a:ae:21:8a:59:3e:82:d9:ba:e7:8e:bd:
7c:b9:3d:b3:ae:8d:0d:81:ef:09:b1:49:3a:6b:28:
20:ee:0f:6a:b7:1e:37:2a:26:25:02:04:39:44:3c:
25:10:2e:7e:46:d1:27:f2:2e:8e:d2:5e:e2:19:f0:
d9:41:bd:e8:fa:c4:35:cc:7a:e8:77:81:94:91:b7:
89:48:76:c8:2a:ac:c0:44:53:9a:1c:62:32:84:dd:
54:76:46:21:55:53:da:32:3b:91:66:bf:1a:55:ea:
78:97:91:49:0c:5d:1e:34:cd:8e:6e:6a:ec:2a:b6:
86:62:e2:49:2e:aa:07:f4:02:89:e3:0c:59:4f:f2:
9f:d8:52:94:94:7c:59:b6:c7:82:ae:0b:01:f5:fc:
0d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B0:89:07:57:AE:20:87:47:A0:33:FC:A7:8A:A8:90:2F:F1:56:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/407bf5f1-b7b5-3a6b-85fb-1bd641fe077b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:122:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:c2:a0:ed:a8:ee:d5:8e:6b:ad:a9:da:01:aa:63:cf:05:b1:
08:a3:e8:67:31:e6:4b:2d:ce:5a:5d:a4:ff:84:b1:02:15:9e:
2d:08:c4:e3:40:0a:61:a1:fa:e6:13:01:c8:e8:d5:a6:4a:00:
46:4a:ef:bd:d1:1a:03:92:fe:ab:7b:ae:28:1a:52:a9:38:fd:
cf:ed:30:7d:64:04:1f:3f:53:b4:bd:9e:72:95:57:f7:70:78:
12:1b:ab:00:6a:26:aa:89:56:a2:b1:d4:f7:57:92:f7:bc:a1:
f9:95:01:5e:64:25:1a:f5:7a:69:76:17:a2:b9:f8:33:67:62:
54:ef:f3:c1:37:dc:da:91:6a:7d:ab:6f:4c:d2:1c:27:96:60:
98:1e:f4:46:e8:bb:f5:6d:b3:70:bd:34:54:0f:97:82:ed:39:
9c:45:45:7f:f5:5b:d5:07:f6:09:f2:f6:a2:86:96:d3:a6:ba:
13:10:e3:e1:aa:75:bb:7f:b8:b9:55:cf:a1:03:00:22:d9:97:
26:f2:6f:3c:db:27:96:46:66:bf:6e:30:8e:cf:c8:c4:68:6d:
9f:ea:bd:3e:6f:96:bb:72:ed:b2:5f:57:1e:e8:22:a8:89:28:
d2:29:4b:1b:ae:ad:d0:34:99:fb:77:36:71:56:cd:c2:20:b9:
7e:4d:15:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:12:15 2025 by rpki-client