Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/41bfb778-f483-31db-b068-4bcf4fa3a4c0.roa
File: 41bfb778-f483-31db-b068-4bcf4fa3a4c0.roa (raw, json)
Hash identifier: WEspkInnPhTt/+BwTSk88QPvswNF5qG6Ch98H2XIS7w=
Subject key identifier: 4F:1A:B4:4D:43:E6:4A:2D:58:CF:3D:D8:72:D1:F8:F1:43:B7:36:8D
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584842432618F1448066A94B8100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/41bfb778-f483-31db-b068-4bcf4fa3a4c0.roa
Signing time: Thu 19 Dec 2024 13:45:32 +0000
ROA not before: Thu 19 Dec 2024 13:45:32 +0000
ROA not after: Wed 19 Mar 2025 12:45:32 +0000
asID: 396610
IP address blocks: 2001:500:124::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:43:26:18:f1:44:80:66:a9:4b:81:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 13:45:32 2024 GMT
Not After : Mar 19 12:45:32 2025 GMT
Subject: CN=1d1ca036-682a-495f-bb5f-c49182ab1458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:15:f6:83:c4:da:88:7f:4a:a2:cb:04:be:a3:
4d:8a:82:a9:6c:03:1e:b3:cf:59:99:95:36:36:8c:
72:e1:5d:fc:df:8e:82:1e:66:2e:a1:77:6f:55:a2:
90:9a:aa:81:1b:f5:89:42:88:50:b0:4c:bb:b7:c5:
5f:58:10:f0:d7:cd:8a:bf:32:1b:bc:bb:d1:6b:26:
60:e7:9f:de:9a:cb:a5:c0:06:21:8a:81:e7:dd:da:
bd:c5:02:48:c0:9b:a5:9a:c9:8d:37:1f:8d:3f:57:
22:73:87:2f:56:95:06:93:d8:fb:db:2d:a5:b1:8c:
e0:cb:9c:95:fa:9b:9e:2d:15:90:a3:a1:e4:ec:78:
5f:e0:9b:b9:83:50:0a:fe:23:af:12:0e:bf:f4:fb:
93:1a:13:d2:72:6e:30:01:eb:65:eb:2f:f4:e0:a9:
4f:8a:5e:7c:3f:fa:50:58:44:e8:ab:2d:df:bf:de:
52:31:d3:25:4d:c1:00:8a:d5:74:d8:d1:25:b7:ae:
32:54:b2:e4:70:5b:7d:0f:6a:2b:d7:34:41:07:fe:
8f:80:70:2a:bf:76:93:61:d5:c1:da:d1:ed:67:9f:
f9:1a:3d:89:5e:dc:50:b8:47:83:e8:51:08:4e:15:
8a:ab:b0:cd:8f:ef:96:df:7c:ba:e9:f7:3c:a3:45:
0c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:1A:B4:4D:43:E6:4A:2D:58:CF:3D:D8:72:D1:F8:F1:43:B7:36:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/41bfb778-f483-31db-b068-4bcf4fa3a4c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:124:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:69:dc:ef:99:11:4d:1d:77:0b:d9:bb:ba:c9:0b:cf:1f:c3:
19:ed:54:eb:c8:14:32:91:e6:8a:6f:cf:79:51:1d:c5:3b:21:
50:98:77:5c:58:03:42:1c:2f:db:a7:d8:cf:f8:bc:5d:9d:60:
fa:61:12:70:33:3a:a3:c0:4c:d7:05:cf:aa:93:e0:08:d2:f9:
3a:77:3a:b2:82:bc:c8:15:7b:15:55:54:d7:ec:17:73:ea:da:
97:22:27:41:e5:c5:00:0e:3d:d5:cb:d6:1a:45:9f:2e:d1:6d:
26:2b:e1:b6:5a:1c:35:08:b6:82:f7:47:a3:08:44:db:f9:26:
32:10:a7:32:7f:60:d4:8f:cd:6c:de:e4:6d:5b:b2:18:98:8d:
4b:75:79:05:03:50:ab:96:be:84:88:1f:fc:d4:39:65:d8:cf:
5d:72:c7:d4:c3:88:9d:b3:29:c2:d9:fc:2b:a5:b8:9e:89:73:
91:66:0a:76:a0:93:9d:a8:d9:0a:bf:37:fd:f0:a0:17:7a:c5:
2c:ac:4b:4e:0d:67:cf:7c:5f:4c:40:1b:37:13:dd:57:02:a6:
77:3d:66:fc:f9:33:16:de:f8:a1:7b:0f:ed:29:d2:06:7e:a1:
41:61:e1:88:f6:26:8e:02:c2:b4:5c:e5:3d:09:cb:a0:8a:43:
e3:78:86:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:52:56 2025 by rpki-client