Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/438564d8-02e9-343b-83ab-faed18d46a1c.roa
File: 438564d8-02e9-343b-83ab-faed18d46a1c.roa (raw, json)
Hash identifier: PwW0NvY+JlYzPmdwDt+2Dkd1OyZbEX6P2Y8Ui13wAks=
Subject key identifier: 6A:28:DF:04:36:E1:0B:9D:D4:80:1D:87:2F:95:33:58:08:48:A4:A0
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858484AAAD66409B68504E122D100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/438564d8-02e9-343b-83ab-faed18d46a1c.roa
Signing time: Sun 22 Dec 2024 14:00:51 +0000
ROA not before: Sun 22 Dec 2024 14:00:51 +0000
ROA not after: Sat 22 Mar 2025 13:00:51 +0000
asID: 20172
IP address blocks: 2001:500:121::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4a:aa:d6:64:09:b6:85:04:e1:22:d1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 22 14:00:51 2024 GMT
Not After : Mar 22 13:00:51 2025 GMT
Subject: CN=e109ac10-6f86-44f3-8c03-6963bd2892cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fc:a9:50:85:d0:8f:10:53:6c:71:f6:0a:00:
f9:a1:22:fd:44:d4:9c:26:5c:d5:42:53:2a:4f:a1:
3d:a9:47:06:63:3f:cf:8a:f8:fa:92:9d:eb:f5:21:
bb:22:71:45:6f:f0:39:63:22:06:71:5c:0d:31:05:
75:98:7d:0d:f1:82:da:bb:63:48:fb:c7:47:3c:4d:
00:64:d5:3c:d5:b9:f6:31:9d:ea:32:13:87:ff:11:
e3:78:85:7f:8e:be:b0:93:c5:22:c7:0c:df:7e:3b:
8c:29:ee:ee:30:9a:c4:fa:eb:f0:ce:85:19:22:8f:
a0:1f:86:ce:fe:93:9e:f8:6c:a2:9a:4b:8d:52:65:
5b:d8:53:e3:72:30:2b:3e:fe:de:9c:41:84:ed:e7:
9e:01:34:e3:63:03:c3:e1:6e:24:7f:ec:e5:3e:c8:
47:69:6a:65:1d:8d:0d:b7:ed:9c:45:67:17:d0:9f:
db:60:a8:d1:df:95:25:3e:db:23:58:6d:31:e2:08:
00:d5:43:1c:87:8c:de:49:62:60:ca:82:f4:77:27:
04:26:93:26:93:4f:27:15:60:4b:39:1c:1f:d0:d8:
0b:18:c7:fd:2a:5a:d9:20:65:4a:f2:af:ae:3b:af:
1f:9a:8a:4f:c5:e9:1a:19:3f:f0:68:f1:84:e9:dc:
1a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:28:DF:04:36:E1:0B:9D:D4:80:1D:87:2F:95:33:58:08:48:A4:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/438564d8-02e9-343b-83ab-faed18d46a1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:121:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:1e:90:5c:43:dd:6d:84:a0:e8:c1:bc:4b:9e:f1:ab:83:2a:
1b:f1:be:62:40:bb:02:fe:17:67:3b:30:c0:6f:0a:30:99:0e:
7f:19:f5:52:17:a6:38:ea:dd:ca:e7:39:cb:47:b6:cb:96:b9:
68:b6:df:73:be:92:69:21:a4:66:10:5d:5b:48:43:34:4d:bc:
5a:9b:d5:6d:69:da:dd:54:2b:c2:a1:33:dc:c4:2b:cc:d5:7b:
78:cd:fd:47:10:eb:b5:ed:39:96:27:ae:b5:fb:2d:f8:2f:c8:
b1:78:79:f7:dd:c7:8f:e3:dc:29:35:60:13:9e:d4:bc:ef:ef:
15:ff:f4:b8:96:21:b0:7e:bc:99:b8:ff:0d:1d:3f:9f:47:ed:
25:e6:24:ad:7c:75:76:6f:95:10:cd:9b:23:f6:e3:bc:1a:84:
64:ff:96:4e:02:6a:d2:fb:4e:6e:f6:ac:82:a0:d8:59:4e:0c:
48:b5:46:74:43:e9:01:ef:14:9e:0e:bb:d4:68:0b:fe:f9:d2:
04:a4:a8:0f:98:32:1b:7b:56:73:5c:bd:0f:0c:30:bf:a1:b9:
28:3c:62:dd:ba:d9:e9:56:9a:97:f5:49:67:15:fd:df:07:6c:
f8:35:fe:56:2c:0c:b8:0a:5e:e8:d0:cb:87:7b:64:10:16:34:
43:4a:b3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:43:21 2025 by rpki-client