Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48f87b69-8da1-37e4-90c0-cf2a877ff281.roa
File: 48f87b69-8da1-37e4-90c0-cf2a877ff281.roa (raw, json)
Hash identifier: 9pbHUk0xYG9QSQCA+EX3IIKLjvJihSYKTvgWSo22mPA=
Subject key identifier: 3B:9D:42:A5:2D:3E:73:D6:96:9F:E3:C7:13:69:C7:DF:01:57:C4:DE
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584837201284BF65B3788DD52C60
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48f87b69-8da1-37e4-90c0-cf2a877ff281.roa
Signing time: Sun 15 Dec 2024 14:00:53 +0000
ROA not before: Sun 15 Dec 2024 14:00:53 +0000
ROA not after: Sat 15 Mar 2025 13:00:53 +0000
asID: 397194
IP address blocks: 2001:500:123::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:37:20:12:84:bf:65:b3:78:8d:d5:2c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 15 14:00:53 2024 GMT
Not After : Mar 15 13:00:53 2025 GMT
Subject: CN=a9d26257-6bb3-4fc0-b0d5-9156cd07820b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9a:32:ba:60:3c:57:d1:c1:1e:f5:4b:47:74:
3f:78:b8:4d:48:d8:25:29:04:9e:84:59:23:f2:96:
63:e9:23:c8:95:0b:f3:ff:00:cf:82:c4:f4:6e:e9:
63:ea:75:ae:04:ab:86:be:79:21:4d:50:6a:c6:d1:
a3:5b:a2:c8:81:a3:6d:ed:fd:e4:4c:2b:9b:f4:73:
12:0a:a2:91:88:bc:bb:99:4e:7f:07:0c:ee:14:aa:
cf:bc:5e:0e:21:cd:bd:d9:1a:54:e0:74:47:ae:ce:
01:3f:ab:d0:3c:b6:df:fa:84:37:d0:c1:66:b0:72:
7b:75:47:03:6e:42:c8:a9:d3:1d:99:bd:97:02:23:
c2:79:be:72:72:5f:3e:1d:f0:87:76:07:d3:31:07:
a5:c2:3c:b3:89:3c:7d:07:8d:47:4d:46:d9:fb:e9:
42:61:87:07:30:c4:e7:ba:58:cf:a9:98:72:ca:f3:
50:6a:72:20:6a:e3:18:ad:3c:8d:ec:08:d4:9e:16:
74:00:45:bc:a4:c2:4c:fc:47:f2:81:b5:91:8f:d4:
c4:31:b4:22:9e:c8:11:b9:3a:77:17:e5:ef:da:e7:
c7:11:bf:8f:60:2f:fa:92:09:a6:15:09:05:e9:85:
f6:a0:a8:2d:cc:78:c1:07:99:63:c7:b9:af:a2:3b:
b5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:9D:42:A5:2D:3E:73:D6:96:9F:E3:C7:13:69:C7:DF:01:57:C4:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48f87b69-8da1-37e4-90c0-cf2a877ff281.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:123:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:7f:0f:35:f4:f7:e5:80:f3:21:ab:4f:d5:4c:0b:61:68:87:
66:f6:94:25:0c:d7:b9:18:bd:4c:bf:02:fd:4b:15:84:01:f6:
d9:da:62:c2:cf:f9:fd:2a:60:2b:04:c7:f3:99:5e:0e:da:4d:
62:1c:4d:bc:53:cb:27:3e:1d:68:b5:54:99:3a:0f:7e:7d:93:
7e:ac:f4:cf:8c:f4:2a:1a:9d:84:f1:cb:62:e0:36:fa:e3:2f:
6c:21:ab:a3:53:85:63:ae:b0:43:e2:9d:eb:be:3b:24:5c:e1:
0d:48:39:50:a2:20:3a:fc:1b:ed:1c:43:8e:6d:81:12:1e:7c:
cb:c4:ef:b9:70:1a:28:6f:83:a9:ba:75:20:d1:69:f4:42:10:
11:38:52:d8:93:02:c3:c3:39:c8:45:bb:c0:4d:c6:19:5e:ad:
94:af:28:73:f3:32:4b:01:b3:4e:cf:10:33:07:c0:62:ac:65:
17:55:2e:c6:1f:4f:d3:3a:5f:87:13:d8:de:06:5a:9f:89:ce:
fa:09:9e:d8:98:c9:30:74:fe:2b:b5:30:57:a0:a2:97:03:7a:
20:b5:b9:01:99:59:16:91:66:7b:3f:51:ce:e0:a8:4c:3d:79:
79:22:fd:ae:99:8e:5e:27:b4:5d:dc:d7:fb:09:30:eb:be:47:
22:70:6b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:01:11 2025 by rpki-client