Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4930348d-c496-3320-860a-1060caa6686b.roa
File: 4930348d-c496-3320-860a-1060caa6686b.roa (raw, json)
Hash identifier: jAPXrl8kzCGAwb5XNJYtjFdmvCuv7rXpoKv/XPZZoR8=
Subject key identifier: 08:61:C9:C2:BB:0C:6F:30:4B:91:AC:AA:A6:05:5B:25:A2:4B:C3:1C
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584837200F733E9D20B4D4DC4CE0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4930348d-c496-3320-860a-1060caa6686b.roa
Signing time: Sun 15 Dec 2024 14:00:53 +0000
ROA not before: Sun 15 Dec 2024 14:00:53 +0000
ROA not after: Sat 15 Mar 2025 13:00:53 +0000
asID: 397197
IP address blocks: 2001:500:123::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:37:20:0f:73:3e:9d:20:b4:d4:dc:4c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 15 14:00:53 2024 GMT
Not After : Mar 15 13:00:53 2025 GMT
Subject: CN=aa31fccd-63b4-47e3-9c26-80c14d3158e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0a:d9:3b:07:e4:f6:8e:b5:c3:3f:9a:06:89:
a9:8f:8b:87:7a:66:ae:d3:2c:3a:20:f8:e2:e0:af:
c4:11:97:37:18:8f:d5:51:d7:2d:93:81:4b:d2:87:
af:73:c4:a5:e4:fb:b8:73:6a:44:ce:0c:45:40:f1:
27:da:cf:be:a6:83:dd:7d:e4:5b:ce:6b:e2:1f:c0:
b6:76:9d:52:2f:f5:87:06:7b:c3:f2:5a:3f:85:df:
82:67:76:40:19:fd:ce:bd:39:e7:94:02:86:11:4c:
f6:c1:db:5f:19:71:12:62:67:79:44:1c:b1:c0:55:
18:d1:04:d6:f4:02:2e:4f:66:52:0b:22:69:15:55:
3e:a2:0f:65:e1:eb:f2:55:b6:0c:03:92:f1:e4:85:
f3:53:24:73:fb:2f:f1:59:e2:e4:b1:d6:a0:5c:17:
e1:63:9a:31:97:02:f5:b9:03:bf:78:4f:9d:5d:ce:
a7:45:2c:ea:e1:b9:b6:94:38:61:d9:ca:4e:d2:17:
17:db:2c:4e:e3:c5:4b:fe:70:0b:a2:96:a0:0e:51:
d7:10:04:31:78:1e:b6:da:8c:12:93:37:00:e7:f3:
48:dd:5a:78:d6:5d:fb:6d:45:e6:53:bb:bb:18:8d:
54:c5:d2:0a:09:44:e0:ac:59:58:17:46:72:22:eb:
7a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:61:C9:C2:BB:0C:6F:30:4B:91:AC:AA:A6:05:5B:25:A2:4B:C3:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4930348d-c496-3320-860a-1060caa6686b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:123:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:52:c7:f4:dd:67:1f:69:0f:4c:cd:b5:29:a4:13:33:ca:7b:
b9:17:01:ea:ae:6d:00:f2:2d:2a:02:6b:bf:01:d7:a0:32:2b:
f1:70:85:c8:fc:d5:9d:27:dc:34:49:a1:61:d7:d0:a5:71:14:
20:24:3d:f9:6b:e7:2b:c0:23:be:1c:d1:40:62:20:08:6e:05:
ec:e7:85:c8:0b:60:d8:be:81:fc:bd:25:a8:46:23:16:4b:9b:
b0:82:3e:b3:a9:68:7c:22:c5:12:a1:e9:9e:5b:1e:9c:d5:14:
9a:aa:db:04:f9:96:d0:25:9f:9f:c7:44:c2:84:0d:ac:5d:c4:
ad:67:98:61:79:43:2a:57:3c:a9:d8:10:b7:fc:6f:a8:99:13:
3b:50:b6:a5:05:71:3f:2c:e6:ae:0d:04:75:01:11:0b:c6:1f:
8b:0a:eb:fd:00:bc:63:e8:61:cc:54:71:73:aa:76:88:1c:28:
4f:d4:f4:13:6c:97:f2:85:ba:80:49:c5:cf:c1:f8:45:45:e8:
7b:85:ba:84:3f:9f:95:4e:10:6e:bc:cf:6e:23:19:73:50:a3:
47:1c:6b:06:0c:ab:57:3b:0c:b2:ef:27:13:72:0e:30:93:f1:
46:58:9c:26:14:a8:f0:4f:60:e9:b7:c7:d6:49:eb:9a:72:18:
1c:7e:4e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:35:10 2025 by rpki-client