Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a5d04a8-7efe-3540-9c1b-eb517953d2e9.roa
File: 4a5d04a8-7efe-3540-9c1b-eb517953d2e9.roa (raw, json)
Hash identifier: c7GYQbhWO9F8DHLzbwEi1YeY9KHdv9jnG8BOXsGB7yU=
Subject key identifier: 65:75:F0:FB:E3:EF:D9:5A:36:69:AC:69:9D:A0:07:60:B8:B0:19:5C
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584861005A727D9C1C1701A7E930
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a5d04a8-7efe-3540-9c1b-eb517953d2e9.roa
Signing time: Mon 30 Dec 2024 14:00:51 +0000
ROA not before: Mon 30 Dec 2024 14:00:51 +0000
ROA not after: Sun 30 Mar 2025 13:00:51 +0000
asID: 396563
IP address blocks: 2001:501:8a29::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:00:5a:72:7d:9c:1c:17:01:a7:e9:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 30 14:00:51 2024 GMT
Not After : Mar 30 13:00:51 2025 GMT
Subject: CN=1d62ccbc-f2c6-40b0-80e1-192329315d75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:20:ed:01:d9:d7:1a:ad:ab:b4:8e:e7:37:93:
0a:df:11:52:ae:02:7c:8c:66:e0:95:a1:b2:04:2a:
c1:cf:0f:5c:e0:6e:f2:ac:77:a5:cd:b9:b4:ad:34:
9e:03:59:0b:00:e2:57:56:e5:3a:52:8e:81:b6:5a:
00:7f:63:51:0c:db:51:33:1f:fa:7a:77:94:bc:50:
92:67:fd:56:9f:3f:6b:de:43:ee:6a:37:23:5a:d1:
e5:c7:33:f9:d9:04:e2:2b:b6:56:eb:54:eb:8b:bf:
ee:5d:4f:6a:b8:ca:de:5b:05:cf:3c:3f:15:62:14:
8c:3b:2b:f7:ee:8e:b1:07:a0:da:5a:06:0b:4e:19:
13:73:7f:e2:95:a7:60:19:79:0d:a3:75:b8:4f:fc:
83:5a:d1:02:09:a1:74:b7:eb:e4:a3:79:5d:87:45:
ee:49:23:a6:64:fa:e5:d4:31:50:52:53:ba:74:b6:
f7:d4:57:3c:18:67:36:1d:11:96:22:40:8a:48:67:
fd:c6:b2:b6:70:dd:10:1a:87:f0:56:24:72:64:db:
d1:38:b6:44:9b:33:20:74:0e:3f:c8:77:8d:b6:59:
08:d9:25:96:3c:47:a6:48:7b:a0:bc:19:b4:fd:af:
59:b3:44:1c:da:c9:b3:8e:93:db:51:7f:57:5c:dc:
2e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:75:F0:FB:E3:EF:D9:5A:36:69:AC:69:9D:A0:07:60:B8:B0:19:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a5d04a8-7efe-3540-9c1b-eb517953d2e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:501:8a29:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:34:ca:53:a1:7f:8d:f8:08:02:fe:8e:8f:11:4d:4e:33:46:
3c:d1:b4:6b:e3:98:a6:2b:12:23:7e:1c:a6:b9:1c:d9:91:2a:
4d:f2:f4:c2:cf:71:24:18:3f:03:70:01:7e:6d:e1:bc:49:2c:
50:75:16:d4:b6:3a:0e:ec:f9:73:77:ee:e2:ef:63:ef:8d:47:
45:13:a0:81:87:20:81:3b:24:d6:67:67:35:90:36:b6:ef:53:
b3:30:c1:e4:3a:27:fb:15:f3:67:32:5d:91:27:f9:e9:39:d9:
2d:17:98:e0:ef:db:18:86:d0:97:ea:0b:f7:d6:26:74:c8:61:
4b:c5:47:87:fc:91:8c:44:14:04:66:72:f0:41:41:d3:97:bd:
7b:00:10:25:6c:2c:82:0f:9b:cd:68:29:c8:29:99:7d:19:93:
04:96:f3:d5:41:0a:ed:f9:a9:91:71:3d:93:3e:b1:34:f8:f2:
d8:30:63:f9:24:a1:8d:19:88:74:6a:d2:70:36:1d:b3:1d:ce:
f9:90:ef:a2:4d:48:55:65:db:1d:dd:c5:85:23:9f:0a:6d:f8:
6b:05:f4:f2:44:64:6b:d9:08:54:c7:ae:02:e9:f3:8c:cf:b9:
6c:4d:89:36:e2:28:75:64:dd:05:2a:b6:57:d3:df:05:2f:b1:
cc:b7:3d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:07:59 2025 by rpki-client