Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c921f75-0aba-3d8b-aa27-15e9b75021f6.roa
File: 4c921f75-0aba-3d8b-aa27-15e9b75021f6.roa (raw, json)
Hash identifier: WFaykd9YepwsjzzmiPLDAF7iju/ZyZIIZ5XF+vhpEcA=
Subject key identifier: 5E:EA:DB:B8:C5:6A:E4:4A:BB:8E:ED:F1:B7:3D:BD:78:5B:76:F9:D8
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848372015B75951478EE5D39100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c921f75-0aba-3d8b-aa27-15e9b75021f6.roa
Signing time: Sun 15 Dec 2024 14:00:53 +0000
ROA not before: Sun 15 Dec 2024 14:00:53 +0000
ROA not after: Sat 15 Mar 2025 13:00:53 +0000
asID: 397198
IP address blocks: 2001:500:123::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:37:20:15:b7:59:51:47:8e:e5:d3:91:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 15 14:00:53 2024 GMT
Not After : Mar 15 13:00:53 2025 GMT
Subject: CN=3d1230e7-c5f6-45dd-94a4-5c0dd54ef72d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c4:91:1d:d1:16:63:91:b3:83:eb:dd:a1:a9:
9b:57:6a:ff:f0:77:bc:ce:58:10:a7:4d:9c:6f:df:
9f:51:d5:9c:86:a1:48:6f:4c:02:8b:87:e5:c6:6f:
6b:44:38:de:0b:d8:8d:cb:c4:63:f5:b8:92:38:90:
c2:b4:58:d7:2b:e0:fd:70:4d:c8:43:2f:9a:54:d6:
8a:5a:b4:61:cb:83:d1:d3:98:64:41:8f:d5:22:f2:
7f:fd:38:25:6c:d9:ae:06:f4:ba:96:4e:f7:f4:22:
9c:82:c3:30:01:73:12:67:01:f1:30:db:f3:78:ff:
01:2f:67:26:3e:aa:55:7a:20:92:53:c9:fb:f4:66:
37:a0:20:7b:5e:50:8d:6a:3a:7f:69:58:fa:46:d0:
58:3f:ed:21:53:f9:92:76:3e:cc:4a:68:9a:e4:e7:
2d:48:7a:59:c7:81:19:6f:7a:44:cb:7f:55:82:21:
0b:45:1d:b1:49:3d:11:c4:00:70:ee:6f:ff:02:5b:
01:f0:42:8f:e0:ff:20:51:78:64:46:33:e2:23:8c:
91:1d:b4:96:64:8a:ff:19:8c:1c:1f:0f:4e:36:b2:
8b:4c:24:67:e3:61:31:ca:70:af:6b:c1:ea:5b:61:
40:3d:35:fc:bb:a1:32:8d:ba:fb:5d:b9:b1:fd:31:
a0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:EA:DB:B8:C5:6A:E4:4A:BB:8E:ED:F1:B7:3D:BD:78:5B:76:F9:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c921f75-0aba-3d8b-aa27-15e9b75021f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:123:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:54:3a:2c:45:18:61:f0:e2:f2:84:e9:ca:b2:fa:ff:0e:b3:
32:7b:29:a3:d3:b0:a4:6d:b1:fb:d1:d7:1a:cb:35:b4:fc:fe:
03:5c:93:06:10:f4:dc:5a:0e:a5:2b:ec:63:4b:85:82:b9:a4:
92:7e:b3:da:45:60:5a:49:79:35:a0:09:9a:44:fe:dc:e4:4e:
12:f4:c8:3c:ce:fb:df:56:45:21:28:51:ea:bb:e6:cf:27:ca:
f6:3d:c9:c5:70:47:7d:07:c9:01:6b:50:b5:35:ff:7a:88:a5:
90:18:5e:63:5a:b2:0b:db:80:23:98:d1:c2:27:10:d2:5d:2b:
56:7d:d2:3a:3c:27:fa:b5:32:3c:92:68:8a:ff:17:95:67:c4:
2e:41:31:ba:4d:9e:28:53:b0:b0:a5:41:f4:cd:62:e0:61:ae:
d6:10:ab:1c:87:bd:64:c8:cb:53:39:fc:e5:b2:15:c4:ea:d4:
fc:30:8c:76:e9:2b:27:fd:39:06:50:31:15:e3:f7:1d:d0:74:
3d:a4:f3:e4:af:39:70:1f:df:f8:97:55:dc:62:d1:a9:6a:30:
76:5a:0b:00:9d:95:85:71:1d:cf:e5:de:d3:0f:c3:a2:76:8e:
67:8a:be:f0:25:29:6e:60:29:27:d5:ad:96:58:73:b6:18:8d:
e8:5c:b6:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:44:10 2025 by rpki-client