Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4d31fa64-5e13-3466-8009-5ede89eabcdb.roa
File: 4d31fa64-5e13-3466-8009-5ede89eabcdb.roa (raw, json)
Hash identifier: TNqkQyYTCTGV9hhvsXLxett/z9k7O2xTjArVCvxiOa4=
Subject key identifier: 1B:63:D4:C2:3C:1A:D2:75:29:77:22:03:65:79:C4:52:35:62:A3:4D
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489BA0BFFC39FCE4BA904FD500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4d31fa64-5e13-3466-8009-5ede89eabcdb.roa
Signing time: Mon 20 Jan 2025 14:00:51 +0000
ROA not before: Mon 20 Jan 2025 14:00:51 +0000
ROA not after: Sun 20 Apr 2025 13:00:51 +0000
asID: 36627
IP address blocks: 2001:500:30ff::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9b:a0:bf:fc:39:fc:e4:ba:90:4f:d5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 14:00:51 2025 GMT
Not After : Apr 20 13:00:51 2025 GMT
Subject: CN=aa0e6550-3dac-4c15-b461-b62d764211dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a8:38:ba:37:5e:41:c4:b6:1e:3b:c1:4a:f0:
a1:6f:9a:9b:34:08:d5:e8:56:68:38:5d:3f:e6:73:
94:43:60:1a:43:82:22:84:e1:12:69:5c:71:50:12:
5d:b9:49:9c:6f:2c:79:0a:0b:8e:30:2f:81:f7:fb:
96:49:14:b4:98:69:b8:7a:4e:0e:ff:e2:81:01:6b:
7c:de:d6:12:6e:47:a6:7b:fa:a8:41:40:3b:23:e8:
c4:ee:a1:d0:44:d1:16:90:e0:91:6f:58:9e:53:0c:
4d:38:d3:e7:77:fa:5d:f5:a7:f1:25:b4:69:20:da:
80:e7:10:11:9d:bc:64:86:ac:4c:3b:15:60:90:af:
e1:1d:4d:b4:1f:5d:c6:2c:a7:49:12:a6:31:dd:df:
1b:c7:da:1b:63:23:88:83:f2:5c:d9:0d:25:26:8d:
91:8e:8a:12:62:94:56:ad:47:4b:20:37:32:c4:97:
97:36:ed:1e:74:05:33:88:ce:57:23:d9:db:b6:1f:
f3:fd:cd:7d:2f:0d:a5:f2:bb:1f:0c:b7:c2:22:91:
80:7f:dd:17:16:18:f7:f8:65:90:19:6d:8f:09:a7:
0d:3c:e7:b3:7b:32:cf:c0:91:21:ff:5d:a8:13:33:
45:8a:ad:6e:55:19:4a:9a:b9:b2:7a:d2:e4:b6:a8:
27:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:63:D4:C2:3C:1A:D2:75:29:77:22:03:65:79:C4:52:35:62:A3:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4d31fa64-5e13-3466-8009-5ede89eabcdb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:30ff:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:c8:0c:dd:47:e0:d6:22:de:93:68:18:25:0e:a1:61:1c:fa:
78:85:a0:35:a7:53:77:2f:5d:33:85:c0:3b:ce:71:8c:3b:d6:
da:7d:c6:cc:61:2f:db:03:93:37:19:aa:84:9b:06:fc:4b:94:
c7:11:2d:70:d5:65:5c:c3:42:15:86:e6:60:fd:00:87:5b:0d:
27:4f:f3:a5:7c:18:33:f9:3f:27:63:9f:47:c9:b4:12:b7:1b:
99:93:9e:e0:4e:30:e0:b1:5c:01:24:13:0c:69:9b:ac:24:c2:
59:d1:8c:87:27:f6:0a:c0:68:07:37:e8:ab:37:98:df:f7:cd:
2a:00:61:54:5f:63:82:73:18:ba:8e:ac:b4:c2:58:3c:d2:fd:
a6:5e:fa:5a:24:38:b6:21:86:22:ce:2c:9b:4c:f5:d1:43:14:
4b:09:e1:a3:ba:fc:1a:bb:af:1c:ea:54:26:9b:9f:03:17:68:
b5:b0:2e:49:f3:c8:01:05:2c:6c:cd:d0:3b:ef:da:d0:5a:1f:
c8:09:c7:b0:c1:f4:a0:76:18:8b:4f:f1:53:3e:5f:03:df:4a:
e2:ff:ce:a2:b6:f4:82:64:78:a6:99:bd:c9:96:0c:bd:db:86:
97:ff:9f:f5:f9:a7:b9:98:29:23:f6:ff:4c:1d:f1:f8:72:ef:
67:ea:d1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:17:01 2025 by rpki-client