Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4d3ea331-a24d-3543-a456-cee43dba9e5f.roa
File: 4d3ea331-a24d-3543-a456-cee43dba9e5f.roa (raw, json)
Hash identifier: KVD9x0SFj+SE4T50kIf9OAxy7AA0bwb3x9ZLSxoQLck=
Subject key identifier: 2E:F8:44:69:63:8B:F9:46:D9:B6:B4:DF:01:53:55:E6:66:29:52:8E
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584842432CB9B2406F766E46D380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4d3ea331-a24d-3543-a456-cee43dba9e5f.roa
Signing time: Thu 19 Dec 2024 13:45:35 +0000
ROA not before: Thu 19 Dec 2024 13:45:35 +0000
ROA not after: Wed 19 Mar 2025 12:45:35 +0000
asID: 36623
IP address blocks: 2001:500:127::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:43:2c:b9:b2:40:6f:76:6e:46:d3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 13:45:35 2024 GMT
Not After : Mar 19 12:45:35 2025 GMT
Subject: CN=40c2a937-b442-4ce0-bb2c-05e4b728ebe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6a:f0:8d:43:9b:3b:50:19:b9:3b:da:be:76:
c4:d7:ff:06:30:b2:20:c0:21:e4:8d:63:ea:c3:9b:
e4:8d:f4:d0:b3:c5:b2:8f:2e:a6:49:17:60:29:34:
9d:e0:77:b1:11:7d:c4:d8:62:fe:86:7c:61:e9:06:
9d:fe:df:2f:1e:ce:a4:10:76:75:b7:7a:da:63:65:
b9:87:8d:d3:97:12:7c:df:49:d1:da:c7:a7:ff:69:
7d:5b:ee:72:f2:ea:7f:40:1f:44:8f:7d:2f:02:19:
ef:43:d1:5e:4d:6c:be:22:1d:94:be:d2:7e:dc:0f:
ab:61:e6:7c:ab:a3:3d:ea:98:e6:b9:a8:ca:b5:68:
74:ff:91:7e:f1:8c:6b:e1:b1:3a:4f:9a:ce:8f:68:
8c:32:f7:40:d4:a7:22:09:39:86:68:09:a7:db:88:
2a:ec:34:05:6d:c6:3f:13:dd:bd:8a:78:a3:26:a9:
07:e5:bb:3d:93:bf:dd:38:05:1d:bb:ce:10:3e:40:
3f:b0:f1:16:ba:43:75:95:b8:53:6d:82:58:06:57:
ec:cc:f0:0b:2b:3e:40:cf:2d:4c:8d:64:e4:df:9e:
ac:d0:ff:b1:17:1e:16:2f:eb:50:eb:fa:24:af:36:
ac:bb:d7:18:59:9d:6d:85:3f:21:10:ec:e3:16:d9:
53:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F8:44:69:63:8B:F9:46:D9:B6:B4:DF:01:53:55:E6:66:29:52:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4d3ea331-a24d-3543-a456-cee43dba9e5f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:127:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:40:20:55:ba:73:a8:89:db:50:92:b2:8c:8c:95:98:04:53:
11:a0:1f:b2:fd:49:7c:7c:b5:92:5c:72:2f:99:95:0c:ba:c2:
d8:3a:89:82:15:d4:85:05:a5:51:63:05:dd:eb:bd:2e:0c:68:
26:fa:50:48:d0:95:a7:af:af:2f:fe:ff:bb:1a:92:ac:db:87:
2e:73:a5:62:97:a0:03:e5:7b:9d:50:a2:03:1f:95:08:21:6a:
03:e9:09:de:6f:c3:0e:6e:82:5f:cd:6a:a2:40:4e:21:62:b5:
b2:14:1f:b9:30:01:22:92:ce:9b:38:b4:13:91:0f:8d:a0:e6:
e2:f2:6a:b7:b8:c7:5f:cf:fc:c5:0b:1d:27:ee:9b:c1:56:2b:
b4:79:8f:e6:af:93:4c:5c:62:b7:c9:09:b8:7b:d0:03:2c:86:
61:14:87:2e:a1:b2:56:0e:0b:db:6b:3e:91:fc:d3:70:a7:90:
ea:c3:46:64:3f:54:53:1a:2a:b8:03:0b:4b:86:af:87:2c:1f:
ba:d7:ca:9c:32:8b:55:41:8e:7b:a9:e8:42:5f:4a:32:e0:86:
65:93:91:13:9b:18:08:04:c3:f2:38:76:1c:99:06:48:bf:45:
90:36:a4:8a:ee:7d:68:8f:67:97:8a:73:13:99:32:f3:4e:23:
7c:bf:c3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:25:06 2025 by rpki-client