Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/54dceea3-a5c1-36d7-9feb-d0653ef8e996.roa
File: 54dceea3-a5c1-36d7-9feb-d0653ef8e996.roa (raw, json)
Hash identifier: iCKl4XAbHppYbGfgiHkUtI4nCg8Ue4oThMgX2HdG00I=
Subject key identifier: 18:06:11:A1:EA:6F:2F:05:93:38:F7:CB:91:04:58:2B:58:41:65:DA
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489BA0B80563A2EAEF39176100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/54dceea3-a5c1-36d7-9feb-d0653ef8e996.roa
Signing time: Mon 20 Jan 2025 14:00:51 +0000
ROA not before: Mon 20 Jan 2025 14:00:51 +0000
ROA not after: Sun 20 Apr 2025 13:00:51 +0000
asID: 396612
IP address blocks: 2001:500:30ff::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9b:a0:b8:05:63:a2:ea:ef:39:17:61:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 14:00:51 2025 GMT
Not After : Apr 20 13:00:51 2025 GMT
Subject: CN=f0374273-f271-4f65-adec-5d73ed1960c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:67:2c:73:2a:73:36:0a:50:9f:a0:7d:c0:44:
3b:48:60:f9:fa:3a:0f:71:c1:ba:ab:85:b4:96:4c:
f7:7b:c1:a8:9e:2f:1e:e9:6f:09:44:f6:08:1e:45:
c7:dd:23:64:bf:9c:38:b9:7e:5f:8c:48:63:c7:4a:
de:34:3f:21:35:ec:54:27:52:5a:c1:a2:89:54:4d:
20:fa:c7:4d:d3:c3:13:96:67:60:fb:34:dc:1b:b2:
d3:33:6c:d2:b9:f4:99:ce:77:33:f5:f7:d8:e0:24:
ad:93:6f:fd:7e:66:29:02:1c:c3:12:2c:c1:60:ff:
f6:39:f8:67:ec:e7:2b:b9:c9:64:30:9e:74:b6:4f:
32:c7:38:94:7f:7d:2e:00:fb:0a:08:49:54:15:19:
38:1d:58:b5:56:a0:ff:ee:6a:c6:95:5d:66:8a:33:
01:98:c6:45:80:c5:1a:50:41:41:61:e7:d4:4c:f6:
2d:da:49:25:0c:41:21:69:81:e4:e8:73:6a:a1:62:
7e:b2:c4:48:ec:ec:58:d7:e5:d6:74:62:38:78:42:
ec:38:8a:1a:ef:e2:0b:2e:85:39:59:33:6f:c2:3f:
04:54:24:c8:4e:ff:60:79:79:f8:e3:69:e4:36:f3:
da:63:29:bc:59:fd:3f:2a:a5:d0:a3:a9:d0:45:f5:
d8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:06:11:A1:EA:6F:2F:05:93:38:F7:CB:91:04:58:2B:58:41:65:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/54dceea3-a5c1-36d7-9feb-d0653ef8e996.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:30ff:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:37:03:ab:f1:8d:38:9d:e0:d5:a3:22:fa:bf:95:35:ec:60:
b0:31:5b:54:8b:f7:62:10:72:83:44:3c:cc:0d:5a:41:67:8a:
52:b9:c5:f0:c5:98:a3:e5:88:05:62:fb:8a:3f:f3:06:b3:86:
b1:b3:66:86:48:84:6e:26:e8:07:87:da:d5:cc:22:24:62:71:
60:cc:d4:34:46:4f:4c:fc:d1:78:70:ab:8a:85:90:1d:d3:2b:
cd:70:95:be:35:f6:e8:ee:e2:08:b7:db:4b:d4:5a:29:bc:3e:
a7:0c:a9:42:35:cc:5e:d1:f0:12:e0:3c:8c:eb:9c:e6:6a:be:
74:44:46:9d:5d:e4:b1:f9:9d:88:b5:e1:bc:53:ae:4b:c3:08:
b3:72:04:3b:85:87:c9:64:b3:a9:c4:81:6d:a7:b1:ae:0b:ac:
52:b7:d5:41:2f:08:77:02:21:75:ad:00:5b:73:15:8e:e9:12:
41:0a:56:e0:92:f4:b4:04:22:ed:91:30:85:79:17:d3:3a:bb:
a3:dd:ee:93:cc:c2:40:49:cc:fd:f5:7a:0b:20:9a:35:b7:a3:
90:d0:46:45:74:47:26:41:eb:e1:88:a1:97:7f:87:13:ed:c2:
de:42:8c:31:15:5a:07:d7:33:32:7e:ac:ab:8e:25:cd:14:33:
e7:bb:54:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:56:12 2025 by rpki-client