Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5a489ef6-5ed9-38ad-bb99-3bf81a02355e.roa
File: 5a489ef6-5ed9-38ad-bb99-3bf81a02355e.roa (raw, json)
Hash identifier: tlcC7v5KT7mhMcJXP5x66Cz6QfXNYTjZ+6bm8hU7X2I=
Subject key identifier: 85:6E:95:CB:D7:36:11:0A:C5:53:06:6C:F5:5E:17:6F:85:D7:D0:43
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489E5E496AA018A65D1B181E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5a489ef6-5ed9-38ad-bb99-3bf81a02355e.roa
Signing time: Tue 21 Jan 2025 13:34:35 +0000
ROA not before: Tue 21 Jan 2025 13:34:35 +0000
ROA not after: Mon 21 Apr 2025 12:34:35 +0000
asID: 396569
IP address blocks: 2001:503:39c1::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:5e:49:6a:a0:18:a6:5d:1b:18:1e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 21 13:34:35 2025 GMT
Not After : Apr 21 12:34:35 2025 GMT
Subject: CN=9924e7e4-3765-4762-a9fb-ec381d0ca0ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f5:e0:c2:1d:ae:45:ab:4b:d8:dc:e0:53:27:
1d:cb:95:8c:72:61:97:d0:4c:43:8f:b5:bf:77:22:
f6:72:7e:da:ec:e4:69:af:0f:a2:cf:8b:b0:b0:fe:
77:0c:7c:33:8b:aa:a0:bf:a0:bd:9f:cf:15:92:c3:
74:5e:a5:06:0e:05:91:60:5f:4f:19:b2:e0:9a:44:
67:0a:8a:3c:ee:5b:1a:b4:ba:2c:2e:74:41:17:e5:
3f:26:af:90:04:f7:37:19:e6:b6:c7:2b:a9:7f:aa:
07:8e:2f:a3:f4:4e:b8:5f:9d:b4:ef:cd:c9:a1:9e:
a1:a1:65:25:b2:99:54:91:b9:e0:04:0a:fe:4f:9f:
99:69:b7:02:db:01:64:ae:2d:bf:83:e8:ad:22:1b:
76:97:84:c2:9c:8f:eb:b0:ff:b2:00:59:ea:8b:8c:
68:ea:92:99:fe:7c:30:cd:c2:af:ee:f5:80:97:36:
75:12:d3:7d:68:1c:88:09:31:7c:6e:95:c6:d7:5f:
56:86:74:4c:92:28:37:ee:69:5e:e8:c9:3a:b7:ca:
b3:16:31:30:95:d4:7c:f4:c4:6d:b5:07:27:2e:bb:
7e:42:ad:e5:ce:9e:30:0d:78:2b:b0:3d:7f:61:ba:
d7:7b:3d:2a:51:ca:96:3f:69:62:45:81:7d:a8:6a:
ce:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:6E:95:CB:D7:36:11:0A:C5:53:06:6C:F5:5E:17:6F:85:D7:D0:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5a489ef6-5ed9-38ad-bb99-3bf81a02355e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:39c1:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:14:a2:cc:b7:49:15:91:b5:be:7f:12:b0:d9:d1:ab:f5:3a:
29:b1:19:1c:4a:a0:3f:03:0d:2b:55:73:4e:36:b8:97:89:cf:
73:ce:ab:59:a9:f9:06:41:e2:b6:1f:6d:60:2d:ad:6d:9b:d8:
f6:52:c0:31:3e:f9:3b:de:49:1a:04:ed:26:96:2d:fa:56:c3:
2c:4c:d7:ed:82:10:4b:fe:4b:06:1f:a7:db:4e:bd:f8:be:30:
63:26:fb:26:82:1e:3f:32:8c:55:9f:5c:a4:0a:70:3f:74:f8:
de:41:b9:0a:38:da:48:c6:98:a5:f7:b7:47:b5:c8:83:7e:70:
82:ef:ea:5c:47:21:5e:8e:57:e7:f6:7a:c5:4c:73:e0:88:c7:
ff:3f:ea:f5:76:5d:47:23:d5:8f:44:6f:62:6d:2b:b5:d9:79:
28:b0:5d:ad:db:b8:56:a1:17:00:9c:46:e8:24:4c:26:de:cd:
fd:f5:b6:37:a3:e7:67:bd:84:a0:0d:44:14:2c:ef:11:39:64:
ce:62:8b:8c:5d:6e:52:42:44:2f:a8:25:5c:e6:c8:63:00:c2:
65:f7:26:00:04:41:1a:76:1b:78:7f:98:10:90:91:58:76:ee:
e9:2f:23:72:f1:ac:66:51:af:1c:e7:c8:f7:76:84:7a:e0:bf:
9d:e6:f6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:35:12 2025 by rpki-client