Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5d4dc95b-2907-3858-a12f-eb8b86917a64.roa
File: 5d4dc95b-2907-3858-a12f-eb8b86917a64.roa (raw, json)
Hash identifier: H0LeM0GWqUYkoywivBG3GfXos8VzNQ2HJ2QHARN2fwU=
Subject key identifier: AA:A0:D6:DE:5B:3E:17:77:1F:FD:C8:95:0C:A2:6C:F4:EB:56:DD:A7
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584842432D5F0E31B3DE209CAC00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5d4dc95b-2907-3858-a12f-eb8b86917a64.roa
Signing time: Thu 19 Dec 2024 13:45:36 +0000
ROA not before: Thu 19 Dec 2024 13:45:36 +0000
ROA not after: Wed 19 Mar 2025 12:45:36 +0000
asID: 397193
IP address blocks: 2001:500:124::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:43:2d:5f:0e:31:b3:de:20:9c:ac:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 13:45:36 2024 GMT
Not After : Mar 19 12:45:36 2025 GMT
Subject: CN=409cd4e5-ba4a-4492-8155-c6d013e8e9f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8a:8a:b1:da:4f:8c:f9:d7:74:3f:c8:27:f2:
2f:47:65:3d:0d:f4:85:ac:67:c7:7d:fd:02:db:cb:
c9:05:03:d2:2b:b2:3d:07:f1:af:20:e4:b5:ba:66:
b1:b2:62:9b:35:bc:5d:a7:13:ac:93:47:d7:2c:5a:
9c:bd:55:ba:44:f1:f7:6b:7f:60:6d:ac:4e:cc:25:
9a:1e:75:5d:e2:1f:57:61:3c:42:10:4d:1b:04:0d:
8a:74:f6:3e:18:a7:3f:c0:0d:00:0c:e4:3f:27:71:
0a:27:3b:2d:fb:d8:04:14:c4:bf:b7:1e:d8:8e:03:
10:db:ec:83:33:8a:63:fa:2e:a0:25:a0:d2:5c:02:
80:3c:ca:ee:21:43:e7:f0:73:30:06:f9:8b:3a:4f:
ec:ae:2d:d4:72:f4:b4:7a:7f:ba:9b:6d:70:96:be:
ae:35:c7:b0:3f:be:23:9d:f7:9d:01:12:ce:cc:98:
ae:da:f4:0c:29:55:e9:d9:ef:13:fa:91:73:99:29:
11:d0:5b:05:ac:42:50:c1:0d:d7:79:88:ac:be:dd:
2c:be:53:e3:8c:d7:fd:3a:0c:8d:29:9d:e2:5d:c6:
e5:34:01:d1:07:2a:c4:fa:dc:ee:14:4c:08:dc:2b:
dc:5e:9c:aa:98:c7:51:84:27:99:a7:96:37:b9:5c:
bc:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A0:D6:DE:5B:3E:17:77:1F:FD:C8:95:0C:A2:6C:F4:EB:56:DD:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5d4dc95b-2907-3858-a12f-eb8b86917a64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:124:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:23:63:c8:14:df:d6:49:b4:29:d2:e7:14:ed:e3:63:94:28:
59:75:e9:b1:25:95:44:e4:42:7f:5d:67:89:71:d2:23:85:f4:
cc:f0:67:63:58:d2:1c:c9:14:0d:3d:9c:db:4d:35:b1:1e:56:
df:5b:e1:07:73:07:a0:28:03:ea:df:a1:ea:cd:a6:18:3c:52:
d0:9e:46:8b:ae:5d:00:bf:eb:20:90:88:fb:85:76:6f:46:13:
8e:b7:91:52:47:a0:a7:50:1e:83:06:6f:52:4f:5b:1c:a9:99:
0a:aa:05:6e:0c:93:a1:d4:1f:f3:4d:a5:a5:21:5a:a9:9b:53:
04:4d:4a:3f:8c:0e:82:54:36:23:36:d1:d2:38:d7:73:86:53:
28:a3:26:3a:c6:1f:be:b2:87:18:07:d5:f3:c8:5f:40:7b:b8:
5b:33:8b:a6:d8:1e:d6:3c:8e:8f:76:8e:b5:6c:9c:27:5a:a0:
eb:e1:8b:90:fa:01:a4:af:f7:e0:3f:c2:a2:1f:a7:49:c6:af:
33:a0:39:79:19:86:92:a7:a4:de:fe:8c:91:d1:8a:13:00:33:
6e:8f:26:d1:33:b0:1f:34:b8:12:ce:95:b1:d9:8e:2b:97:43:
94:f4:4e:ec:3e:3c:42:6e:c0:eb:d4:1c:59:ee:8c:e4:c8:4e:
e7:bc:bf:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:09:45 2025 by rpki-client