Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/60749e80-553f-3546-b604-ceadbcf96490.roa
File: 60749e80-553f-3546-b604-ceadbcf96490.roa (raw, json)
Hash identifier: 2STIpaNW2JceFpF3OlYQumjPfiYMzVjIvn2ed+oRO0A=
Subject key identifier: FA:23:41:FC:BA:C6:A2:34:3D:1B:D9:D3:4D:F1:70:0C:79:C4:C9:45
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858484515749BC832580A7CFDCFC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/60749e80-553f-3546-b604-ceadbcf96490.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 396565
IP address blocks: 2001:500:122::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:74:9b:c8:32:58:0a:7c:fd:cf:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=7d05ef1f-0b29-4826-91f8-9d741a3b74d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cf:be:8e:c8:01:33:3e:32:63:20:b3:ee:c1:
e0:6f:12:c0:7e:ac:c6:00:3b:29:83:68:84:99:07:
db:1c:51:df:19:fc:7e:0d:db:47:cf:9e:91:c2:8a:
af:c0:35:ab:9e:b8:39:bd:5e:82:ce:d1:62:2f:23:
2d:af:67:6e:50:17:66:92:ec:4b:5e:b4:27:87:43:
fb:0f:5d:a4:88:84:8e:12:e3:21:8e:f2:d0:74:94:
5a:34:c4:cd:b3:1b:6e:a4:fc:fb:d8:ca:0e:91:57:
b9:65:90:c0:df:35:df:4b:d1:bf:9f:94:2d:fd:9d:
7e:af:89:ca:73:ae:07:5e:4f:b8:4d:83:f0:ed:a2:
f4:f0:cb:e7:eb:ed:71:a9:29:9b:75:3f:41:b3:08:
dd:cf:91:e6:ca:b3:71:08:39:c6:33:ce:d6:eb:88:
bd:05:b6:96:c8:02:66:b1:be:48:f1:14:f5:b9:43:
ee:ad:37:09:7a:1c:d5:f4:24:50:c9:7a:1f:44:7e:
9a:e1:7e:fe:70:27:8b:ed:58:22:0e:8c:e0:18:03:
60:96:61:0f:a5:67:d2:11:89:84:ab:b4:29:9d:53:
97:43:7c:01:f3:69:74:53:fd:2d:b2:94:70:c0:f0:
f5:cc:63:33:95:2a:12:54:3e:3b:2e:e6:9e:90:e7:
27:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:23:41:FC:BA:C6:A2:34:3D:1B:D9:D3:4D:F1:70:0C:79:C4:C9:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/60749e80-553f-3546-b604-ceadbcf96490.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:122:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:32:fc:47:7f:74:99:13:49:51:5f:ee:6e:a0:9b:cd:73:32:
c7:73:2c:cf:31:1d:a0:4c:ca:76:b9:08:31:45:87:21:44:8c:
77:e7:8c:0b:58:d4:6e:8a:26:d0:2c:6d:a0:15:0e:0a:3f:15:
5d:f0:e8:6f:83:76:7c:70:08:e2:12:91:c7:4c:10:a0:26:8a:
43:86:81:15:27:04:89:76:e6:01:16:97:29:bb:f7:b1:ec:08:
bf:5b:7c:23:ac:c5:8d:5f:99:a7:b0:65:31:cf:cb:c3:42:fb:
5c:41:b9:8a:a5:c5:0c:83:16:d2:db:9e:b6:d7:4c:b7:ed:6f:
46:41:d1:84:6b:85:69:dc:08:dd:79:d5:e1:29:5e:a2:57:51:
6a:a9:b4:2a:ac:58:eb:7b:75:51:e1:c4:9f:d5:96:69:30:b4:
69:6a:7d:5d:da:bd:b7:74:9b:85:90:fd:59:5a:7b:8b:a5:1f:
ed:35:ca:f0:11:31:57:19:d9:31:df:a8:5a:2f:f1:7a:b1:56:
70:3b:9c:42:be:1f:23:be:10:7c:1e:af:5f:6e:d6:16:16:b8:
be:aa:12:ff:d3:b3:b9:bc:fa:d0:86:65:59:29:64:37:22:ae:
ee:e9:b0:d6:42:de:dd:a6:6e:e2:11:de:c6:22:b5:af:ed:8d:
07:01:6b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:33:47 2025 by rpki-client