Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/60d78dd1-0b82-3271-8de4-4f9a15ab0615.roa
File: 60d78dd1-0b82-3271-8de4-4f9a15ab0615.roa (raw, json)
Hash identifier: zFQrRpx/mBl+MxUKZFe0ptNaf1EegBmYS6OT/E8Hcrw=
Subject key identifier: BE:0E:AD:8F:63:B1:14:59:2E:2A:9E:94:6F:23:EE:91:D1:72:14:52
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848372011AF2B33C99047E21280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/60d78dd1-0b82-3271-8de4-4f9a15ab0615.roa
Signing time: Sun 15 Dec 2024 14:00:53 +0000
ROA not before: Sun 15 Dec 2024 14:00:53 +0000
ROA not after: Sat 15 Mar 2025 13:00:53 +0000
asID: 396602
IP address blocks: 2001:500:123::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:37:20:11:af:2b:33:c9:90:47:e2:12:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 15 14:00:53 2024 GMT
Not After : Mar 15 13:00:53 2025 GMT
Subject: CN=7e30052c-2030-4fe1-af92-16ba1138ed5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6d:13:3f:7d:8d:85:97:68:31:7c:9b:9e:b0:
28:9f:0e:29:60:7d:3c:c3:ff:e3:80:98:a1:d0:c3:
ed:66:8e:f9:a3:81:51:ac:8d:d5:43:85:31:56:99:
02:42:7d:36:42:ba:9e:ee:dd:79:b9:ec:21:a1:a9:
ef:27:2d:e8:8a:77:0b:ef:26:25:0e:29:d8:a8:83:
0f:af:31:34:81:98:c8:b3:52:21:cf:70:bd:aa:9c:
9d:68:cf:c1:ca:9d:70:0a:5f:2d:aa:1d:08:78:70:
2a:8c:c8:df:96:34:d1:7b:74:37:a9:80:c7:53:59:
95:c5:d1:82:66:01:f2:7f:10:10:c2:d0:46:46:56:
dc:15:90:fb:86:fe:c0:47:7d:23:f2:ac:1b:16:4b:
3d:68:90:82:88:b2:43:1c:29:1c:39:ab:ec:a5:11:
77:2d:b2:e6:31:4f:d0:3f:bc:6a:a8:f4:9c:83:61:
2b:de:87:99:4e:33:69:52:82:94:5d:8e:45:18:8f:
77:ee:c7:d2:73:a7:81:33:a6:09:fd:e0:c6:17:12:
07:cc:83:ab:0a:51:7b:28:86:bd:bb:cc:0c:f5:8f:
7d:e8:9c:f2:66:26:b7:04:7c:4b:ae:e1:15:ad:3c:
59:7b:47:fb:29:b1:cb:e0:99:1b:d0:98:db:62:26:
75:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:0E:AD:8F:63:B1:14:59:2E:2A:9E:94:6F:23:EE:91:D1:72:14:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/60d78dd1-0b82-3271-8de4-4f9a15ab0615.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:123:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:2a:23:13:7b:ef:13:b7:42:c3:52:75:e6:1e:24:32:c8:c8:
9d:00:84:b5:72:e7:5d:f9:0b:fe:2c:2e:89:eb:eb:b1:2e:51:
a6:26:4e:8d:bb:1a:34:3d:b8:a1:c2:ef:4c:8b:3f:e8:5e:5f:
a9:c0:a5:c4:51:f1:ca:b5:b6:4b:16:39:fb:33:4d:6f:c9:c9:
8f:5b:82:b1:52:64:09:9e:0a:c8:20:89:21:8a:72:0b:2d:9e:
f5:02:27:2a:61:79:5f:d5:d0:57:cf:c1:64:b8:6f:a4:22:d4:
a9:b7:03:72:3b:fc:07:ab:14:2d:c5:7a:19:83:88:3c:91:2a:
d0:89:dd:a9:77:a3:e1:ec:bf:91:0f:b6:ab:38:20:48:0f:42:
78:d1:99:c8:06:db:27:5f:f5:49:c3:23:a5:c9:55:ae:4c:23:
07:a6:65:14:0d:98:7c:35:b5:e1:f5:93:dc:82:08:26:54:aa:
18:0c:06:e1:21:6b:a5:46:c4:7c:92:12:c6:83:59:d5:3a:98:
c7:74:e2:88:5a:9d:a5:c8:5d:e8:70:2f:8e:15:c0:b8:e1:92:
3c:23:7a:eb:29:f1:d1:45:bf:1c:21:fd:c7:f5:e8:9a:ab:60:
74:fc:58:0b:50:e7:38:cd:f1:32:e3:f9:8c:0e:08:25:dd:f4:
75:e3:ad:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:35:13 2025 by rpki-client