Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/686b297b-3c11-30b4-8770-65d155cce8a5.roa
File: 686b297b-3c11-30b4-8770-65d155cce8a5.roa (raw, json)
Hash identifier: BOTW0WUtocbbXkK/DOsoHbK3vIXMamGYJIw2AQi2Qkg=
Subject key identifier: 3B:5B:02:EC:F1:1C:CC:14:51:9E:3F:48:43:14:F6:BD:24:56:E5:D2
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584861005A8D9FDBA820A63BE280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/686b297b-3c11-30b4-8770-65d155cce8a5.roa
Signing time: Mon 30 Dec 2024 14:00:51 +0000
ROA not before: Mon 30 Dec 2024 14:00:51 +0000
ROA not after: Sun 30 Mar 2025 13:00:51 +0000
asID: 396543
IP address blocks: 2001:501:8a29::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:00:5a:8d:9f:db:a8:20:a6:3b:e2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 30 14:00:51 2024 GMT
Not After : Mar 30 13:00:51 2025 GMT
Subject: CN=6674f3d5-a570-409a-ad69-9065b6be3b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:e3:cc:a3:0e:85:9c:e0:77:b7:4a:6b:93:e7:
85:e9:fc:32:fd:48:b0:b5:4a:99:66:2b:75:e9:77:
97:a6:3d:b3:98:e4:b7:2e:59:df:ee:cf:d9:90:99:
1e:1d:a0:ca:ae:93:45:c6:1b:fc:e5:a8:12:a3:9a:
bc:dc:54:fb:65:87:e9:03:3d:97:51:89:50:d2:cf:
2e:cb:e7:8f:27:e9:1b:2a:fa:5c:43:1c:ff:5f:00:
65:f3:f9:14:8d:60:cd:f9:6c:54:ea:18:70:a3:b8:
f1:08:f3:71:3f:d8:12:7b:9b:f2:01:fd:b9:15:f4:
51:3c:a6:d0:3a:d8:15:7c:c1:e0:2d:20:3e:3a:da:
e6:75:9f:62:95:ce:28:7a:a2:d3:cb:27:48:25:d1:
6f:15:fe:fe:f2:87:c5:3a:8d:78:3a:9f:e8:50:26:
31:05:ed:c0:6e:ad:2f:87:89:9f:27:da:2b:23:ce:
ac:73:75:75:53:3c:86:72:48:59:f9:1e:73:8d:47:
60:e4:52:c5:3c:af:f8:6c:c1:c9:0c:e4:5f:56:cf:
c6:6f:6c:48:30:f6:46:1a:4c:c1:27:05:5b:52:01:
54:d2:34:e0:e1:b8:8d:9f:ea:70:b8:b0:d1:9b:76:
52:1c:9f:a7:38:ee:ed:f2:db:6a:55:db:6c:81:e6:
fe:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:5B:02:EC:F1:1C:CC:14:51:9E:3F:48:43:14:F6:BD:24:56:E5:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/686b297b-3c11-30b4-8770-65d155cce8a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:501:8a29:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:83:09:1c:00:c9:5d:79:9f:b0:e1:8c:c4:3a:a0:f7:10:bf:
2e:7d:d8:b6:27:08:cf:17:1f:13:86:9b:43:c4:1a:47:86:55:
ef:82:4a:da:1b:8f:a4:5d:eb:80:62:35:f4:25:fc:67:c2:47:
d1:96:e4:4c:6b:22:b5:1a:ac:a4:c9:b2:0f:a4:61:10:ac:c2:
4b:6c:86:2c:c2:5b:80:9f:76:f7:71:e7:62:e9:c4:ac:d3:77:
cb:6f:10:3b:a8:f9:ce:16:d5:21:e2:1c:26:c7:ae:0a:4c:81:
71:53:7b:1a:f1:b4:3d:8a:95:a2:9e:5d:f1:93:4b:c0:ac:18:
04:1f:f0:39:c7:85:cf:08:24:f5:c3:89:46:39:fb:9c:22:29:
d1:55:93:10:07:cc:90:44:96:9f:4a:76:1c:68:9b:26:42:08:
46:16:18:1d:87:64:b6:60:17:fd:0c:60:af:3f:32:5c:5b:05:
90:e7:38:e7:b3:f2:10:f6:f8:22:93:c6:51:2f:1d:c3:1d:ef:
52:95:dc:13:e1:6d:bc:00:62:e7:0b:e3:18:ba:26:02:09:30:
17:02:31:1f:4b:5c:13:5d:ed:54:64:c7:65:63:1d:dd:a2:da:
12:c4:5d:81:58:8f:02:59:3a:99:70:a7:2f:1b:fc:9a:d4:22:
05:8b:00:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:25:22 2025 by rpki-client