Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/68ee0c7a-6a1c-3b02-964d-6315ac8389f9.roa
File: 68ee0c7a-6a1c-3b02-964d-6315ac8389f9.roa (raw, json)
Hash identifier: U4fuKV1/3u2XakpYIq9Tq0zOUcOjB3cQiRd6yZzlw28=
Subject key identifier: 23:89:43:09:AB:8B:54:13:D9:E3:79:E7:1C:0C:2B:2E:3D:12:92:6D
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858488DAB724327C28F85468AD080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/68ee0c7a-6a1c-3b02-964d-6315ac8389f9.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 396570
IP address blocks: 2001:500:7967::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:72:43:27:c2:8f:85:46:8a:d0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=4899cdcb-c134-46ac-b9a5-73b6d9799541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e2:d2:18:30:37:ec:06:08:c8:3b:ce:27:b8:
cf:9c:7f:d1:6c:3d:f1:f9:ab:01:d1:56:80:ac:3a:
ba:67:87:aa:d0:02:43:83:30:41:94:39:03:19:3c:
5f:7c:fd:2e:d0:7c:a9:fe:96:75:41:31:cd:5c:44:
f3:d9:d0:07:b0:b9:b7:35:9b:f4:5b:9f:03:1d:a8:
b3:04:c3:0c:81:9b:0f:e4:9b:bd:bb:6c:d5:d0:a0:
e2:67:86:8e:2d:73:e8:9a:11:ad:83:af:7a:02:03:
17:64:67:fd:db:08:eb:ec:38:1f:e4:91:ec:b7:18:
57:94:8b:14:5d:09:ee:b8:0b:30:36:60:e5:14:08:
b0:d0:4c:e1:50:63:47:2c:3d:ba:7f:91:f8:f0:a8:
fc:24:0b:e3:95:9f:c5:58:90:78:61:db:e9:b5:39:
00:ce:ce:a1:8b:36:6b:fe:a5:d7:aa:e1:fb:81:ab:
a6:a2:d4:82:fc:cb:32:07:a7:55:87:80:a7:0e:a9:
3c:bb:44:34:54:18:ac:5c:05:1d:70:72:1d:bc:91:
2a:97:26:c9:b1:15:b1:8d:02:50:5e:ad:2a:a5:47:
b2:92:b5:fe:ee:56:54:6e:52:63:3c:c9:d6:85:d1:
a3:7b:3d:38:f5:7e:79:0a:a1:d3:5d:9a:14:1a:04:
b6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:89:43:09:AB:8B:54:13:D9:E3:79:E7:1C:0C:2B:2E:3D:12:92:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/68ee0c7a-6a1c-3b02-964d-6315ac8389f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:7967:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:69:f6:b9:dc:1e:a7:0b:36:b8:00:c4:40:08:7e:a1:64:49:
ac:6a:11:54:06:6d:53:e7:b7:1e:28:12:bb:a5:52:8c:04:b5:
db:f4:ce:e3:1b:41:ef:20:47:9b:9b:fa:7b:f3:3a:8a:b0:a7:
4f:4b:45:82:ac:50:3f:33:44:a1:b6:76:3f:20:79:83:87:9b:
ed:70:6d:55:95:fe:a8:45:1e:1b:84:12:29:3f:94:fe:fd:a1:
1c:47:b0:42:fc:7e:93:38:cf:2a:17:0a:20:7a:21:dc:ae:ca:
66:24:e4:bf:b6:63:c1:03:54:3c:2e:d7:39:6a:d4:97:74:08:
9b:a9:32:07:c3:0e:f5:53:21:13:25:21:1e:c0:23:80:7f:51:
7c:4d:28:f7:ae:d7:6d:2e:24:a6:d0:19:04:02:27:61:db:58:
f2:ad:2b:39:09:ed:ad:e8:be:da:e7:b8:35:3d:00:05:7c:96:
2f:2f:49:e7:c9:a8:71:eb:14:51:24:30:c8:b6:3c:0f:24:10:
05:04:a7:0e:01:4e:a1:ff:fb:45:04:96:26:74:2f:e3:53:67:
c9:d8:7a:f9:f6:d4:a9:c0:7a:9a:c9:99:72:e4:68:a3:f2:f4:
4e:75:92:a0:40:34:03:56:17:49:e9:79:d8:88:70:bc:71:9e:
ee:f0:2a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:22:49 2025 by rpki-client