Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6b84e55d-b5ef-3271-9f86-c828c4b4dd6e.roa
File: 6b84e55d-b5ef-3271-9f86-c828c4b4dd6e.roa (raw, json)
Hash identifier: 7kUIKRQedtS7+bqsVQFwuchPODVJS3fv6ntuQQRHj3E=
Subject key identifier: 32:9B:11:B5:03:3E:76:3A:DE:3D:81:7B:8C:B7:29:BF:08:53:0F:7B
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848530AFE0C1CAA15104AE34700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6b84e55d-b5ef-3271-9f86-c828c4b4dd6e.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 396588
IP address blocks: 2001:502:cbe4::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0a:fe:0c:1c:aa:15:10:4a:e3:47:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=f816c3b6-4d5f-434c-a384-883e44b53ec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d9:94:e5:cc:5f:7b:17:27:55:c5:2d:52:41:
1e:f0:94:8f:9c:83:40:2f:6d:7e:b3:a5:65:15:84:
50:2d:a4:7e:2d:c8:a2:61:b8:99:1d:df:b7:33:a4:
55:6a:5d:ad:38:b9:fa:e2:eb:fd:57:c5:fe:7d:58:
bd:0d:87:ee:50:e8:99:6a:86:6c:9a:c6:5c:ad:cd:
05:af:bb:de:28:64:a5:17:25:13:5f:a5:70:0c:b7:
a6:08:be:49:70:bc:33:e0:0b:d3:35:57:f9:69:d9:
a8:15:8d:1d:0e:88:a7:66:c6:de:0b:55:d7:9d:8e:
10:96:a7:a3:4e:9f:ea:5e:da:7e:c4:30:cf:e2:f1:
68:53:48:81:25:91:85:65:65:c8:99:a3:6d:ed:81:
06:de:a0:69:e7:b1:22:37:24:90:92:af:06:e5:77:
f6:c9:83:3b:4b:d9:f4:14:18:04:fc:9d:71:a6:c9:
29:b3:37:cf:fd:d3:40:df:8f:a8:67:df:8d:4e:6e:
da:9f:fe:c1:c9:34:7f:a8:22:e3:cd:10:a2:f8:cf:
27:fd:65:b8:4e:60:45:72:d6:73:8d:0a:1a:ca:d6:
d6:ac:b7:05:46:f6:67:b0:1d:20:00:6d:e6:87:d1:
5a:6b:32:86:64:a9:30:8e:ed:55:14:74:5f:3f:56:
48:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:9B:11:B5:03:3E:76:3A:DE:3D:81:7B:8C:B7:29:BF:08:53:0F:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6b84e55d-b5ef-3271-9f86-c828c4b4dd6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:cbe4:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:eb:59:38:43:0f:f5:fb:42:7d:1b:8d:9c:a7:a5:62:b8:99:
ad:4e:2b:14:37:5c:a1:43:89:3e:e7:45:98:f8:1b:7b:c4:55:
5e:48:ff:ad:a2:2e:31:cb:2f:b3:93:7f:4b:2b:32:66:17:15:
6a:a4:08:e6:78:6e:d8:82:3d:45:d3:c7:49:32:f5:63:00:29:
5a:87:18:b2:ac:a2:ba:ad:c9:2d:8f:9e:83:5b:c7:b4:8c:a2:
d4:8f:c6:b6:f8:a4:d6:ec:69:95:a6:7b:01:0a:c1:fe:a4:f1:
81:e1:e9:55:44:ed:4d:ff:b1:ab:1e:7e:22:76:a6:08:5a:fd:
be:23:0d:57:cc:43:ea:a8:78:50:b5:c8:e6:9d:01:03:ea:1f:
0b:9d:77:2b:86:3c:62:a5:ea:5f:c7:78:e3:f0:fe:7f:1d:af:
b2:8c:48:f5:db:9a:0e:b0:8a:04:3e:c2:b8:65:4b:63:17:8d:
ea:a4:b7:34:03:0f:8e:fd:a8:dc:1e:77:6f:0f:d3:2d:d0:43:
b2:9c:71:7f:26:12:de:be:83:03:a7:b7:f2:86:27:a4:84:94:
1c:6d:e6:e6:d6:a2:13:9a:57:95:ef:57:2a:d4:2f:c7:cf:03:
da:ee:92:cb:f0:60:fe:4e:91:bc:e1:b2:c4:ff:6d:55:28:c9:
d1:b5:49:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:12:13 2025 by rpki-client