Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6be85fc1-768c-32f6-9cba-626a6f5436b0.roa
File: 6be85fc1-768c-32f6-9cba-626a6f5436b0.roa (raw, json)
Hash identifier: 8HfQ7nNtO/CJL4ZWxQGzxEXRNhkUD4jqwo1Z9X4Sm6Y=
Subject key identifier: 4B:E6:32:E9:D0:75:43:E6:A5:E9:4A:F8:6E:B4:89:24:D4:69:DC:A2
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858484AAAD68FF6FBE8CE2FFA1B80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6be85fc1-768c-32f6-9cba-626a6f5436b0.roa
Signing time: Sun 22 Dec 2024 14:00:51 +0000
ROA not before: Sun 22 Dec 2024 14:00:51 +0000
ROA not after: Sat 22 Mar 2025 13:00:51 +0000
asID: 396570
IP address blocks: 2001:500:121::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4a:aa:d6:8f:f6:fb:e8:ce:2f:fa:1b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 22 14:00:51 2024 GMT
Not After : Mar 22 13:00:51 2025 GMT
Subject: CN=d5538c9d-0af4-4e57-ae54-3f2759abafb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:09:bc:08:d9:ea:3a:7d:ff:4b:db:ff:1e:b3:
2b:c4:e9:f1:37:35:fa:59:c4:7b:da:74:09:ce:2e:
05:6a:1a:c0:fe:08:af:8b:71:72:8c:eb:cb:ca:a4:
cf:99:f0:eb:45:9a:14:69:7e:74:34:6d:a2:42:5b:
e7:b1:07:b6:6b:1d:32:1b:ba:e7:02:b5:6b:79:61:
21:35:81:33:62:8b:d3:fa:44:d0:c1:09:8a:4d:fd:
dc:10:aa:91:bc:26:83:f9:62:76:c1:6c:b7:9c:5c:
e3:9a:22:c7:23:d2:d4:67:94:e9:b1:b9:37:8f:1d:
74:a6:09:e8:27:ad:9d:74:c5:0a:ce:ee:99:f9:f1:
8e:2f:e7:06:46:7f:d2:b7:b9:86:23:3a:c8:fc:69:
0a:63:1c:5f:78:74:6c:6a:50:5f:98:5d:a6:c2:d8:
5d:bf:47:93:47:1d:47:a4:73:40:ae:b8:eb:ce:c5:
e7:38:f8:a1:22:c3:0c:c9:09:de:24:2d:df:3a:6d:
fa:82:3a:fa:86:64:e5:8e:9f:1e:ed:0f:47:4d:d8:
7c:6e:36:68:4d:e7:01:5c:83:68:77:61:0d:97:5a:
5c:b6:8f:ed:6e:93:29:cb:70:0b:9c:24:65:be:56:
b8:98:30:4b:8a:e0:c6:01:a5:d7:91:da:2e:4e:6b:
b1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E6:32:E9:D0:75:43:E6:A5:E9:4A:F8:6E:B4:89:24:D4:69:DC:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6be85fc1-768c-32f6-9cba-626a6f5436b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:121:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b7:02:df:f6:78:10:a0:4d:3f:c2:b5:a5:6b:4a:58:f9:b4:87:
49:c6:e1:70:b5:4d:33:67:4b:9c:70:27:a1:5b:76:95:27:16:
86:fc:0a:f9:b3:b3:3b:e9:0c:40:11:62:0a:5a:f1:31:3f:81:
a8:22:cc:af:67:64:58:01:77:58:fe:b7:fb:4b:91:89:79:9a:
19:0b:87:b5:6f:f7:6d:57:69:be:b2:91:68:2b:4e:66:0b:22:
8a:90:92:f9:4f:80:7e:e2:74:5c:de:18:45:99:0b:05:96:df:
6e:9b:61:be:7d:8c:53:e8:28:f8:0f:8a:65:69:91:cd:d4:77:
39:e9:72:13:89:43:37:fa:c4:1d:8f:74:14:ed:53:68:32:f3:
33:15:cf:85:1d:2c:8c:2e:5a:9c:5f:39:29:56:67:db:1a:be:
1a:67:95:cb:12:c1:13:e5:28:3f:b1:07:68:f4:a5:ad:da:54:
40:5b:cd:12:0f:f5:2c:ca:30:7e:2d:f6:29:09:79:25:28:f9:
4f:6f:3b:6e:1a:d0:c1:e4:f3:a2:4b:ac:fd:08:94:36:4c:1f:
0a:bd:7c:80:98:df:78:a4:dd:1b:d3:d9:4c:1b:e6:e9:be:a0:
ba:58:65:1d:a2:9e:00:c2:df:aa:85:d3:45:39:8c:0c:9e:b0:
f3:36:e1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:52:31 2025 by rpki-client