Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/71824ada-8f3c-305d-a720-6fb730cd6356.roa
File: 71824ada-8f3c-305d-a720-6fb730cd6356.roa (raw, json)
Hash identifier: OrTdHkPwTEOk+tIaqmXBwoh/htPjY7Y8GRAuruYbV9w=
Subject key identifier: 01:CC:76:B0:63:F5:90:BE:58:BC:B1:2D:00:68:55:D2:01:92:0F:94
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584861005BFA76CA372C1FBFC780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/71824ada-8f3c-305d-a720-6fb730cd6356.roa
Signing time: Mon 30 Dec 2024 14:00:51 +0000
ROA not before: Mon 30 Dec 2024 14:00:51 +0000
ROA not after: Sun 30 Mar 2025 13:00:51 +0000
asID: 36623
IP address blocks: 2001:501:8a29::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:00:5b:fa:76:ca:37:2c:1f:bf:c7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 30 14:00:51 2024 GMT
Not After : Mar 30 13:00:51 2025 GMT
Subject: CN=74c04f2c-9171-4483-9890-0890e89f8bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e6:27:83:cf:79:a7:66:e9:97:a0:93:23:66:
04:86:9c:81:5a:0b:81:62:f9:9e:1d:55:fd:cf:d1:
6d:1e:d7:74:97:12:ff:04:37:2f:3c:e4:9f:77:fa:
b8:47:45:b1:60:f1:dd:2f:c5:96:29:01:8a:2a:a0:
07:98:90:05:70:c7:12:1a:34:9f:54:88:e5:0d:04:
aa:6c:82:c5:49:95:eb:46:93:28:f8:2d:7f:c0:d0:
ad:d8:6f:7e:f3:f1:49:09:5d:83:c9:e0:6d:23:1f:
7a:3e:dc:fc:e5:f6:82:4a:8d:87:48:70:d7:47:1b:
40:ef:34:25:25:6f:57:57:60:f2:54:d5:4e:f7:f4:
7a:49:93:77:88:fa:4b:04:9d:d8:be:57:a8:5f:ac:
50:c1:52:6b:48:8e:d0:f6:02:64:d5:32:5b:65:5a:
e8:ec:41:be:ea:ca:b3:46:2f:45:46:1e:5a:25:30:
aa:d4:a7:b6:3f:ec:b5:b8:41:54:11:95:13:8a:33:
57:6d:2d:be:7b:35:27:b9:65:84:5c:f4:a9:fa:2a:
17:c9:5c:e9:2a:71:22:63:49:af:52:6d:40:12:18:
d4:74:c6:79:c4:8c:39:ac:6b:30:5a:b7:1e:2d:8a:
7a:78:76:34:56:31:8b:d4:45:eb:4e:56:6f:9d:73:
ad:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:CC:76:B0:63:F5:90:BE:58:BC:B1:2D:00:68:55:D2:01:92:0F:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/71824ada-8f3c-305d-a720-6fb730cd6356.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:501:8a29:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:d9:5a:34:d0:1e:14:62:56:10:40:d4:d6:9c:f6:eb:3b:37:
62:62:8d:e5:0e:8c:b8:9a:e5:9d:28:2a:70:cb:a1:c3:88:ab:
00:ca:54:e9:93:78:71:4b:5f:6d:1f:5c:8f:98:bb:27:c4:54:
97:a4:37:e4:bf:24:85:88:32:96:7b:03:cb:cb:49:b6:05:08:
fb:17:f3:23:7f:d0:74:3e:ad:ce:0b:06:83:53:b8:ce:42:58:
73:b3:74:30:53:5b:12:b6:74:72:df:8b:45:a5:d5:2b:7b:fa:
1d:ac:ec:35:47:0f:27:52:4b:f3:05:b0:58:b5:3d:16:33:83:
48:e1:0f:7c:fe:a4:9c:08:ed:6c:84:be:ef:fc:a9:40:6e:ed:
00:3d:08:9c:45:cc:9c:97:fb:53:98:7e:11:8c:75:8a:0c:c2:
eb:f8:75:aa:50:50:73:46:e7:32:d4:31:1d:a0:5e:84:47:67:
3a:1e:55:a9:de:b9:dd:6c:67:ef:c1:14:c9:22:b5:6a:fd:08:
d1:8e:d8:0f:c1:e9:7a:05:a5:35:3d:18:40:ed:4d:d6:d4:f4:
b4:84:c9:fc:3a:75:c6:15:8f:69:2c:37:f6:bc:f3:5f:32:b4:
fd:7f:4d:a9:46:83:ff:55:e5:3c:d4:42:c4:f2:5f:27:ce:f3:
cd:c2:1d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:20:22 2025 by rpki-client