Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/72ec868d-0488-3742-9ce7-620af34031b3.roa
File: 72ec868d-0488-3742-9ce7-620af34031b3.roa (raw, json)
Hash identifier: wJ7XrZK+cqMmBLrRrAQ3C24wnDONNjqx4TkY9UmXXmk=
Subject key identifier: 82:B9:8D:55:8C:E4:71:8F:77:82:29:B0:BC:31:FA:64:D7:BC:D7:95
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858484AAAD200D4322BD96CF17800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/72ec868d-0488-3742-9ce7-620af34031b3.roa
Signing time: Sun 22 Dec 2024 14:00:51 +0000
ROA not before: Sun 22 Dec 2024 14:00:51 +0000
ROA not after: Sat 22 Mar 2025 13:00:51 +0000
asID: 396827
IP address blocks: 2001:500:121::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4a:aa:d2:00:d4:32:2b:d9:6c:f1:78:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 22 14:00:51 2024 GMT
Not After : Mar 22 13:00:51 2025 GMT
Subject: CN=aa67c6ba-9d2b-4424-8e65-dbce14614788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d3:4d:23:8a:29:b8:e9:a3:08:78:fa:77:da:
bf:69:df:39:a0:d2:f9:a4:cb:64:8e:48:88:09:10:
66:d9:9f:04:5d:5a:ef:e9:7e:3f:e1:f0:11:fb:e0:
75:e4:67:f2:c9:04:af:e9:2e:50:99:b4:a0:56:6a:
6c:08:1a:a5:0e:81:07:f1:6c:64:86:11:a3:4e:6a:
85:e4:2c:ac:dc:7b:39:10:14:9b:e4:73:cb:81:0e:
ba:8d:aa:03:61:11:d3:62:64:47:9e:e8:eb:0c:e5:
4a:2e:db:04:1c:dc:dd:ce:a0:27:41:f3:d3:ae:d9:
fa:e9:69:c0:90:4b:0b:88:53:8b:80:ea:85:1e:2b:
5b:f7:2b:31:b9:03:11:96:47:c0:d7:77:72:51:bc:
24:8f:2c:78:63:de:85:6a:06:23:a6:39:63:b4:89:
39:f4:bf:2d:99:c1:6e:f5:48:36:5b:25:b9:e4:21:
be:2d:86:98:b6:0e:7c:c6:99:f7:f3:0b:de:05:6d:
af:63:0f:18:7e:e6:1c:a8:6e:46:8e:af:37:b8:b5:
25:5f:fa:df:1d:18:74:35:7e:8b:66:bb:7c:7a:bb:
fb:c1:e5:fa:ca:74:70:71:88:59:6f:c8:88:a8:fa:
da:04:df:ec:87:23:f5:40:4b:fc:c8:51:f6:bb:ae:
ae:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B9:8D:55:8C:E4:71:8F:77:82:29:B0:BC:31:FA:64:D7:BC:D7:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/72ec868d-0488-3742-9ce7-620af34031b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:121:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:fb:4a:b0:e6:ce:c5:8d:20:13:82:eb:eb:4d:01:2f:95:b6:
21:05:10:de:23:94:e5:60:cc:a5:07:37:2e:bd:27:96:10:bc:
9d:ad:ab:8f:27:b2:6e:d7:e1:d1:98:d3:64:24:b0:7a:b3:ec:
97:2c:75:fb:81:e7:7c:ba:48:72:a8:fe:28:aa:90:e6:4f:9a:
28:a8:8a:28:8f:d5:0a:71:60:5b:28:19:d4:53:1f:41:17:2d:
bd:91:9a:f8:5b:07:29:1e:55:23:38:04:1e:1e:7f:12:4b:ae:
5c:43:6a:75:ae:38:12:5b:79:fd:93:1b:34:59:c1:55:5c:40:
19:12:de:5f:02:97:b2:4e:2d:a2:c8:f7:d4:d3:4b:4e:51:57:
53:d1:13:bb:dd:c3:1f:72:26:75:d3:33:01:c0:66:73:ef:d5:
27:50:ea:22:63:08:a1:1c:b8:03:65:62:b2:ed:f8:f7:3c:4c:
21:73:69:85:7f:52:13:f4:5a:20:33:83:f8:94:2b:ea:ab:6b:
34:33:06:ce:69:32:af:87:3f:b0:3b:2b:99:08:8b:ae:cd:d4:
05:61:2f:71:9c:9c:9b:5a:d7:c1:6c:20:75:44:72:11:f1:de:
e7:28:bf:c7:0a:0d:f6:46:d2:32:bb:53:b2:6e:20:9f:ae:2a:
10:32:1b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:17:11 2025 by rpki-client