Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/72f4a2a6-4caa-3ad8-93f1-f58a65622bae.roa
File: 72f4a2a6-4caa-3ad8-93f1-f58a65622bae.roa (raw, json)
Hash identifier: Ds3Ux69S4IzSG5nW+iKDYOSocwvk8IVKbgqMeUEj5jk=
Subject key identifier: C0:BF:7F:E0:78:F6:E9:44:1F:BA:44:1D:93:B7:83:B4:46:45:77:6B
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489E5E42AAF39E137F40824880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/72f4a2a6-4caa-3ad8-93f1-f58a65622bae.roa
Signing time: Tue 21 Jan 2025 13:34:32 +0000
ROA not before: Tue 21 Jan 2025 13:34:32 +0000
ROA not after: Mon 21 Apr 2025 12:34:32 +0000
asID: 36616
IP address blocks: 2001:503:39c1::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:5e:42:aa:f3:9e:13:7f:40:82:48:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 21 13:34:32 2025 GMT
Not After : Apr 21 12:34:32 2025 GMT
Subject: CN=d548a1e8-9dc3-4a36-bf8b-70042208ec94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:93:4f:98:56:36:ea:1a:46:54:90:0f:40:fa:
f4:04:b9:b7:93:42:4b:3f:05:e7:cc:21:69:70:62:
67:98:e9:5e:8c:99:a1:36:71:b5:1f:cd:78:7c:a8:
57:37:13:e3:cd:98:49:bd:b3:21:2f:f2:c7:7f:39:
b4:72:9e:58:b5:e3:ff:74:15:5d:45:d6:e4:19:dc:
17:ae:53:cf:73:75:fc:32:fe:83:c3:9d:12:aa:e6:
99:35:01:5c:c4:bb:72:1c:e4:1f:f3:84:69:c9:fd:
91:dc:2d:71:45:c0:c7:bb:2d:5f:5d:58:44:e3:98:
4f:ce:5e:bf:a7:c2:3e:5d:bd:58:b1:20:28:c0:f8:
a8:ab:4a:41:60:db:56:b5:ed:70:6e:9f:c5:3a:d6:
20:23:43:a7:05:ba:a8:7b:92:a1:80:52:3f:d6:d8:
70:4f:ad:2f:03:14:5d:85:e0:a2:32:5b:3f:6f:36:
ad:6f:1e:33:53:55:13:83:2f:8f:d6:08:f2:0a:6c:
90:55:a4:d6:d6:5f:ab:c9:25:84:28:77:3f:d4:33:
99:9e:c5:6b:c8:3d:32:ad:eb:b1:d9:29:f3:99:52:
b0:bc:d9:bf:cf:37:6b:3a:3b:5e:56:aa:9b:e2:db:
36:ed:8d:3d:2f:cf:7e:58:41:e1:fd:28:b8:fa:3f:
46:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:BF:7F:E0:78:F6:E9:44:1F:BA:44:1D:93:B7:83:B4:46:45:77:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/72f4a2a6-4caa-3ad8-93f1-f58a65622bae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:39c1:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:48:1d:8e:fb:fd:62:cb:75:aa:f9:bc:c4:fe:ee:29:ed:44:
80:5d:b8:84:ac:96:99:25:48:62:5f:93:8b:64:1b:fb:8c:ae:
fc:e1:4e:dd:fa:d5:93:85:a0:3a:b8:09:70:c7:24:9c:05:b1:
b1:d6:15:d4:52:61:93:d2:34:47:ac:48:53:96:94:48:45:a2:
8b:fa:db:b0:b8:c9:3b:ef:03:d5:85:80:ea:2d:07:74:2f:9a:
14:50:18:ba:a8:37:8d:0a:2f:3d:bb:61:de:b8:53:4a:af:2c:
35:40:3c:8e:4b:b4:57:cc:e2:3c:1c:a6:e3:68:84:53:be:19:
04:ee:76:22:64:ae:09:e4:d1:55:98:cd:8e:fd:df:a4:7d:53:
b0:8f:d6:71:31:b6:ef:91:c7:cc:a1:fe:ba:fd:44:9d:8a:25:
dd:b7:4c:ff:c1:56:4c:73:18:b1:d0:5e:49:cc:4f:c6:96:d2:
66:24:7b:48:6e:24:8c:3d:1e:df:fa:7b:71:cb:32:d6:b1:8b:
c3:09:62:8d:5a:0d:55:8a:2d:0d:37:6d:61:e1:b9:1d:44:a9:
35:29:8e:3f:71:d3:9d:09:24:e6:d3:30:9f:c0:63:97:73:53:
55:64:f8:18:fe:57:29:1b:fc:f8:00:f8:7a:00:87:8c:a0:ef:
ad:3a:d5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:52:33 2025 by rpki-client