Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/76779b26-afe4-39d6-bb60-dcef0c8f91aa.roa
File: 76779b26-afe4-39d6-bb60-dcef0c8f91aa.roa (raw, json)
Hash identifier: 8bHfXrRha7fB5dY5n5ijWjPDwl28BY/RdOz5bMeF3JE=
Subject key identifier: 8E:F7:0F:D5:B6:02:2A:44:C4:FC:47:76:33:2F:E4:C0:A3:F3:08:45
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489BA0B9290318CECB4F15DA20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/76779b26-afe4-39d6-bb60-dcef0c8f91aa.roa
Signing time: Mon 20 Jan 2025 14:00:51 +0000
ROA not before: Mon 20 Jan 2025 14:00:51 +0000
ROA not after: Sun 20 Apr 2025 13:00:51 +0000
asID: 396606
IP address blocks: 2001:500:30ff::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9b:a0:b9:29:03:18:ce:cb:4f:15:da:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 14:00:51 2025 GMT
Not After : Apr 20 13:00:51 2025 GMT
Subject: CN=36d42f0a-4c4e-442e-8e84-93f0389a149e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6e:28:ba:db:d6:98:df:32:87:87:6c:b2:18:
9e:26:8e:73:29:81:bb:d0:1d:b9:cf:c3:6c:58:6f:
1c:99:fd:4a:da:ac:61:a0:25:1f:7f:29:9d:7d:3a:
ec:38:d0:ff:46:17:95:f5:1c:55:f9:29:01:c8:3f:
9d:dc:56:b5:3f:17:0e:e9:bb:f5:40:93:a8:5a:0b:
c0:15:4e:5d:aa:17:8e:a0:0d:1c:55:7b:2a:f4:4e:
f2:0d:99:c2:d0:60:dd:d7:2b:c6:79:44:60:fc:66:
fc:22:9c:8f:13:3d:65:91:4c:e1:37:c6:fe:e1:e5:
a9:42:e0:70:64:6f:6e:fe:5b:f9:18:9d:00:41:7b:
b1:71:f1:ce:fa:1f:a1:70:51:93:a3:f3:39:3b:c6:
2c:43:a4:d6:03:7e:77:06:ac:b6:5b:f1:64:5f:45:
43:aa:3e:01:b3:86:01:6b:10:00:e2:6e:0a:0f:02:
24:91:09:77:bb:71:91:41:36:c4:a8:0a:03:63:cb:
28:98:b1:63:d3:51:04:4a:62:ed:75:a1:fe:05:c2:
ac:8d:fb:1b:b2:9d:82:2d:cf:d8:5f:4e:67:61:3a:
d2:61:ad:02:f8:61:0f:66:d0:f5:ac:8e:fc:dd:59:
68:c4:09:10:31:82:0a:0e:fa:51:d8:49:ce:0e:6e:
14:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F7:0F:D5:B6:02:2A:44:C4:FC:47:76:33:2F:E4:C0:A3:F3:08:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/76779b26-afe4-39d6-bb60-dcef0c8f91aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:30ff:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:f2:e1:f6:86:e4:e8:65:d5:ce:74:b6:7f:8c:b9:52:e4:c3:
22:a2:7c:4d:23:7f:5a:33:dd:c9:12:df:58:75:fa:10:50:4c:
36:14:e2:65:a1:64:ee:17:a3:73:f6:a2:85:cb:a7:6f:0c:13:
d0:3a:f1:e3:60:58:5a:bf:3c:00:b0:bb:33:84:c0:0a:75:91:
d8:e6:6e:34:a9:41:78:52:b1:35:87:39:7f:04:aa:ec:e1:9c:
9a:c4:f5:a6:56:1b:39:f0:bc:71:54:e6:18:79:c2:db:34:01:
51:b5:c6:8b:31:c3:c0:8c:5a:43:ad:dd:23:d2:75:9d:f5:f4:
dd:a6:ed:76:8f:08:3d:e4:dc:28:07:a1:24:46:e0:e9:a4:aa:
0d:ad:f7:2e:b7:60:79:43:c2:71:fc:c5:7f:e9:cc:b9:fa:f3:
18:15:bb:28:a8:e2:b4:bb:33:82:17:03:ca:69:ea:b2:11:fc:
b8:7f:d6:c2:6f:d0:5a:15:20:d3:bd:22:e7:74:87:f8:a2:ac:
ef:5f:8b:a8:84:91:01:a9:fc:9e:72:c2:3a:a0:a1:fd:5f:2a:
9c:c4:c0:80:70:7e:ac:13:ed:0b:4b:c3:8c:f8:13:02:c9:87:
ac:bd:fa:f4:d9:35:ba:65:48:86:0a:70:79:c7:56:31:b6:7c:
61:a6:85:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:17:42 2025 by rpki-client