Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/79afde33-3c76-3b43-9670-ee6be9f1a517.roa
File: 79afde33-3c76-3b43-9670-ee6be9f1a517.roa (raw, json)
Hash identifier: rjLizRnL6IBzjXX2kdUU7wo4ii+gFBqfcneLlD5lRRQ=
Subject key identifier: D2:FE:8B:73:46:B6:68:56:F7:0B:B2:9A:C9:2A:59:50:4C:3F:5A:6C
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858484242FE6A7D3DE771C26BAF00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/79afde33-3c76-3b43-9670-ee6be9f1a517.roa
Signing time: Thu 19 Dec 2024 13:45:13 +0000
ROA not before: Thu 19 Dec 2024 13:45:13 +0000
ROA not after: Wed 19 Mar 2025 12:45:13 +0000
asID: 36623
IP address blocks: 2001:500:124::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:42:fe:6a:7d:3d:e7:71:c2:6b:af:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 13:45:13 2024 GMT
Not After : Mar 19 12:45:13 2025 GMT
Subject: CN=8a25efda-3e99-4197-b71a-e519f9dba5ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f1:bf:0b:4f:5f:ca:96:43:7f:59:8c:32:0e:
2d:8d:60:16:e9:e6:cc:10:62:c8:98:1f:12:5c:7d:
e5:ed:10:1e:69:fb:ed:cd:cf:80:78:32:37:f7:15:
39:62:1e:b1:6c:50:eb:5a:59:c8:50:b6:a1:6a:57:
cf:22:0b:f3:77:8e:39:df:f0:23:0d:22:1f:b3:5c:
97:f4:78:18:f5:fe:13:27:59:63:40:2d:e5:24:16:
76:6b:23:72:60:a4:e4:12:4f:7d:2f:2c:1c:44:30:
80:39:cf:3c:22:4f:a7:d5:8a:b9:cb:e8:2f:f7:31:
19:b1:0b:b4:89:c2:ed:e9:65:50:12:53:d0:a1:ec:
18:05:75:d0:3e:90:bb:b4:5b:25:aa:ce:20:f7:28:
8f:6a:f9:6e:cd:2b:3b:6d:e2:0c:50:dd:bc:a4:9e:
6c:8d:11:fd:e5:5b:dc:26:f5:9a:96:f6:d6:4d:5b:
13:9a:f3:89:90:1a:ad:10:e4:3f:1f:0c:ea:ae:04:
ed:5c:4b:08:1d:a8:8c:14:16:bf:5a:cf:73:6d:af:
bf:de:1a:42:4d:76:8a:38:ac:f5:af:0f:b6:7b:e0:
28:a3:5b:b6:57:57:ea:3d:fe:af:8b:05:f1:e4:b3:
b0:f8:b1:20:ec:dc:06:0e:3d:20:02:b5:59:1b:44:
a8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:FE:8B:73:46:B6:68:56:F7:0B:B2:9A:C9:2A:59:50:4C:3F:5A:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/79afde33-3c76-3b43-9670-ee6be9f1a517.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:124:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:a7:d5:6e:31:14:c3:4f:ad:cb:db:2d:d2:36:9c:5c:a4:94:
45:24:31:af:f5:17:73:6f:ce:86:5f:a4:17:7d:d2:2a:53:4e:
83:83:c7:de:e3:a1:6a:40:cb:0a:f1:b2:34:ab:13:ee:78:1b:
b2:d8:d1:00:8c:4e:6d:0f:ab:70:9f:5d:da:32:a8:b8:2c:07:
45:ef:66:f9:87:db:fc:70:d8:9b:6b:76:a5:c8:f7:08:45:b3:
e7:d4:cd:36:68:a9:61:b7:bd:a6:29:0d:95:c9:0f:cd:3b:74:
b6:88:7f:6f:88:5c:bd:37:d8:85:f9:67:72:71:1d:4d:0c:f0:
b0:71:7a:22:18:86:a7:2d:d6:78:4c:11:8b:90:52:f3:9c:52:
fb:14:5d:89:fd:ca:ab:6a:3e:cc:c7:e5:db:d8:aa:62:e3:f7:
41:2c:e6:44:33:91:11:e2:b5:60:77:f7:18:b9:0a:01:34:b4:
b1:f7:a7:06:af:4b:ab:23:8d:2f:fd:8c:37:d5:f5:88:41:35:
46:16:dd:a3:7c:85:f6:5d:ae:20:e5:1c:5f:ab:c9:88:9b:68:
fa:a0:2b:54:eb:5d:46:ae:6a:42:a7:65:0c:7a:ff:d6:3e:86:
81:fe:3c:56:15:c5:e0:da:d3:8e:e0:8e:9c:78:38:b3:b7:e9:
54:7c:cf:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:57:11 2025 by rpki-client