Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7a93a86c-2f97-3fc8-91c6-bdd6d351e3e8.roa
File: 7a93a86c-2f97-3fc8-91c6-bdd6d351e3e8.roa (raw, json)
Hash identifier: DkI600whJLVvMJ40BxJm/NciFJd7d9m0i3S7bdH6/Sc=
Subject key identifier: 26:7B:DC:D3:D1:C5:02:9B:85:E2:47:8B:C3:00:BF:30:0F:E4:A0:94
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584842430673C80BC13A7C41C1C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7a93a86c-2f97-3fc8-91c6-bdd6d351e3e8.roa
Signing time: Thu 19 Dec 2024 13:45:17 +0000
ROA not before: Thu 19 Dec 2024 13:45:17 +0000
ROA not after: Wed 19 Mar 2025 12:45:17 +0000
asID: 396610
IP address blocks: 2001:500:125::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:43:06:73:c8:0b:c1:3a:7c:41:c1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 13:45:17 2024 GMT
Not After : Mar 19 12:45:17 2025 GMT
Subject: CN=16e8028c-c5fe-48b5-8626-0d148b60dda1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ca:69:12:2c:ea:24:40:76:61:63:c7:59:10:
a5:a2:0d:80:a7:32:01:c5:ff:94:e5:1d:db:e5:02:
9c:c7:7a:3b:0f:3c:1e:b5:80:35:37:f8:9b:c3:05:
38:b2:f0:08:1b:6f:f3:99:84:c0:5f:c0:36:72:1a:
67:d9:a7:84:9d:89:96:ee:a2:74:62:8c:b8:7a:57:
81:ce:26:5d:aa:2c:ce:e8:fc:d7:22:19:8e:6b:ad:
d7:a1:2f:e0:ab:a8:e1:20:49:a2:e4:63:3e:85:83:
eb:79:bf:3b:08:0f:66:22:0c:83:a3:a8:fc:0f:3f:
79:3b:4a:01:79:27:3e:75:d5:f8:ae:00:34:27:47:
0b:82:09:2c:f4:ca:66:21:cf:90:72:ae:21:5c:a9:
e8:56:5e:e9:2c:71:9e:aa:ea:24:8c:f0:ca:46:e2:
d8:3b:f0:e4:2d:3d:54:e9:7b:a0:16:e6:ae:d0:39:
7e:db:f1:35:a7:47:46:b3:9d:ad:f5:b7:66:dc:02:
ac:73:54:af:99:21:96:ea:64:7f:cf:ed:c9:a5:34:
bd:e3:92:0a:ef:ad:78:62:ca:ed:4b:f4:0f:fb:0f:
de:3c:66:d1:3d:86:b0:92:3d:2b:68:cb:88:87:2d:
e8:3b:d6:38:00:dc:52:e0:0f:d9:1e:bc:7c:a5:41:
ac:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:7B:DC:D3:D1:C5:02:9B:85:E2:47:8B:C3:00:BF:30:0F:E4:A0:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7a93a86c-2f97-3fc8-91c6-bdd6d351e3e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:125:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:dc:9a:9b:86:a3:92:8b:3f:aa:ac:fd:4d:24:e1:57:96:35:
f6:57:8d:d6:36:7d:55:4f:91:0c:03:ac:47:c3:f7:ec:f9:cf:
fe:39:d0:a3:0c:95:d7:8c:8c:ed:57:64:45:6a:8b:1c:0f:05:
80:95:1d:c2:c6:51:d1:8b:69:ca:e1:54:74:47:e7:f5:99:1c:
34:df:32:a8:90:f6:a9:01:7a:cb:a9:92:95:fa:8c:16:dd:32:
0f:60:63:c7:fa:12:44:47:38:80:93:ae:8c:4d:d8:ba:84:bd:
aa:41:fa:10:5f:67:37:8b:c7:18:97:95:dc:d6:6c:bb:27:18:
11:1a:8c:07:4b:fc:66:67:31:a3:7d:b1:6f:c3:ed:4f:3f:9c:
c7:5e:8f:e4:f5:b1:4a:69:f9:ca:47:69:4e:33:38:13:a7:e0:
94:9d:4f:54:74:5d:07:a8:d3:7f:af:7e:0e:f3:9d:cf:54:47:
ac:8b:b4:94:75:98:d7:34:78:e8:5e:d5:5c:dc:1f:fd:d4:d1:
3d:f9:16:ca:d2:98:2f:be:96:29:6f:0c:cf:77:e2:d4:3b:93:
2c:04:7f:63:20:69:10:c8:c4:8b:7b:d6:e2:fa:fb:92:db:be:
e3:7e:0a:02:93:b5:6f:a1:62:84:74:16:92:be:52:1a:81:02:
ac:c8:fe:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:01:04 2025 by rpki-client