Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7d10c588-2d28-39da-accb-74d67405c2a7.roa
File: 7d10c588-2d28-39da-accb-74d67405c2a7.roa (raw, json)
Hash identifier: Yi4uNftXz9986uKai5tqCAcvFymWJmYcOcX2odbZsJE=
Subject key identifier: C4:F6:8B:44:2B:88:53:93:F6:B6:2A:3C:B0:BA:F5:70:19:D2:D2:82
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584858A048CB6CC0F44475C84000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7d10c588-2d28-39da-accb-74d67405c2a7.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 396608
IP address blocks: 2001:500:120::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:48:cb:6c:c0:f4:44:75:c8:40:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=43d94b2d-ba63-4858-b991-9f4fe25555cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:cb:2c:1f:5e:ff:45:6d:af:4f:7e:c9:f2:0e:
ea:4c:d5:c2:e9:8b:8b:af:18:f7:a1:e7:37:df:18:
65:2a:08:43:6e:c1:09:e2:07:c0:7b:e3:0f:37:83:
e5:6b:51:66:8c:3e:7a:bb:b8:43:e9:34:ce:04:ad:
1b:83:42:d8:c0:44:41:c9:a9:14:6e:de:6c:46:5e:
26:fd:12:d4:5d:f5:97:5c:93:48:3f:dc:d6:d5:be:
3e:6b:f2:47:71:bb:3f:e3:5c:74:75:4f:45:90:d7:
8d:43:cb:d0:c4:75:b3:b8:67:c2:03:64:87:af:09:
35:c8:23:4e:f9:66:13:77:3c:2b:04:bc:70:f6:30:
fd:3b:2c:99:c6:dd:75:51:f6:c0:66:11:d4:93:5c:
74:9f:51:fa:6b:92:d4:2c:21:e6:a2:b5:39:7a:8e:
25:87:4e:2a:68:3f:59:8c:48:56:c9:3e:b4:a9:e5:
5d:bf:74:23:86:87:8d:6b:bc:72:51:67:6d:07:4a:
95:05:92:70:f4:97:03:65:aa:da:55:f7:6f:bf:13:
6d:02:eb:70:34:f5:0d:7d:cd:4c:d5:42:b5:ae:d5:
f5:13:8f:35:b6:81:64:da:89:9f:ed:6f:5a:98:37:
5b:f6:ab:fb:ed:05:7c:e7:ce:02:c5:ec:a6:33:70:
04:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F6:8B:44:2B:88:53:93:F6:B6:2A:3C:B0:BA:F5:70:19:D2:D2:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7d10c588-2d28-39da-accb-74d67405c2a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:120:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b7:fd:9a:3d:53:0c:dc:26:aa:27:b1:d9:e0:b9:d8:6d:91:ee:
e0:32:e5:ba:28:17:78:78:26:46:63:2d:fe:d7:d3:7a:ac:91:
43:b1:b7:52:1f:6e:e5:d7:14:d7:62:01:8e:c0:3d:a9:d8:99:
19:6e:00:a8:39:bc:8d:d9:5f:da:23:12:a4:69:25:e0:03:09:
2d:05:c6:58:af:f4:7a:b1:a2:9c:09:ab:a6:89:2b:2a:eb:97:
92:91:8e:7b:ff:18:e7:62:d6:6b:c0:b0:f9:4c:a8:d6:c9:24:
e3:9a:a3:f3:e2:5c:28:5a:b5:5b:3d:4b:d1:b7:0e:92:38:be:
df:81:ae:08:36:a6:38:9c:26:1e:a2:79:ea:7f:9a:b5:7b:ad:
97:99:dd:66:b4:29:fe:3a:dd:b9:7e:b3:56:9e:aa:f7:0a:4d:
a8:31:07:6f:4e:c7:0d:33:48:c8:85:80:8d:64:7e:36:6c:92:
c7:06:de:6a:ea:67:de:42:8a:7a:a6:c1:ec:aa:1d:96:d7:85:
9a:29:6c:dc:54:21:ec:f7:92:60:b9:c1:34:4a:83:42:ea:fe:
a3:c2:98:c6:9e:a9:ec:c5:ce:be:d6:fe:19:33:77:2a:6c:5f:
94:a4:3d:fc:b6:8c:5e:a7:db:a7:58:26:bf:e5:6a:b0:cc:b0:
24:81:a0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:18:11 2025 by rpki-client