Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7ebd941e-da92-3016-a10e-fccb24dc3317.roa
File: 7ebd941e-da92-3016-a10e-fccb24dc3317.roa (raw, json)
Hash identifier: tfTecJ7B4iD0pOgOLRaJrKVWPe5ihgviZlo+0dP0o8g=
Subject key identifier: A2:AA:86:B2:3B:AD:7A:DB:14:83:C6:76:06:FA:44:8A:C6:5C:0F:F8
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858484AAADB6255E6A4DC08AC3C80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7ebd941e-da92-3016-a10e-fccb24dc3317.roa
Signing time: Sun 22 Dec 2024 14:00:51 +0000
ROA not before: Sun 22 Dec 2024 14:00:51 +0000
ROA not after: Sat 22 Mar 2025 13:00:51 +0000
asID: 397196
IP address blocks: 2001:500:121::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4a:aa:db:62:55:e6:a4:dc:08:ac:3c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 22 14:00:51 2024 GMT
Not After : Mar 22 13:00:51 2025 GMT
Subject: CN=76db8b90-4428-4891-9aca-77d33de58b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e3:eb:69:f4:b2:4f:f1:96:68:0a:f5:da:4a:
f3:f2:79:05:32:7f:db:bc:14:2f:c0:75:fb:ea:e2:
da:2f:d3:6a:77:d1:15:d2:f0:22:25:49:39:9f:27:
6b:e2:cc:87:56:80:46:9d:f1:b3:b5:d0:5e:3a:df:
89:da:73:42:6a:7b:23:64:4c:02:35:d7:c0:c6:e7:
af:9a:64:1e:dd:3f:c3:13:a5:84:7a:ef:c3:ba:22:
82:16:53:41:e3:06:72:f3:14:63:da:97:d2:60:44:
4b:eb:7a:35:53:d2:43:5c:fc:b4:da:44:79:4b:fe:
66:64:9d:e7:6b:74:27:f7:c9:5a:39:8f:cf:97:27:
74:7a:7c:7b:98:96:85:97:d5:3b:cc:fd:2b:c4:20:
e6:d9:51:44:30:bc:fc:0c:fd:a7:08:36:6f:7f:a0:
3b:8a:c8:16:5b:e3:84:88:b7:d6:78:e0:f0:39:14:
c9:40:7b:dd:11:2a:4a:8a:5b:17:a6:d3:68:be:17:
e9:c0:97:93:90:bb:7c:b7:67:07:a9:65:90:c6:dd:
91:1b:8a:80:1d:94:e6:37:5e:85:67:aa:eb:43:76:
3f:3e:f5:5b:2b:5e:7c:17:f2:91:2d:db:06:82:c0:
a7:2b:fe:2b:fe:c4:6b:fa:20:52:bb:2a:07:59:34:
29:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:AA:86:B2:3B:AD:7A:DB:14:83:C6:76:06:FA:44:8A:C6:5C:0F:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7ebd941e-da92-3016-a10e-fccb24dc3317.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:121:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:a1:67:6d:da:63:e4:57:29:53:02:32:71:fa:4e:6e:e3:a8:
ca:c8:cb:81:5f:34:0f:8f:1f:91:1f:45:f0:c8:27:7e:0b:1f:
65:da:61:df:b7:59:04:ba:c8:e6:57:11:92:ca:70:88:5e:5e:
f6:47:60:51:3c:d6:37:59:14:65:9c:43:24:2d:38:13:ea:b0:
2b:30:ce:4c:62:10:2d:d6:f5:6c:d0:ab:b2:07:3b:94:cc:82:
62:69:11:d3:7d:bc:5e:1a:d6:86:64:53:57:11:49:a2:5f:34:
94:66:25:fb:ce:3b:74:ba:a8:df:e6:dd:87:56:d9:29:b5:a0:
ae:11:81:6c:07:5d:38:1d:6c:ae:97:7d:e3:9e:d6:00:e2:6d:
d7:81:5a:83:cc:a7:ec:d4:70:36:09:95:e9:36:fc:f6:fd:1e:
1d:b2:e5:74:aa:03:5f:8d:32:d5:ce:bd:da:cb:89:88:d7:92:
d0:d3:cc:40:60:a2:4d:b4:68:5c:83:92:ec:5f:ad:95:a5:20:
10:20:9e:9e:57:96:16:f0:0a:b6:52:b5:b2:cd:23:21:24:d0:
ae:0b:f9:89:4b:98:53:0a:86:33:a6:d9:71:1a:3a:4c:5c:8c:
93:33:29:ff:88:95:c3:84:7b:5a:ce:2e:14:84:1c:bd:5d:54:
8e:5c:b3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:15:00 2025 by rpki-client