Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8e64b235-2f2a-3bdc-b562-b595318e343a.roa
File: 8e64b235-2f2a-3bdc-b562-b595318e343a.roa (raw, json)
Hash identifier: lJpnKm9VPKGSgmlOeTeDHgj4ztaq/ay+pRVUnd2wNUc=
Subject key identifier: D2:FB:9F:AF:1C:FD:CE:F2:85:F8:3B:4B:34:0B:73:6B:8D:81:91:D2
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584837201677C7A665213C74BF40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8e64b235-2f2a-3bdc-b562-b595318e343a.roa
Signing time: Sun 15 Dec 2024 14:00:53 +0000
ROA not before: Sun 15 Dec 2024 14:00:53 +0000
ROA not after: Sat 15 Mar 2025 13:00:53 +0000
asID: 397203
IP address blocks: 2001:500:123::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:37:20:16:77:c7:a6:65:21:3c:74:bf:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 15 14:00:53 2024 GMT
Not After : Mar 15 13:00:53 2025 GMT
Subject: CN=3f28ab01-f27e-47fe-bcb2-1ff91211d81c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2d:64:cd:76:94:52:cf:d5:8e:4f:57:49:d8:
ab:53:e5:63:cf:79:bb:7a:8e:f5:51:48:04:db:64:
46:44:e7:36:99:99:22:04:28:af:b4:c4:04:66:19:
31:66:51:91:34:ea:d0:46:5a:6e:3a:22:ab:23:6c:
d1:c5:b1:93:57:0b:ee:af:5e:b5:a8:05:03:48:e6:
2f:9f:48:38:40:de:b9:91:a2:38:5e:3b:f4:5f:ee:
e2:b9:1b:08:8d:36:ba:87:04:9a:56:d2:b9:e9:50:
41:fe:da:e6:8d:40:b8:54:86:2a:72:66:4f:69:64:
f3:52:71:d1:be:60:23:bf:dc:04:3f:b9:5e:99:1e:
56:a6:23:55:99:cf:b2:75:a2:dc:33:23:d9:50:01:
0b:96:22:00:53:53:c4:56:c7:df:1f:41:00:67:02:
97:f0:a8:36:6e:54:de:5a:f0:24:a4:65:ae:66:db:
2f:4d:e6:44:5d:e4:11:88:c0:67:c6:af:fd:9a:a8:
a6:d2:31:d8:0d:0e:fc:7e:99:30:4c:66:6d:86:f9:
f4:ca:68:9e:61:69:e2:cf:42:3d:dd:e9:0c:c1:9b:
46:31:d9:82:5e:1f:44:c8:8f:16:b3:7e:11:83:49:
83:f7:65:89:c0:e9:5e:15:f9:35:ca:15:0d:70:6c:
07:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:FB:9F:AF:1C:FD:CE:F2:85:F8:3B:4B:34:0B:73:6B:8D:81:91:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8e64b235-2f2a-3bdc-b562-b595318e343a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:123:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:bd:c4:a5:ae:1f:01:d2:59:93:39:49:9c:5f:3a:d3:b9:68:
f7:95:d8:0f:51:43:60:4b:60:0c:31:32:3d:9d:db:cf:85:d2:
5f:4d:7d:11:6d:8a:4c:5c:b4:b8:9c:0b:5e:dc:f5:9e:fd:60:
f7:05:fa:8d:bc:82:bf:58:93:d2:39:f0:75:a3:e0:4c:88:9c:
6f:96:e6:a5:0e:13:20:15:a8:6d:e9:ba:d7:d1:89:62:ed:5f:
31:af:d5:75:78:ae:03:8b:5c:e6:e8:84:16:48:f5:4e:cd:3d:
43:89:58:89:34:a4:66:40:5d:5c:46:5a:42:ff:49:a5:eb:62:
df:e8:76:cb:9f:3b:fe:5b:b3:9a:42:6a:c1:90:71:46:07:29:
b2:d5:b9:77:8d:5b:c6:c1:97:74:55:a7:00:28:71:23:26:dc:
58:d5:96:b5:a3:fb:45:38:d9:c2:4f:eb:0f:1c:41:a9:f7:eb:
52:96:e0:51:4b:3c:31:1f:a3:db:24:14:ff:75:26:44:f3:7c:
74:a0:40:14:d7:35:f6:8e:ef:49:50:ea:d6:e1:dd:fe:f1:6f:
3a:d8:58:ad:42:58:3b:89:fe:f6:52:ae:28:04:38:a9:a6:6f:
48:79:ec:ee:f8:42:a7:61:12:53:f3:ee:0a:4a:c5:f8:4d:9c:
e6:3d:f1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:19:04 2025 by rpki-client