Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8efa3a51-cbe6-3a98-9357-1c4742a0f8cd.roa
File: 8efa3a51-cbe6-3a98-9357-1c4742a0f8cd.roa (raw, json)
Hash identifier: b+LtBYiqwIrk1OaGPTKDNOgbcIun0lUxQ0SyaniZwBw=
Subject key identifier: 57:D3:FB:48:A9:9A:A9:64:99:66:30:DE:CF:32:58:99:1A:BF:A2:5D
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584842432AA4452B8E3BC789A1C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8efa3a51-cbe6-3a98-9357-1c4742a0f8cd.roa
Signing time: Thu 19 Dec 2024 13:45:34 +0000
ROA not before: Thu 19 Dec 2024 13:45:34 +0000
ROA not after: Wed 19 Mar 2025 12:45:34 +0000
asID: 396550
IP address blocks: 2001:500:125::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:43:2a:a4:45:2b:8e:3b:c7:89:a1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 13:45:34 2024 GMT
Not After : Mar 19 12:45:34 2025 GMT
Subject: CN=e7251360-78b7-484e-86d6-491e6eaa9377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c4:38:52:56:b3:e1:49:ba:9f:7e:d2:52:68:
b1:4d:2d:58:e5:69:d0:9a:d0:53:db:3c:34:68:92:
32:1a:2f:95:d4:c8:55:87:6c:27:51:59:aa:34:c6:
69:94:2b:ed:35:65:c9:cd:a5:93:88:c7:46:3c:94:
6a:85:19:e1:4c:94:7f:b5:dc:7e:3d:88:c0:58:b8:
aa:6d:f0:71:53:8b:24:27:94:b4:0c:08:b9:ae:c9:
50:e7:ab:ff:8a:46:7d:5f:0d:16:f7:e3:91:0f:c1:
90:e7:64:83:bb:ca:cf:65:44:89:5f:44:e8:09:bb:
09:24:a5:83:89:99:c3:e5:f0:e9:00:6f:a9:d5:15:
c8:e6:46:be:4f:69:47:3d:72:f2:97:0c:aa:cc:77:
fe:67:16:b6:f4:e0:72:da:2d:8b:a8:ba:50:f0:bd:
72:a8:e4:74:fb:7a:1f:dc:f2:e2:f3:c6:74:09:b1:
20:5d:04:f3:57:4f:20:f9:a6:73:8c:3a:7b:14:0c:
b7:de:ab:25:b7:9b:e8:ad:df:17:f7:79:bb:45:ac:
b7:77:81:95:f8:72:e7:5c:5b:ee:ba:a8:c6:a0:05:
86:56:3e:43:3a:85:88:d3:cb:9e:44:e9:17:77:27:
a7:07:de:3e:fc:21:39:4e:a1:81:ce:3f:03:4e:5c:
1d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D3:FB:48:A9:9A:A9:64:99:66:30:DE:CF:32:58:99:1A:BF:A2:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8efa3a51-cbe6-3a98-9357-1c4742a0f8cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:125:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:82:ae:4f:a9:16:ed:78:9d:ef:61:29:95:37:6d:b8:de:c4:
d4:67:9e:3b:fb:8f:cf:6a:27:8a:ac:23:94:e8:c4:c6:7c:60:
48:05:8e:40:95:41:cf:09:63:44:18:d7:95:3d:87:c3:ac:0a:
44:d7:02:99:77:fc:38:b7:7c:5f:39:76:af:c7:e9:c6:c2:98:
68:bc:b3:5b:e9:b0:8f:2d:39:3a:e1:61:a1:8a:16:f8:bc:2b:
6d:6c:f0:72:12:af:dc:0d:53:32:2d:47:8b:91:f7:e5:c8:1a:
f2:38:0b:60:40:ee:d4:d9:f2:73:1f:71:58:f0:56:60:c1:c9:
9b:49:3c:24:40:67:af:dd:00:b1:1e:03:7b:70:3f:cc:40:1f:
46:ee:5b:e9:0a:78:42:e2:93:5f:29:73:e1:9c:c2:ab:6b:b9:
41:2a:e0:85:07:0c:4a:d1:2b:89:bd:36:ca:3b:70:0e:f5:c4:
df:9b:e7:5d:44:2a:55:97:fb:f1:25:e4:d5:d4:3b:91:e0:05:
c0:f0:2b:65:c4:ca:f0:50:52:cc:59:67:c9:c1:13:a5:48:b1:
a9:fc:13:3c:29:95:15:c4:f2:cc:d4:50:74:59:82:a4:61:53:
47:99:0c:eb:16:de:69:4c:7b:71:bf:43:2a:58:94:14:35:ae:
ca:a6:ee:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:15:44 2025 by rpki-client