Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8fe88e4d-4b67-3eba-9afd-8a2e81c32bc2.roa
File: 8fe88e4d-4b67-3eba-9afd-8a2e81c32bc2.roa (raw, json)
Hash identifier: ftSZbiKomQc0TsXLKVg9C3KvbpkTZEvWC/qgDnxjZ+Q=
Subject key identifier: 4D:E0:B8:54:89:72:5A:E8:07:90:09:E0:9E:BD:CA:31:AB:1F:52:3B
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584858A045E203BC7C2566D43180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8fe88e4d-4b67-3eba-9afd-8a2e81c32bc2.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 36630
IP address blocks: 2001:500:120::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:45:e2:03:bc:7c:25:66:d4:31:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=f2485cc2-7bed-4e8b-a5fe-a7882e9e42a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:76:b3:87:4a:dc:44:a4:83:bb:c9:eb:0d:46:
77:e2:cb:5e:cc:57:61:cb:de:af:06:cb:b6:8d:d5:
10:59:fe:bd:f0:d6:f4:fd:f2:c9:f4:9f:f1:44:d0:
bc:e4:bd:31:d2:4f:90:fc:31:95:62:c1:ff:e2:ba:
c4:aa:a4:56:49:c9:b6:5d:5e:cb:bc:0e:95:4c:45:
25:a1:1a:3e:7b:db:07:0d:4e:c9:92:8b:e1:12:f5:
ca:55:1a:21:42:d0:c7:b1:80:9a:7b:0b:06:53:66:
0d:ca:24:81:77:cb:20:cd:98:b4:ac:d6:75:c6:ba:
d2:0c:2a:79:f6:ba:c2:c1:7a:cb:36:07:93:ba:f2:
05:3f:c7:f4:c5:08:56:25:7c:43:f6:c7:1d:86:18:
c6:01:59:f4:3c:24:28:d6:29:b6:98:88:f4:f0:f3:
a7:89:17:ef:95:9a:3f:4d:13:5c:d5:bb:52:05:47:
1e:b2:75:d9:4b:a4:b9:c1:d1:d9:1f:9a:a2:8d:b3:
47:f8:cd:3f:a6:32:63:90:3b:6b:cd:38:bb:d3:93:
86:cb:7b:12:ef:d0:a4:ed:69:cf:5d:7f:bb:e5:bb:
7b:9f:69:bf:ab:87:78:f6:cf:cb:0b:d1:6c:16:31:
54:59:5d:b4:41:02:21:02:3d:1d:4a:01:5f:96:c9:
31:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E0:B8:54:89:72:5A:E8:07:90:09:E0:9E:BD:CA:31:AB:1F:52:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8fe88e4d-4b67-3eba-9afd-8a2e81c32bc2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:120:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:bc:03:bf:3f:2a:8a:b6:6f:71:a3:52:08:d9:9c:50:95:b2:
fd:fb:7c:fd:33:ce:0c:51:99:1d:35:1a:62:13:dc:a1:30:12:
ed:29:78:30:34:68:cd:aa:41:f3:22:6c:78:c5:a2:58:bd:f7:
87:84:7b:dc:a4:38:82:ed:7c:15:ae:c7:d8:65:3c:f9:0e:b1:
cd:7a:cc:69:6c:97:ed:14:31:d9:03:9a:61:37:5a:1e:ac:43:
62:b0:00:18:3b:3d:5e:50:98:4c:a1:cf:79:c9:63:b8:93:a1:
b3:1c:30:e0:15:f1:0c:23:0f:f2:ac:7f:80:33:15:47:a0:c2:
fd:67:ff:a7:52:8a:3e:22:75:80:13:e5:db:43:b2:c7:b5:1d:
c6:b7:d0:d1:dd:36:a7:c5:09:6a:75:85:3b:cf:2a:e0:1a:a1:
bc:ce:d4:11:09:b0:f1:b5:35:dd:5a:fb:37:55:4f:26:1f:76:
3a:98:02:93:2f:7c:7d:df:ef:84:27:e8:16:ca:fc:0c:13:a6:
e1:ba:66:23:03:96:7f:11:6e:8b:03:af:1d:05:6b:1a:20:a5:
6c:93:63:69:33:40:41:3f:90:c1:22:62:bf:75:b6:95:48:28:
d7:e3:b1:79:04:52:99:d7:c5:d1:53:1f:88:23:b3:66:a7:ef:
59:4c:73:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:25:04 2025 by rpki-client