Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/93d9aaa8-7351-3482-ade5-56143620f759.roa
File: 93d9aaa8-7351-3482-ade5-56143620f759.roa (raw, json)
Hash identifier: QQ7M+JDnL3X7tYKSoPk2KEWVD7HL7MJenQTEBRsF8zE=
Subject key identifier: 9D:D8:EF:1C:8F:C1:6A:14:09:44:53:1E:2E:79:96:6A:F1:D0:96:26
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858484243335C216CE4C7024AD600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/93d9aaa8-7351-3482-ade5-56143620f759.roa
Signing time: Thu 19 Dec 2024 13:45:38 +0000
ROA not before: Thu 19 Dec 2024 13:45:38 +0000
ROA not after: Wed 19 Mar 2025 12:45:38 +0000
asID: 396581
IP address blocks: 2001:500:126::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:43:33:5c:21:6c:e4:c7:02:4a:d6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 13:45:38 2024 GMT
Not After : Mar 19 12:45:38 2025 GMT
Subject: CN=8e4d9a3a-4bc4-4351-be2b-b423ec492508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6c:b2:c2:b5:ee:66:b6:96:74:f6:76:d7:08:
f3:6a:38:20:dd:89:67:fc:2f:15:39:d2:0b:09:54:
72:0a:76:a5:d3:ce:08:74:a2:10:59:7f:21:ed:c8:
51:73:34:15:4b:7b:33:8e:06:2c:86:12:6a:67:35:
d1:cb:0e:3d:95:03:11:70:4b:cd:5f:05:ee:15:59:
38:6e:d3:95:30:0a:10:09:f4:b6:1b:35:65:7c:6f:
29:47:2d:ab:2f:91:42:d2:fa:f9:bd:51:2d:cd:c7:
30:96:ea:e7:8d:07:41:f3:73:eb:7f:f3:4d:4b:23:
ff:21:50:ec:2c:8e:f8:49:f0:8e:63:a6:30:7e:1d:
65:7a:8f:4b:19:30:dc:b8:c5:46:38:95:f2:aa:9b:
79:b5:0a:7a:d6:46:41:80:9c:98:49:58:d8:23:dc:
0c:d7:81:99:37:71:9d:bf:62:78:c8:a1:65:26:49:
a8:16:98:a3:da:6e:a4:54:60:2b:bd:15:e7:b1:dc:
b4:10:25:8e:4e:80:56:64:a3:c9:a8:c9:da:90:72:
db:46:1e:e7:14:f2:bc:64:bd:ff:28:86:58:96:78:
9e:2f:ba:ff:a6:f5:10:71:4a:f2:0b:19:36:d6:6d:
4d:03:ae:1d:59:bd:ea:32:73:bc:b3:b2:00:ad:89:
8a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D8:EF:1C:8F:C1:6A:14:09:44:53:1E:2E:79:96:6A:F1:D0:96:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/93d9aaa8-7351-3482-ade5-56143620f759.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:126:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:94:38:1f:a1:37:1e:9e:68:b9:39:45:55:bb:8f:8e:6e:9e:
95:dc:f8:2d:e4:56:37:36:ed:fc:09:e8:c8:a5:20:57:8a:fb:
46:8e:c7:72:a5:77:69:e3:6f:f0:dd:f3:76:74:d1:f4:25:d9:
33:98:75:44:62:d8:d1:ab:67:4f:b7:b7:60:59:6c:09:e6:fe:
1d:3a:b3:29:2a:bc:7a:f6:92:b4:58:83:11:ae:21:8a:05:75:
cb:ab:93:d5:6c:07:3f:8b:05:a8:56:96:3f:31:d3:aa:2b:aa:
0d:57:b5:b5:7c:f2:f0:45:86:28:1e:61:ae:7e:c4:9d:16:60:
cc:21:ac:56:96:eb:2a:62:28:e9:3f:41:95:0d:01:e1:60:b6:
96:7d:8f:7c:1f:3b:dd:bd:32:29:2a:6f:58:70:96:ec:b4:bb:
8d:c7:0e:07:ee:09:d3:e7:32:f5:c7:f1:7a:aa:11:d5:52:47:
ad:ad:02:57:da:b2:93:05:48:36:0a:3f:af:01:9e:12:7a:36:
7f:cd:b3:d8:31:2e:27:0d:94:f8:b3:bd:eb:1a:b3:89:2c:10:
fa:42:47:a0:19:1d:7f:48:4f:aa:2f:aa:16:5b:03:78:91:f8:
a3:da:a2:93:6c:f9:26:b9:a9:8c:98:ab:d9:59:a5:54:8b:09:
4e:10:ee:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:46:15 2025 by rpki-client