Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/971ab80a-9c01-39fe-9edc-47020fbdcd5d.roa
File: 971ab80a-9c01-39fe-9edc-47020fbdcd5d.roa (raw, json)
Hash identifier: uEKzTXpMCWTd9EGlWKBK2QlU4ShdTwLu6umGUsN2K38=
Subject key identifier: A5:C9:5A:06:71:7F:4F:EF:F1:92:F3:36:FF:01:87:98:AD:57:03:97
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848530B033C48A742FA5D619580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/971ab80a-9c01-39fe-9edc-47020fbdcd5d.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 396550
IP address blocks: 2001:502:cbe4::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0b:03:3c:48:a7:42:fa:5d:61:95:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=cfc21e42-f769-4302-b85a-2cf78cecc91a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f3:22:5e:b9:68:70:c0:c5:54:7f:2d:a1:82:
1b:ed:34:74:00:a5:44:9d:16:91:25:0a:9f:cc:75:
6b:64:eb:07:a6:c6:20:a4:8b:43:31:e2:d4:a2:a4:
74:59:37:28:23:9c:a6:1e:5d:ae:47:6f:c0:56:e3:
73:bc:67:cc:06:ea:ed:7c:90:36:27:03:3d:a6:38:
22:9c:1f:74:13:9f:1c:46:2e:94:49:71:9b:eb:fa:
c7:68:51:5f:1d:2a:7e:1c:ae:e5:4f:d1:2d:aa:1c:
f9:23:a5:5f:e3:dd:07:bc:e9:b8:7e:58:b1:b1:57:
14:86:17:3e:32:e1:55:3f:16:eb:e8:be:6f:a9:14:
1d:41:d1:9b:85:81:5a:af:da:b5:12:0c:8c:c2:4c:
82:ef:a1:78:c3:16:4a:93:9d:0f:26:5b:1f:85:f7:
ed:50:62:c2:b5:29:bc:05:4f:66:37:3f:f9:f9:8a:
f2:73:3a:09:ac:02:24:b0:83:b7:47:b7:45:e7:58:
04:dd:b4:30:ea:3a:13:b1:f3:3f:0b:00:76:c1:de:
ad:ca:b7:e1:e1:59:40:d6:f4:10:2f:68:ad:a4:9a:
a2:fa:f1:a6:a4:07:c6:58:2a:38:00:f7:ca:f5:8f:
56:2d:af:15:ac:de:ec:5a:92:35:37:a4:84:57:8f:
25:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C9:5A:06:71:7F:4F:EF:F1:92:F3:36:FF:01:87:98:AD:57:03:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/971ab80a-9c01-39fe-9edc-47020fbdcd5d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:cbe4:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:e0:9d:8e:ac:0e:52:ba:5e:6b:b5:5d:80:5b:90:3c:0a:dd:
44:e2:e0:89:ac:13:2d:4b:d8:66:13:71:a0:77:b7:6a:4a:57:
82:a9:6a:6f:17:8f:ef:ce:c0:66:8e:77:b5:bf:ba:1b:10:71:
56:f6:cd:41:b8:f2:7e:2b:c2:d5:e2:74:88:e0:02:1a:1d:94:
18:1c:da:5d:4e:41:39:82:9e:22:19:4e:ec:43:59:10:a2:95:
dc:fb:77:2a:52:4c:4c:56:b8:fc:c9:30:75:cf:f8:74:d6:54:
1b:bf:79:ce:28:75:2c:dc:18:0c:77:72:20:df:14:b4:01:65:
e8:da:e2:7a:8c:0a:fd:92:ac:5d:55:7b:41:2c:77:a2:68:b2:
ea:24:2e:3d:58:4f:9f:6a:37:d7:f0:d4:8e:ed:2c:b2:24:c5:
d9:91:94:74:21:e9:9d:0a:85:33:fa:5f:f7:97:65:a0:d0:c2:
9c:5f:e7:1d:6a:d6:90:9e:08:51:dd:3d:31:d6:d8:4a:97:7e:
5c:00:3d:a7:62:b0:1b:83:a2:b6:2a:96:72:97:48:39:bb:56:
ba:46:a8:da:9c:ea:4f:85:80:35:17:d1:7a:53:0f:2b:ef:df:
0a:a8:84:09:dc:42:d5:2a:f7:0c:17:0f:54:ac:37:3d:7c:0f:
4b:07:66:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:48:52 2025 by rpki-client