Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/97702c65-81aa-3dd7-aa01-7d9e2e3c5246.roa
File: 97702c65-81aa-3dd7-aa01-7d9e2e3c5246.roa (raw, json)
Hash identifier: etA/3zfk/aHAnr8kiAXm2IhFhS+VmgEbw7MtV37E9/0=
Subject key identifier: DD:8B:46:99:2F:6D:D3:F8:4F:1D:35:81:1D:08:D1:27:EE:3C:CD:1A
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584861005E8A65EA96EB87E415C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/97702c65-81aa-3dd7-aa01-7d9e2e3c5246.roa
Signing time: Mon 30 Dec 2024 14:00:51 +0000
ROA not before: Mon 30 Dec 2024 14:00:51 +0000
ROA not after: Sun 30 Mar 2025 13:00:51 +0000
asID: 397197
IP address blocks: 2001:501:8a29::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:00:5e:8a:65:ea:96:eb:87:e4:15:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 30 14:00:51 2024 GMT
Not After : Mar 30 13:00:51 2025 GMT
Subject: CN=523089f7-3853-44eb-8513-b2b41cd56b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:13:93:9e:80:8d:ed:b8:7b:9b:2f:72:95:3f:
80:71:bc:a7:8c:85:56:ff:45:4c:b4:51:a3:d8:bf:
20:8d:c6:08:98:11:5a:3a:d9:fd:29:3d:ed:be:f8:
76:9f:75:b0:0f:fe:4f:f1:e1:af:9f:9a:2a:9a:a2:
b3:19:d9:8f:bb:bd:17:15:7e:1c:e0:a6:eb:02:74:
4c:dc:2c:10:d9:8d:ce:48:b4:fe:b8:3f:67:c8:a0:
9c:9c:76:41:14:a5:88:42:ce:7f:c5:52:bc:9f:69:
88:53:96:6a:e7:06:c0:ba:dd:72:56:be:fe:ab:f2:
b9:88:3f:1c:92:75:21:49:19:b7:ff:7a:6c:84:f8:
c0:81:c1:f3:d0:a4:67:76:e6:2d:52:b6:f4:55:42:
5e:20:00:fc:47:8f:12:16:9f:56:4f:8f:1e:ca:fa:
08:27:09:53:1c:54:66:10:8f:53:ea:23:ef:50:b1:
72:09:c3:7b:76:b9:06:77:4e:55:ca:26:4a:cf:30:
3a:71:74:97:e3:c9:56:5a:2c:80:8c:7a:4f:b2:90:
d9:15:de:67:dd:e4:90:ed:07:57:4c:d2:49:c0:94:
c6:00:3b:5b:20:0a:7b:05:61:4b:73:1d:7d:4f:bc:
8d:a0:ae:bf:5c:02:71:28:98:af:e8:66:59:cf:64:
e5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:8B:46:99:2F:6D:D3:F8:4F:1D:35:81:1D:08:D1:27:EE:3C:CD:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/97702c65-81aa-3dd7-aa01-7d9e2e3c5246.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:501:8a29:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:bc:4a:22:65:6d:b8:b3:22:5f:6a:ae:d4:46:58:b5:e9:af:
a8:f0:46:6a:c3:f9:da:9d:b0:12:d9:3a:5e:c7:27:67:79:06:
ea:0a:f3:90:96:48:e1:fc:f7:5e:cc:75:db:11:a1:de:02:83:
6d:b6:f6:19:41:b2:ba:bd:3d:cc:e5:d6:9a:f6:ba:60:22:af:
cf:33:6f:63:17:03:57:8b:cb:3f:4a:5f:e1:05:f9:4e:77:b2:
e4:51:9c:8f:1a:e5:1b:a0:a9:24:05:31:ef:94:05:1b:da:76:
c4:24:36:78:b2:fe:7e:0e:57:dd:76:a1:ff:ef:07:83:00:26:
6d:42:ed:88:93:27:23:a6:cf:9a:e4:c2:87:46:64:7c:03:95:
8e:ae:e4:e5:bd:61:f5:52:05:98:d2:ae:9a:72:bb:71:e8:bb:
b0:0d:e3:26:cd:19:57:df:d9:ad:fc:e4:2f:02:bd:cb:c5:9c:
1f:90:e8:0c:e0:7b:b0:da:86:c3:f9:bf:f1:c6:b1:ec:22:73:
e6:8f:23:0d:8a:1f:15:a9:80:c6:5b:35:c0:db:d2:df:7d:bc:
aa:0f:2d:5e:aa:21:f3:f5:9d:4d:a0:0d:24:9c:9a:09:54:07:
9b:3c:34:8a:29:0e:7e:4f:94:21:99:b5:c5:64:f1:c1:8a:5a:
58:a3:72:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:19:34 2025 by rpki-client