Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9d38c597-ae5f-320b-bc45-2232c1ae3892.roa
File: 9d38c597-ae5f-320b-bc45-2232c1ae3892.roa (raw, json)
Hash identifier: Hzs+3GcCk7zjGQ/0TvvkL4PzNxhPPWY9ZOsgJFb9ip8=
Subject key identifier: 01:5A:17:1B:A3:9E:8F:5F:60:FC:62:51:8D:B5:1C:52:98:C4:2A:FB
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848906AB13C9E950B43D3EE1780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9d38c597-ae5f-320b-bc45-2232c1ae3892.roa
Signing time: Thu 16 Jan 2025 13:38:16 +0000
ROA not before: Thu 16 Jan 2025 13:38:16 +0000
ROA not after: Wed 16 Apr 2025 12:38:16 +0000
asID: 36616
IP address blocks: 2001:502:1ca1::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:6a:b1:3c:9e:95:0b:43:d3:ee:17:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 16 13:38:16 2025 GMT
Not After : Apr 16 12:38:16 2025 GMT
Subject: CN=a4077218-58a6-44eb-9162-061681d8f788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f4:0e:cb:a9:a5:b3:51:a4:92:1b:54:d8:1e:
d0:c4:e6:60:d7:af:c5:f0:4f:95:1e:df:0f:f1:6c:
4e:bd:c3:44:bb:af:5e:d8:98:4f:20:ca:96:aa:da:
99:29:a4:7b:f0:11:9f:8f:c0:c9:44:56:6a:af:af:
1d:ed:c9:45:ea:c8:ec:a5:1a:92:01:2a:c2:15:9b:
9b:e0:e2:e6:26:f1:a3:17:d2:2c:d1:47:23:68:48:
7c:38:ec:8b:f1:01:7f:f6:e3:27:6e:c7:82:23:56:
1d:3a:d9:3d:cf:25:85:bb:81:7b:ab:b9:4e:a7:c3:
b3:96:34:af:dc:8f:be:f5:f2:07:91:b0:76:a5:ef:
7a:b9:80:85:b4:77:18:89:69:b3:6a:d7:65:69:f1:
2f:86:7c:84:f6:f4:45:f5:bf:67:a7:4d:d4:c5:f4:
ee:42:1a:6d:5c:ed:ad:2d:e7:21:7d:57:4c:08:f9:
08:71:fe:96:bc:d3:33:ab:67:eb:f6:9d:48:f0:0e:
f7:c2:49:e4:4d:20:c1:45:a6:c1:4f:3a:0a:59:12:
78:de:e7:b0:8d:c8:79:29:32:96:81:37:7a:4a:fe:
1b:b8:90:fa:ed:5b:4b:0d:78:e0:58:e6:2f:45:1c:
90:4c:45:34:38:cf:6d:f1:2e:32:df:79:76:87:4b:
d4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:5A:17:1B:A3:9E:8F:5F:60:FC:62:51:8D:B5:1C:52:98:C4:2A:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9d38c597-ae5f-320b-bc45-2232c1ae3892.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:1ca1:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:a9:9b:cf:d2:9a:d1:8c:7f:e2:1a:5b:06:d0:94:7a:d6:78:
44:65:2e:62:a9:c7:bc:ba:f9:fe:22:75:89:11:a5:f0:e5:48:
4f:fe:34:9e:73:43:67:6d:3c:24:de:ea:d8:61:94:3b:10:39:
90:ba:34:fb:0e:f5:33:60:1f:b2:45:1e:fc:4f:9c:83:39:92:
f8:3f:d6:75:b7:8a:8d:d3:c3:ed:95:95:2a:27:9a:ab:9d:53:
af:62:df:f8:9f:31:44:7a:86:6e:c0:3a:41:fe:cc:03:9f:c9:
39:70:81:8b:4e:f4:19:8a:63:f7:0a:20:a3:9d:27:97:6f:65:
45:60:27:fc:10:7e:fa:b5:54:87:75:f9:f4:34:3b:36:93:8b:
c5:b1:f0:be:a9:52:b9:a5:fe:29:36:ff:e9:93:fb:e3:57:0a:
34:3c:5a:f2:70:d1:51:3c:ce:2b:c3:f3:b4:ef:0d:a2:f2:08:
49:2e:1a:69:54:08:78:ce:40:67:76:bf:64:7e:5f:5b:f4:9f:
be:80:c0:dd:0f:f0:22:5f:35:13:b3:24:4d:ab:29:ab:bb:7e:
99:bf:8e:83:9d:93:61:aa:c0:a9:cf:83:9c:5b:91:8b:7f:32:
6e:a1:b9:a1:26:91:d4:f5:35:fb:a9:e1:f4:f6:f8:4a:7f:a2:
bf:5b:f9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:18:10 2025 by rpki-client