Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9daa24c0-3f11-3f2c-8065-525399aca264.roa
File: 9daa24c0-3f11-3f2c-8065-525399aca264.roa (raw, json)
Hash identifier: hhCUnS1YYk5YHDLoPR/D+vZpp0B7cSjZL5xJK38Qjn8=
Subject key identifier: 95:00:85:76:91:1B:40:E3:ED:F0:4A:A3:0D:8D:A5:81:48:B3:4E:23
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584861005D6D3A29038D0545B540
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9daa24c0-3f11-3f2c-8065-525399aca264.roa
Signing time: Mon 30 Dec 2024 14:00:51 +0000
ROA not before: Mon 30 Dec 2024 14:00:51 +0000
ROA not after: Sun 30 Mar 2025 13:00:51 +0000
asID: 36627
IP address blocks: 2001:501:8a29::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:00:5d:6d:3a:29:03:8d:05:45:b5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 30 14:00:51 2024 GMT
Not After : Mar 30 13:00:51 2025 GMT
Subject: CN=943dfd1f-d84d-4f5c-9512-4bda794a558d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ad:79:61:eb:59:5c:76:7e:b2:b8:ec:80:b8:
65:df:e9:9d:78:62:67:18:b4:45:e4:69:d4:e7:dd:
68:62:7c:b5:cc:ae:c4:33:9c:e0:83:0e:84:b8:84:
e5:d5:9f:9e:60:06:01:3b:67:ba:8c:d0:77:b4:49:
9e:b5:54:4a:85:40:5d:78:ad:f6:49:3d:9f:91:d0:
4b:48:d7:90:79:1e:0f:dd:60:f2:d9:e0:e6:03:6d:
dd:d6:2d:79:3f:5c:b5:42:e7:2b:b6:92:02:40:36:
35:97:66:49:2d:61:6a:ef:31:46:eb:03:cb:03:e7:
b7:ea:5d:2c:96:a4:d5:8a:f3:1d:cc:52:b0:67:5e:
c7:e7:47:93:58:5b:b3:02:e5:71:7f:58:06:59:49:
9b:7e:ff:db:19:19:76:b1:96:ab:07:77:87:21:84:
58:a4:80:15:33:4f:28:20:d8:dc:4d:79:0a:5b:9a:
f1:e8:dd:84:3a:ce:5f:e4:d9:6d:4f:33:72:a9:03:
6b:41:e3:05:6a:ad:87:ba:94:ec:2a:ba:b0:ef:5f:
1a:6e:d1:c8:8e:2e:f3:3b:7c:1a:82:74:32:6d:d1:
3f:a0:2d:28:dd:ee:a1:3c:0e:fb:17:e9:53:db:71:
ea:9d:78:7e:bf:37:76:d7:86:6c:aa:fb:42:e2:c8:
33:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:00:85:76:91:1B:40:E3:ED:F0:4A:A3:0D:8D:A5:81:48:B3:4E:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9daa24c0-3f11-3f2c-8065-525399aca264.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:501:8a29:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:38:a7:76:6c:19:95:6b:d9:00:e2:05:bb:46:c1:52:07:0b:
c6:73:d9:95:cf:06:aa:1e:7a:00:c3:55:6b:35:df:45:07:00:
21:19:1d:7f:d9:49:fa:89:17:b0:51:05:4c:88:f5:2c:23:d0:
c2:2b:d8:2f:5c:f0:52:db:86:66:43:01:33:72:b8:36:0b:f6:
20:2a:29:6a:38:20:8e:5c:c3:84:12:01:58:4d:ca:19:18:99:
77:50:60:fa:11:a1:1a:09:29:98:c5:55:fb:40:70:5a:f4:bd:
23:d4:5c:45:a5:d0:59:26:c0:9a:37:f3:50:49:90:00:5c:11:
63:b5:51:5f:c3:49:34:80:aa:65:97:3f:9c:99:a4:ea:f5:f3:
1b:27:f7:92:1e:c0:88:3e:af:40:ae:f9:40:37:2d:cf:bf:fe:
3b:c4:56:13:24:7c:72:f9:8e:72:46:34:2d:b8:32:a6:5e:fb:
31:c4:1a:c3:ca:93:14:c9:03:5b:be:f8:1a:5a:fc:f4:fe:45:
63:5f:93:41:89:79:22:c0:dd:0f:ea:d4:bd:7a:d4:10:09:bc:
b0:4f:d6:74:3e:59:d9:2b:7c:71:25:38:c5:4b:bc:d3:69:8d:
b6:ad:e1:9f:1d:a6:cc:45:86:b1:2a:d9:6a:fa:86:14:d7:7b:
9c:27:7d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:36:59 2025 by rpki-client