Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a293f00c-f8c2-3dce-aacb-8de74cce0e75.roa
File: a293f00c-f8c2-3dce-aacb-8de74cce0e75.roa (raw, json)
Hash identifier: wXlXCNF5Wr7k+7ZLexHMM2kNqJ9lYgYxVHRwSOIkecc=
Subject key identifier: D5:94:43:30:39:77:35:61:AF:8D:4B:B3:E1:97:CA:B1:40:00:24:07
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489BA0BBFFF87376E763BDA800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a293f00c-f8c2-3dce-aacb-8de74cce0e75.roa
Signing time: Mon 20 Jan 2025 14:00:51 +0000
ROA not before: Mon 20 Jan 2025 14:00:51 +0000
ROA not after: Sun 20 Apr 2025 13:00:51 +0000
asID: 396540
IP address blocks: 2001:500:30ff::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9b:a0:bb:ff:f8:73:76:e7:63:bd:a8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 14:00:51 2025 GMT
Not After : Apr 20 13:00:51 2025 GMT
Subject: CN=905429e4-9f3d-4d37-876b-8ae4dd2fee2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:37:64:0d:41:3b:33:d4:49:06:22:e1:a0:71:
3e:03:88:58:c6:87:91:7c:76:dd:90:ce:20:ef:15:
5d:71:a4:de:83:13:d3:eb:5a:f0:ec:28:a3:d4:7f:
58:27:ee:a9:0e:fc:d2:20:94:41:fd:ff:ed:55:ee:
22:71:6a:88:f7:af:67:75:5f:ef:87:87:f5:72:dc:
db:e4:4a:4a:25:ee:9f:33:e2:35:64:92:3f:ae:02:
6b:5f:1c:33:4c:89:13:26:18:6b:c9:f1:b8:c5:45:
6d:4a:27:a7:41:ff:0e:65:5e:74:57:22:2a:c5:b2:
27:b5:55:77:49:95:db:59:ea:2c:f6:24:1f:4a:44:
5b:0a:c8:f7:26:47:15:07:8c:68:16:b6:a6:79:c2:
ab:87:4f:87:e2:70:b6:4d:1f:ac:d4:e5:45:8b:fb:
eb:93:89:dc:f5:7f:53:0f:b0:d0:37:74:7f:83:33:
47:6d:6a:7d:f9:e9:11:75:3b:57:32:cd:e4:f8:0f:
e0:fd:7e:65:86:b0:cc:73:92:1a:52:fb:d0:15:a5:
7c:63:1b:3e:90:e1:cc:a7:32:9f:51:57:c3:7e:b2:
84:9f:ab:30:50:30:23:8f:7c:83:1e:43:31:7c:7f:
59:7d:fe:35:d2:d1:74:ed:1c:18:ee:17:33:03:40:
84:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:94:43:30:39:77:35:61:AF:8D:4B:B3:E1:97:CA:B1:40:00:24:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a293f00c-f8c2-3dce-aacb-8de74cce0e75.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:30ff:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:fe:ee:fe:2b:d5:9f:21:95:e6:84:cd:dc:c5:e5:c3:08:67:
db:74:e2:33:0f:3d:70:fb:9f:7e:90:9b:14:db:b5:44:07:24:
04:ed:d8:00:d3:23:ab:dc:9d:ad:18:09:ce:ab:b9:3f:cd:5e:
b5:9e:e1:fc:55:3c:5b:09:fc:14:d4:78:78:b7:92:18:65:28:
13:36:c5:db:a9:0a:5c:38:a2:07:8d:ea:63:c7:86:40:52:5c:
25:f9:90:7c:a3:09:87:89:2d:b4:00:66:04:ee:a9:fc:59:5c:
88:0b:16:40:94:dd:d7:a0:f7:75:86:70:cc:8b:b9:99:b4:e5:
73:14:86:21:63:cb:1b:ee:28:1d:78:6d:1a:6c:69:e1:db:bd:
08:fc:e9:a8:4a:5e:03:35:8a:cb:02:fa:2b:52:53:51:d6:11:
7d:29:51:68:1b:2c:56:cd:c9:6e:c3:62:5d:45:8f:7d:ea:89:
a0:57:74:46:56:34:65:9e:40:90:39:df:54:54:be:da:b2:dd:
45:86:7d:70:57:31:4e:89:d2:f7:8a:67:18:9a:fa:17:62:a5:
34:82:ce:dc:17:35:57:71:1c:2d:fd:1c:34:79:9a:27:27:08:
b5:4a:a4:b2:90:e0:44:55:b9:ca:a7:80:4c:ad:c3:ec:d9:f9:
7c:a2:09:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:51:23 2025 by rpki-client