Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a428c78f-4f2d-3123-8be9-49c7fca937ed.roa
File: a428c78f-4f2d-3123-8be9-49c7fca937ed.roa (raw, json)
Hash identifier: XeeJjAZyNdzuGmfFyME41PEUq+TVkk1FvMFS5GWyykI=
Subject key identifier: 63:B1:CF:DE:6A:5D:91:26:A3:B4:21:7F:11:B1:CC:1B:5A:7B:60:41
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858484AAAD93363909EC6A1F5C414
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a428c78f-4f2d-3123-8be9-49c7fca937ed.roa
Signing time: Sun 22 Dec 2024 14:00:51 +0000
ROA not before: Sun 22 Dec 2024 14:00:51 +0000
ROA not after: Sat 22 Mar 2025 13:00:51 +0000
asID: 396605
IP address blocks: 2001:500:121::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4a:aa:d9:33:63:90:9e:c6:a1:f5:c4:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 22 14:00:51 2024 GMT
Not After : Mar 22 13:00:51 2025 GMT
Subject: CN=903053ad-e900-496e-a60f-076db9dc79f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:69:66:79:c4:46:30:9f:2e:3b:8e:c1:4d:de:
75:09:94:92:aa:d9:7f:db:9c:3c:1d:87:71:16:3c:
02:5c:fe:ec:af:f0:6d:f2:08:dd:f9:d9:d8:c3:aa:
cb:47:71:8c:c3:88:c2:a9:49:cd:cc:6f:fb:8b:13:
87:73:e5:3a:07:da:2f:bb:4a:af:12:54:49:76:b5:
b1:47:1a:6b:d8:1d:54:5e:9e:fd:bc:c1:54:f8:93:
fe:d7:83:ce:9c:d5:a0:c3:be:6f:35:ea:73:81:2a:
c9:61:47:1c:2d:a7:7b:75:65:0d:21:88:81:e6:c9:
90:2c:aa:bf:f3:3c:dc:e5:34:12:e9:d6:1d:ff:c0:
21:23:2f:a4:5c:77:02:5e:e2:c3:eb:af:c9:08:18:
62:44:53:54:80:f6:66:71:01:25:cc:68:71:5f:d6:
ce:60:71:59:7f:d1:56:e3:6b:47:39:21:be:0a:0d:
6d:ef:78:00:e2:87:e2:f1:a9:1b:14:a0:e6:89:bf:
6f:ec:c1:d9:ca:02:14:b8:bd:f3:03:17:d0:c4:19:
29:97:97:f8:e1:5f:6b:d8:87:06:d3:92:6b:26:aa:
7f:51:ee:55:ce:50:c5:4f:19:3d:28:2d:c2:68:73:
aa:65:82:f5:f3:82:7d:4f:bb:e6:ba:07:1e:64:f2:
71:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B1:CF:DE:6A:5D:91:26:A3:B4:21:7F:11:B1:CC:1B:5A:7B:60:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a428c78f-4f2d-3123-8be9-49c7fca937ed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:121:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:21:9a:23:57:05:d8:79:7d:bc:12:62:cc:1b:64:ca:56:35:
10:51:3c:25:5b:dc:97:05:b8:83:95:ae:df:c2:52:01:b3:71:
43:69:e0:b6:64:8c:f7:54:63:5f:2f:35:31:74:35:8f:38:18:
13:2d:14:0c:af:81:56:e4:18:ac:5f:f4:7a:cb:2d:e7:b0:14:
38:6f:e4:f4:1e:60:12:88:c9:a8:9d:ac:5a:bf:e4:3d:81:fd:
a0:0d:33:ba:db:28:58:68:4e:3a:ca:25:2b:8a:dd:d8:ca:6e:
86:dd:c8:c7:c3:97:b2:16:99:03:1b:3f:af:21:dd:96:ad:10:
a0:1c:01:99:ee:2a:86:3d:93:4c:44:1a:39:bc:33:a2:e6:e0:
bd:82:e9:c3:78:78:bf:cf:14:99:47:36:0c:87:b0:a4:d5:ad:
7b:66:7e:41:43:fe:28:0c:e1:cf:7a:a0:39:a0:c8:d1:0a:71:
8c:cf:9e:b3:22:b4:3c:92:85:6a:38:97:a0:fe:b8:f4:72:0b:
67:06:40:05:f6:29:9c:2a:f7:ce:c3:9e:a3:c8:5b:4d:cf:bd:
c8:23:f6:76:93:05:5a:14:d2:6a:f5:e8:a0:67:98:4f:1d:23:
b7:64:0b:2b:c9:bb:40:f3:c0:dc:bb:9c:67:b2:18:78:df:36:
cb:42:f5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:54:57 2025 by rpki-client