Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a4588cf0-0852-32d5-a25f-579a6d2c3143.roa
File: a4588cf0-0852-32d5-a25f-579a6d2c3143.roa (raw, json)
Hash identifier: GDxMcRCcNKmzS3BNfrctfajy1vogbUXZ3eCtIs3IbyE=
Subject key identifier: CF:36:9D:38:C8:29:04:39:23:A2:3F:06:D4:EE:CB:23:76:D3:0E:C3
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848424347B2FC2F7F31C7D82800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a4588cf0-0852-32d5-a25f-579a6d2c3143.roa
Signing time: Thu 19 Dec 2024 13:45:48 +0000
ROA not before: Thu 19 Dec 2024 13:45:48 +0000
ROA not after: Wed 19 Mar 2025 12:45:48 +0000
asID: 396600
IP address blocks: 2001:500:126::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:43:47:b2:fc:2f:7f:31:c7:d8:28:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 13:45:48 2024 GMT
Not After : Mar 19 12:45:48 2025 GMT
Subject: CN=20d00669-0def-40c2-a054-cf12b379a9c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c1:6f:b6:84:66:e8:f3:15:bc:f9:ad:64:c0:
47:cb:a7:8f:e8:7e:c0:90:fa:0c:c4:53:63:f7:51:
94:be:ff:d1:f1:ce:c2:c7:d6:5f:90:95:aa:94:ae:
e0:ee:dc:58:68:1b:0e:56:cb:ca:4c:24:a7:2f:d7:
27:ff:04:74:28:9a:0d:e9:e9:90:d7:e7:07:5f:ce:
23:08:ae:37:2e:90:72:48:e3:df:91:3a:a7:03:37:
4c:d0:e7:60:b6:16:37:ff:1a:05:7d:e5:af:2c:53:
b3:41:26:25:c7:9f:1f:c0:14:5e:dd:d8:9e:c2:84:
fb:91:1a:e1:4d:14:b5:67:b1:d8:9f:f8:39:9a:58:
c6:61:11:8d:24:80:c9:55:49:88:bd:0f:ed:1f:f1:
b8:49:42:f4:cd:77:17:0e:e0:ed:e4:43:57:2a:e0:
7d:44:7e:f2:e8:7b:94:df:5a:f2:a0:49:9c:00:eb:
f9:4e:31:30:6a:28:c4:96:cb:d4:d4:af:be:21:08:
bc:76:39:c7:e6:c5:c0:60:a5:4c:1b:03:e6:1c:92:
bd:93:fb:b4:e7:0e:d0:78:83:3d:71:26:c5:73:ba:
20:82:5c:ae:40:f2:fa:75:74:42:d2:66:4b:c8:94:
e4:d7:7a:ac:2e:da:eb:37:58:51:92:ee:e4:70:5f:
9a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:36:9D:38:C8:29:04:39:23:A2:3F:06:D4:EE:CB:23:76:D3:0E:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a4588cf0-0852-32d5-a25f-579a6d2c3143.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:126:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:a3:b6:eb:b5:d9:bb:56:fd:e6:42:9d:34:84:70:b8:db:6d:
6f:89:62:30:ec:16:fe:16:45:f9:67:2e:65:c1:8c:ac:59:8c:
f3:f5:4e:5e:ed:e7:87:be:05:3d:77:55:d8:ba:9c:5a:26:71:
3b:5b:f8:9e:a0:78:96:3a:db:95:0c:2d:3f:94:29:64:1d:0f:
df:d7:f7:5b:61:6e:35:72:89:75:49:55:f6:35:d4:c8:6f:b9:
87:ea:89:b1:19:2c:d5:b6:ed:a4:5c:7a:48:e4:cb:69:00:c7:
14:24:91:33:f5:44:32:b8:1f:eb:80:df:95:4c:22:a1:c9:a3:
ab:aa:85:77:46:a8:e0:f9:f5:48:b1:60:5c:52:10:45:bc:5b:
d7:f0:d5:96:79:4c:db:17:1a:5b:e9:76:71:70:0e:44:4f:19:
d5:08:86:1f:29:f0:0f:da:ff:3b:fc:f5:0d:9d:7f:21:29:0c:
cb:08:cb:83:ca:c0:72:95:e7:78:ea:c7:a5:a5:49:09:37:4a:
d5:22:4d:80:9c:08:2b:ac:42:84:06:0a:98:b0:6f:e6:d7:dc:
4a:53:ab:60:80:46:31:f4:a3:cf:7a:52:e9:f4:2a:89:22:b0:
e6:9a:72:e6:5f:44:57:d8:10:50:07:31:e3:c6:87:7f:34:d0:
b9:84:14:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:18:04 2025 by rpki-client