Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a66495ee-a684-3ccf-ae50-85cbc49f2e1c.roa
File: a66495ee-a684-3ccf-ae50-85cbc49f2e1c.roa (raw, json)
Hash identifier: b4fRhzj7zXZn5KH//RKzT0fLqSn29BkmNcK/bupDvE8=
Subject key identifier: 6E:59:D6:32:A4:7C:8E:45:BF:9E:1B:8A:83:25:5D:A9:D2:11:B9:82
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584861005B29BFBAF54B1AA69B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a66495ee-a684-3ccf-ae50-85cbc49f2e1c.roa
Signing time: Mon 30 Dec 2024 14:00:51 +0000
ROA not before: Mon 30 Dec 2024 14:00:51 +0000
ROA not after: Sun 30 Mar 2025 13:00:51 +0000
asID: 211369
IP address blocks: 2001:501:8a29::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:00:5b:29:bf:ba:f5:4b:1a:a6:9b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 30 14:00:51 2024 GMT
Not After : Mar 30 13:00:51 2025 GMT
Subject: CN=f78f5122-df8e-4625-b6e3-782a2039a224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:aa:a7:f5:f8:44:3e:5d:26:b8:b9:d6:b1:db:
e8:1f:0a:40:85:93:fa:e0:22:e2:44:db:f6:85:1b:
e4:17:b1:60:e6:cc:49:35:f6:26:b2:b3:62:fb:e6:
fc:eb:fd:31:d4:42:c7:f9:bd:f2:36:a2:9a:d1:eb:
69:3c:74:d8:e2:58:01:4e:57:7c:0c:a7:f0:b1:13:
b1:dd:10:39:89:ce:20:70:2d:3a:af:0b:25:9c:39:
b3:bf:0d:ba:16:6d:54:34:3e:e1:96:3e:c9:42:f5:
d7:17:c9:af:6a:c2:ec:8c:b4:62:2d:69:f0:f7:68:
a6:33:30:e5:c1:ef:41:19:88:6f:37:97:24:a7:03:
e6:30:24:bb:15:41:c3:16:88:61:4d:06:66:98:cb:
c1:8d:0f:83:39:20:7a:79:60:06:11:45:bf:7c:73:
aa:9c:16:e9:99:d9:3e:ec:3d:72:5a:0c:7d:e5:ee:
a0:2b:95:14:28:54:04:d8:d1:98:76:9e:e5:7f:d3:
18:2a:b8:cc:53:13:b1:0f:ae:ad:c3:43:cc:cb:8c:
74:42:49:43:f9:c3:33:16:5a:59:8a:5c:77:6b:5b:
cf:54:f6:bc:c3:d7:6d:8a:49:31:1e:87:cf:5f:71:
a7:83:25:52:e4:a6:d4:cd:f2:2f:29:0b:dc:6c:5f:
e9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:59:D6:32:A4:7C:8E:45:BF:9E:1B:8A:83:25:5D:A9:D2:11:B9:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a66495ee-a684-3ccf-ae50-85cbc49f2e1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:501:8a29:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:31:99:af:91:72:be:97:74:1d:b0:16:cb:87:e2:2c:78:cf:
90:e3:3a:9f:82:21:6c:bc:35:7a:fc:79:89:3b:99:9d:bc:3d:
73:06:80:ce:9d:2d:e3:d6:3e:5d:10:e0:61:93:8b:cd:e4:91:
92:f1:7d:30:d8:c7:b6:cd:36:3d:11:a7:f3:7a:b4:fe:a6:86:
d6:a8:91:a4:38:af:4b:72:e9:6c:e3:72:d0:4e:cd:6b:9f:e3:
4b:4e:61:74:6f:a9:f3:e9:0b:5a:4e:29:73:60:e7:1d:a5:dd:
83:ff:23:64:03:c0:49:21:35:93:6a:e3:70:8a:8a:bf:12:0d:
37:af:a6:ae:66:aa:38:1f:8c:f4:34:a3:a5:7c:6b:1b:7e:cc:
58:e2:d9:68:93:92:05:89:9f:e3:b2:12:63:2a:fd:f0:de:02:
2d:fd:0b:f1:61:bf:c2:51:b2:8d:5a:71:f7:37:f1:81:16:91:
2a:96:b7:0b:92:8a:b2:3b:dd:91:c6:0e:ee:81:6f:71:b1:a7:
6a:fe:0d:fc:96:97:a6:7f:9b:3a:5e:45:8e:d9:bd:b6:38:ee:
b0:b3:09:cc:9a:a0:c7:25:1a:d9:89:a1:dd:b5:1f:89:80:bd:
44:6a:6c:c8:d4:77:de:04:e6:1c:bc:31:b6:54:05:6a:01:c9:
dc:74:15:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:52:40 2025 by rpki-client