Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8128c16-7744-3ac6-b7cb-d46d3ea81a91.roa
File: a8128c16-7744-3ac6-b7cb-d46d3ea81a91.roa (raw, json)
Hash identifier: 8QJVSQ1DY3Gg6+1msRxA/UX9NhgMrrVH8FIXWhDsFYs=
Subject key identifier: 93:EA:90:22:02:89:D9:EA:74:E5:73:CC:86:1E:A1:5E:53:53:6B:E1
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858488DAB7543D7BD48CBFF671080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8128c16-7744-3ac6-b7cb-d46d3ea81a91.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 396574
IP address blocks: 2001:500:7967::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:75:43:d7:bd:48:cb:ff:67:10:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=60e1fa82-c4fb-49c2-963c-7dcc2a25e2e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:50:3a:fc:41:05:b5:37:e4:f7:c3:3d:0c:92:
96:62:21:fd:24:e9:24:8e:09:fe:5e:c5:f4:8b:46:
ce:83:23:c5:a6:c9:22:76:ed:51:65:10:61:3a:95:
5f:dd:76:13:e8:7d:2e:d2:5d:c8:c6:0d:47:90:88:
c7:9f:a1:0b:4d:4d:d0:f3:94:40:6a:b9:55:d9:d6:
f7:b9:7e:22:a3:5a:18:e7:aa:6f:3c:f3:70:61:62:
9e:2b:2b:17:79:0e:a4:d8:fc:10:73:d5:92:42:5e:
b9:34:68:a4:ac:dc:40:0f:43:84:ee:a2:41:75:e7:
8a:bb:28:f2:5c:05:58:d5:4d:db:c9:6e:63:89:ca:
72:6d:62:e0:bf:dc:3c:8e:83:3d:c5:30:fd:95:1a:
66:3b:a4:eb:25:81:ea:48:b7:62:e7:ce:2e:7a:66:
5e:f7:27:f6:26:f4:c4:14:a4:39:cc:a5:86:7c:e8:
0b:4d:cf:7b:ad:da:29:cc:fc:12:f1:48:a2:68:95:
f7:21:56:ee:b8:83:e5:2c:cc:fb:ba:f2:ff:c3:77:
fe:2e:f2:53:f8:b8:20:0a:38:df:99:78:8f:b1:3a:
89:99:97:e0:98:87:14:3e:04:b8:3a:e9:58:e1:f5:
0f:e8:48:7e:aa:48:96:77:ec:0f:01:d9:ff:c0:48:
87:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:EA:90:22:02:89:D9:EA:74:E5:73:CC:86:1E:A1:5E:53:53:6B:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8128c16-7744-3ac6-b7cb-d46d3ea81a91.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:7967:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:bd:88:fa:b9:df:5b:8f:1a:0a:a0:3d:df:ef:8e:40:de:c0:
16:49:a3:b5:e2:11:d2:96:aa:93:d9:33:f0:23:5e:fe:71:81:
e5:58:d7:ea:38:57:3c:3e:32:86:6e:5c:74:02:3f:32:65:53:
73:3a:c3:b7:02:59:3a:bd:a9:27:c2:b4:ae:da:b0:98:9f:65:
fa:cf:aa:bc:b5:db:90:7f:4d:88:e8:09:65:ad:ca:b3:aa:88:
76:b8:22:be:ea:44:47:d3:79:a8:54:76:c9:19:76:0f:ea:56:
53:88:50:c2:b7:7d:85:d9:58:e6:5a:29:85:28:d2:f0:83:65:
6c:04:e0:78:af:b9:ea:9b:2a:0c:e5:ad:be:c6:37:f2:d1:fc:
d7:6d:ac:f8:95:e1:de:5e:1c:a4:1d:3e:0e:e4:8f:7c:1b:53:
78:95:ae:d9:93:11:f1:36:22:a3:76:6e:5c:b8:16:6a:75:6c:
dc:92:28:7e:64:8a:81:f4:61:35:00:bf:75:27:7f:7d:51:54:
5e:ee:8f:de:69:e0:25:de:42:d2:bf:4b:68:63:af:0e:b7:7d:
ae:61:3d:25:76:53:3a:e0:41:5e:e4:f9:86:da:45:cf:e9:bd:
38:ce:9b:19:e3:e7:db:51:7d:84:a8:23:28:1a:a9:de:84:e7:
25:ab:49:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:39:11 2025 by rpki-client