Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9b2e9f9-07a6-3764-9f3f-528ed0ee7634.roa
File: a9b2e9f9-07a6-3764-9f3f-528ed0ee7634.roa (raw, json)
Hash identifier: bcf79YKc1YYJZrClT4glBwCxY5vlcToBwqkvi9IlDe4=
Subject key identifier: 23:90:62:70:D6:A3:69:82:2F:EE:BF:70:DB:02:56:E2:37:FF:90:94
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584861005A2E31A364248B8A3F80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9b2e9f9-07a6-3764-9f3f-528ed0ee7634.roa
Signing time: Mon 30 Dec 2024 14:00:51 +0000
ROA not before: Mon 30 Dec 2024 14:00:51 +0000
ROA not after: Sun 30 Mar 2025 13:00:51 +0000
asID: 397207
IP address blocks: 2001:501:8a29::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:00:5a:2e:31:a3:64:24:8b:8a:3f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 30 14:00:51 2024 GMT
Not After : Mar 30 13:00:51 2025 GMT
Subject: CN=ed0d7d18-2ef2-49e4-87b3-5a36bc50a739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2a:5a:3c:e9:e8:83:6d:f0:ed:ae:6d:19:be:
89:24:b2:c4:01:dd:96:0a:c8:06:31:84:6c:4b:99:
72:06:e4:67:28:8e:b7:3c:f5:91:93:c7:42:85:af:
f3:06:e9:68:e3:c4:82:5a:4c:63:ec:58:1e:1e:91:
6f:2c:0d:d4:c1:a0:48:5e:e3:25:e0:66:f3:d2:5a:
cd:87:a8:c5:4c:f9:b8:60:1c:b9:a7:31:c8:d0:79:
8f:79:d2:3d:d8:44:95:cb:2b:a2:a6:bd:60:32:b7:
90:f1:ef:6a:bd:c5:0c:8c:52:3e:43:62:b7:8e:7d:
35:c9:60:d1:ee:69:78:c0:0d:7f:9b:ce:7b:05:c7:
c6:e4:4b:ee:9a:8b:e5:ae:64:2f:2a:e2:0c:27:37:
cd:8b:57:73:17:b8:1a:cb:b2:df:fc:6d:e2:7f:63:
cd:05:a1:15:b6:2b:72:02:28:4b:1b:34:8c:40:d2:
64:26:1f:3c:18:56:5e:ee:6c:51:0e:ed:e0:fb:61:
1e:8d:fa:fd:f0:54:f8:40:7d:e9:e8:a9:04:f8:a6:
0d:1f:45:56:ea:43:e3:1a:9a:82:07:7f:be:9c:ce:
67:d9:b6:5f:07:ae:75:25:38:ce:57:f5:e4:47:de:
40:f6:9e:d7:ac:41:da:7e:2e:1d:0c:4d:b6:5e:de:
b4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:90:62:70:D6:A3:69:82:2F:EE:BF:70:DB:02:56:E2:37:FF:90:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9b2e9f9-07a6-3764-9f3f-528ed0ee7634.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:501:8a29:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:20:91:56:00:42:b9:f8:ce:e9:b2:65:cc:82:86:e9:97:f0:
b3:60:5d:c8:71:ba:b9:6b:8a:f2:30:9b:ec:27:d8:40:90:61:
06:e4:ea:66:3b:96:e8:25:dc:7a:2a:72:12:ba:37:c6:63:dd:
8b:96:58:7a:9f:6c:cb:a5:00:1d:8f:2a:b5:88:dd:97:c7:66:
39:f8:78:f1:db:b8:ed:36:07:8f:fd:91:80:ec:8c:9f:86:81:
7a:79:68:3f:15:b2:54:7f:44:c4:b6:1a:5f:2e:a2:e5:57:4a:
4a:21:a8:f3:34:0b:41:1f:1e:d8:dc:1c:68:9a:c9:de:e1:a6:
a8:ac:56:ef:4a:04:1d:ef:d4:84:69:4e:a7:87:11:1d:3b:ca:
40:ef:fe:f4:53:3d:00:fa:be:81:a5:26:f3:80:c4:35:21:ef:
c3:83:c9:da:bb:e4:31:1a:ed:99:97:0e:0d:08:cc:e2:4f:11:
4b:2d:e3:6c:ef:90:f0:28:0e:c7:ca:6e:3f:6d:61:70:fe:da:
44:19:d7:53:f8:9d:90:6f:be:f5:66:3b:0d:bd:5e:ca:b7:fc:
f7:93:ba:06:53:c9:db:1a:b1:91:6e:31:f7:5f:a7:d1:f8:98:
7e:2d:ba:ca:69:9b:8e:d8:96:aa:f8:01:8f:85:40:44:a5:2b:
bc:e8:11:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:32:42 2025 by rpki-client