Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9bfc73c-4b8f-3dc6-8f89-36d944f09da4.roa
File: a9bfc73c-4b8f-3dc6-8f89-36d944f09da4.roa (raw, json)
Hash identifier: lhZ6UQwtARjge3BoZ6O0o8fn/A6T2Y/aNXMYA8M3E3o=
Subject key identifier: 4E:33:5A:E7:D4:40:5E:C9:40:84:57:52:A2:E3:0D:F4:CE:59:11:96
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848610059BD76498AEA193C1600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9bfc73c-4b8f-3dc6-8f89-36d944f09da4.roa
Signing time: Mon 30 Dec 2024 14:00:51 +0000
ROA not before: Mon 30 Dec 2024 14:00:51 +0000
ROA not after: Sun 30 Mar 2025 13:00:51 +0000
asID: 397201
IP address blocks: 2001:501:8a29::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:00:59:bd:76:49:8a:ea:19:3c:16:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 30 14:00:51 2024 GMT
Not After : Mar 30 13:00:51 2025 GMT
Subject: CN=5d755edf-cef4-4136-8499-0aa06d54fa4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:53:fd:11:c4:c3:d7:4b:ef:73:cc:a8:b2:74:
96:b1:35:00:62:34:b0:2a:8b:74:51:b1:2c:0f:ed:
88:2a:a7:b2:a9:f1:7e:81:c3:97:20:b3:b8:d4:99:
bf:13:01:27:d5:ad:d8:f3:52:1d:f3:73:73:45:3b:
1a:bb:53:35:ad:d6:80:8e:4d:0a:8e:e7:2f:65:3d:
f3:4c:8f:06:8b:90:4f:a6:87:f9:8d:e5:7d:96:73:
12:65:b0:d6:f3:be:7f:4a:c1:3e:cd:8a:99:5e:6d:
6e:97:6a:c1:13:1d:65:c5:26:cf:c3:28:d7:50:bf:
ec:52:fe:d7:28:63:6d:5d:e0:12:c8:d7:d4:5f:af:
65:d9:a2:8c:59:a4:cb:40:26:0e:8b:f2:85:87:1f:
fd:bd:42:fd:cd:1b:1f:09:39:cb:7d:84:b5:32:cf:
30:94:09:2c:6b:20:df:1c:7c:65:bd:d8:e3:c7:e7:
ae:66:44:3e:ae:bc:a8:3c:64:50:8e:51:32:69:e5:
2d:48:83:1d:34:99:6a:ac:c3:44:40:df:7d:86:f0:
d9:5b:59:64:63:4c:f0:8a:32:cd:00:7e:fe:7a:54:
f9:c8:98:a7:e7:61:9f:aa:90:1a:b9:ab:80:12:ef:
96:dc:bb:79:19:38:94:86:e8:6c:da:55:d6:32:ac:
57:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:33:5A:E7:D4:40:5E:C9:40:84:57:52:A2:E3:0D:F4:CE:59:11:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9bfc73c-4b8f-3dc6-8f89-36d944f09da4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:501:8a29:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:1a:cc:df:f6:94:f3:0f:0e:cd:fb:1a:2e:5c:df:33:09:89:
e3:62:a4:b1:47:db:be:7a:14:ef:a6:59:7d:df:f6:86:ec:c1:
c8:1c:a0:5a:21:75:88:82:4b:fe:e1:f6:f2:a0:60:55:f7:4b:
57:42:0e:80:71:46:1d:c4:98:f5:f1:3f:7d:a6:e7:27:df:a4:
e2:f2:d9:69:0c:f7:a6:b9:fd:cc:48:ec:19:81:4b:c5:29:6b:
5a:91:09:c3:0c:44:3d:c5:b2:57:bb:0b:28:41:9a:18:5f:9a:
d4:c1:5d:c0:99:cf:39:8b:42:e3:6e:66:3d:c2:1b:e1:da:70:
40:e9:8f:f1:33:3d:01:f1:e3:26:b1:84:19:2c:5e:66:8a:65:
7e:16:0c:41:98:27:8b:61:dc:53:c5:21:2e:e6:7d:ee:d3:78:
6b:b3:c6:3e:a7:bc:72:d5:3f:58:46:14:66:ad:79:f4:b3:03:
48:f6:f0:20:78:15:95:53:a4:a0:82:a6:c2:82:f1:d0:1a:67:
76:ed:1c:d9:a4:50:ef:7f:ff:85:4a:19:c4:04:9d:37:c3:e3:
f2:b3:9a:9a:d5:5f:71:ab:a5:9d:cd:52:45:0c:7a:38:14:d6:
bb:ac:e1:54:5f:d9:48:53:4b:27:af:8f:fa:2c:b5:23:12:49:
32:df:18:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:49:03 2025 by rpki-client