Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9d84c85-b2a6-341a-9dde-0b64d2ed9185.roa
File: a9d84c85-b2a6-341a-9dde-0b64d2ed9185.roa (raw, json)
Hash identifier: H6NPEZxm9z4HkFG6RrolCrvaWv2BjQuVBN3h4WBkXvc=
Subject key identifier: BD:06:03:9D:A8:81:84:F7:28:26:82:B4:57:2E:06:27:8C:88:96:40
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858483720144F673B84AA5CC62C80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9d84c85-b2a6-341a-9dde-0b64d2ed9185.roa
Signing time: Sun 15 Dec 2024 14:00:53 +0000
ROA not before: Sun 15 Dec 2024 14:00:53 +0000
ROA not after: Sat 15 Mar 2025 13:00:53 +0000
asID: 396560
IP address blocks: 2001:500:123::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:37:20:14:4f:67:3b:84:aa:5c:c6:2c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 15 14:00:53 2024 GMT
Not After : Mar 15 13:00:53 2025 GMT
Subject: CN=d2a11f05-d55f-4218-a07d-9d7fcf75d8fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:16:ff:4e:46:67:70:60:fb:64:5b:68:8d:54:
cf:29:df:cc:22:a9:e7:c4:c7:72:ab:14:8c:2c:cf:
ea:fc:46:e8:19:57:cc:34:af:59:8c:2b:97:5d:75:
b9:e9:2b:30:ce:3f:b9:56:0e:06:70:0c:17:18:b1:
72:6e:e5:fa:2a:4b:19:5c:0b:d2:cc:65:71:94:65:
b7:02:18:05:b7:8a:a8:62:a2:da:ed:b1:9e:cd:3e:
34:06:96:a0:5a:ef:28:25:fc:2c:13:8d:e6:6c:13:
fd:7a:4a:50:96:a0:55:4f:58:28:88:41:ff:a0:af:
a6:2c:66:0f:32:a9:96:27:26:9b:7a:22:d2:81:a9:
92:80:31:92:0c:d5:da:9a:d4:18:90:3c:59:10:ad:
4e:f1:f9:c7:63:4f:5c:dc:77:be:13:61:e1:1c:6d:
23:50:d3:0b:68:0d:69:47:b7:ce:41:16:f3:39:50:
72:52:4c:64:44:27:29:6d:b4:b2:a2:f7:07:f6:cc:
90:ef:24:06:5d:47:36:b2:36:22:e8:b1:92:23:28:
d8:51:97:9b:44:44:28:d1:08:74:ce:33:3d:a0:b8:
0a:66:8d:b4:f5:21:5a:70:98:4d:36:79:19:bd:f2:
3f:b5:99:ae:89:2b:cb:3e:31:35:31:d5:d3:c2:2c:
54:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:06:03:9D:A8:81:84:F7:28:26:82:B4:57:2E:06:27:8C:88:96:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9d84c85-b2a6-341a-9dde-0b64d2ed9185.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:123:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:8e:0b:e3:eb:1f:10:ea:b5:24:d7:b6:eb:6b:90:90:5e:58:
6b:f1:28:c0:42:1e:99:0a:b6:c6:fc:88:c6:21:70:f9:28:ae:
d8:99:27:98:7f:c7:7d:d0:ac:66:54:ea:18:df:b5:f2:b7:bd:
8b:af:84:48:77:83:be:86:5b:24:8d:c0:94:0e:0c:3d:22:dd:
b2:dd:61:65:31:60:11:39:d6:34:70:f3:d7:cb:dc:34:ca:d9:
9a:bc:47:fe:26:09:2a:af:6b:c0:a7:cc:f9:ea:de:f7:80:fb:
e8:37:77:cd:62:9c:83:86:8b:e6:4d:5f:64:09:2a:cf:38:25:
79:b6:7d:2f:cf:ba:bd:b0:ee:3b:e3:46:ea:64:cb:24:91:24:
24:3e:2c:9e:fa:cc:88:8a:cb:d7:81:08:68:d5:5c:4b:df:a8:
9d:32:dc:75:73:c9:ec:ff:d5:3d:ab:09:60:33:fd:83:53:f3:
4d:67:ab:4f:66:0f:dc:58:3f:5a:3d:5d:00:f4:1e:c5:4d:f7:
18:ae:fd:42:d6:97:59:2b:58:23:ec:7c:12:db:52:c3:44:51:
c0:d6:41:21:dc:f9:0a:43:ab:bf:e0:02:f0:70:8c:a8:b0:0e:
c9:56:53:0a:7f:21:26:ce:fa:4d:40:d3:5f:28:09:64:f2:79:
f6:8b:95:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:52:15 2025 by rpki-client