Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa726d2b-cf11-3aa4-8b72-b0d9c208422b.roa
File: aa726d2b-cf11-3aa4-8b72-b0d9c208422b.roa (raw, json)
Hash identifier: 0o+PeuV2rUZQzK4/g5qlBvM26nLHpBKvBa+zvWUG9wQ=
Subject key identifier: 1B:41:11:EA:9D:29:E7:81:BB:83:DA:F4:69:79:D8:7E:99:B9:F7:03
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848906AB74029C7000C7ADDA6E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa726d2b-cf11-3aa4-8b72-b0d9c208422b.roa
Signing time: Thu 16 Jan 2025 13:38:19 +0000
ROA not before: Thu 16 Jan 2025 13:38:19 +0000
ROA not after: Wed 16 Apr 2025 12:38:19 +0000
asID: 396605
IP address blocks: 2001:502:1ca1::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:6a:b7:40:29:c7:00:0c:7a:dd:a6:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 16 13:38:19 2025 GMT
Not After : Apr 16 12:38:19 2025 GMT
Subject: CN=1b897bd7-e106-4138-b549-4d9ea5fe2b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:18:ed:25:e8:02:a1:41:2c:3e:73:dd:68:54:
ed:e3:14:38:cb:95:e0:08:3b:63:f9:4a:51:49:a4:
f0:95:7e:c6:42:dd:23:73:f7:66:6a:bd:3b:4e:cb:
28:c3:48:7c:0c:96:6c:bd:d5:b9:31:1e:83:9a:26:
02:c8:e3:72:0c:17:52:85:af:c1:01:ef:d8:08:01:
d4:12:1d:e7:66:0d:3a:55:08:25:34:73:b4:80:b6:
c2:0f:bc:bf:5c:d3:2f:5a:25:88:40:ad:34:72:e0:
4b:3b:30:6e:e4:82:7a:68:7b:9d:92:43:c2:b0:3f:
13:2a:37:52:76:da:f8:3e:49:18:20:f4:e8:1b:15:
db:72:9e:c0:85:c5:46:72:39:c5:90:32:71:f8:8a:
af:e3:ef:eb:2c:c7:31:16:99:b5:4a:26:22:c1:e1:
88:f2:35:f6:06:69:c2:75:49:79:f4:15:03:9e:72:
96:e9:5d:92:e6:0c:53:b1:ee:aa:cd:49:b1:d8:92:
ea:2e:36:69:14:09:bd:cf:0e:a8:6e:f4:ae:5a:70:
f7:de:01:80:60:78:95:31:09:8e:0a:89:e7:e2:b6:
6a:d2:bc:67:51:34:ee:2c:ae:5b:d2:49:ef:a3:93:
82:c0:83:b3:dd:25:1e:ef:c5:d1:71:9b:0f:58:b5:
93:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:41:11:EA:9D:29:E7:81:BB:83:DA:F4:69:79:D8:7E:99:B9:F7:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa726d2b-cf11-3aa4-8b72-b0d9c208422b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:1ca1:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:08:4b:25:95:e0:3c:5c:e7:70:35:15:21:ed:b9:b3:0e:d9:
cb:26:38:17:3a:96:d3:9a:08:0c:0a:30:22:57:e6:09:ce:dd:
f2:c7:03:16:8a:31:6c:36:17:70:ed:37:41:ad:12:cc:64:29:
84:e4:bc:01:fa:4b:7d:c1:69:c4:11:9f:42:bf:2b:2b:c2:a9:
66:f3:3e:53:5c:e5:85:fc:ff:21:55:5b:2e:3d:62:93:99:69:
0c:a0:73:fc:bd:5e:a4:f7:5b:a0:51:de:fb:6e:49:3e:eb:b2:
81:49:ee:39:bd:0e:a6:5b:f1:80:e9:75:dc:43:d8:f7:bb:77:
0a:ef:30:f2:4e:c4:f1:45:13:cc:d7:c2:03:c8:b7:9a:23:98:
20:0a:77:3f:d8:de:f9:ed:59:7c:95:57:9a:28:57:9a:2a:50:
95:aa:75:e8:02:95:f3:2d:c0:4c:4d:b8:f3:52:d6:d9:fd:6e:
f5:62:3b:75:1f:c6:7a:16:cb:9a:a1:93:4d:5c:38:7c:44:8c:
b9:de:b0:17:07:e7:d9:e6:9a:39:2c:37:42:4a:3d:43:d9:8f:
71:f5:11:bd:1c:07:0d:ce:d4:11:d1:45:78:2e:25:82:61:23:
b7:a8:2f:75:27:d3:5a:7e:e7:35:75:3f:28:2a:ae:3b:02:5a:
f3:d6:19:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:30:35 2025 by rpki-client