Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae505e54-15ac-3e6e-b079-b6fd5f8001f4.roa
File: ae505e54-15ac-3e6e-b079-b6fd5f8001f4.roa (raw, json)
Hash identifier: eG59U6FkOPVIKuDr+ai7FR/Gdu4yQOjibtnFucwkjbg=
Subject key identifier: 5A:2B:53:10:FF:C4:77:CC:91:58:21:58:47:DA:F9:50:35:7F:60:00
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584842430DE3A9CDA6E89D988D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae505e54-15ac-3e6e-b079-b6fd5f8001f4.roa
Signing time: Thu 19 Dec 2024 13:45:21 +0000
ROA not before: Thu 19 Dec 2024 13:45:21 +0000
ROA not after: Wed 19 Mar 2025 12:45:21 +0000
asID: 396578
IP address blocks: 2001:500:126::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:43:0d:e3:a9:cd:a6:e8:9d:98:8d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 13:45:21 2024 GMT
Not After : Mar 19 12:45:21 2025 GMT
Subject: CN=67eaf108-a25b-4a83-a6c3-b6a3b2719451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:56:90:98:f7:de:12:ae:23:40:2b:58:30:d2:
6b:b0:52:b4:0d:d6:e1:03:0b:d2:13:3b:90:83:e3:
80:c1:41:3c:c1:35:58:e3:e1:7c:84:b3:58:f7:a2:
4b:5c:f5:8f:6b:2c:13:7a:bc:bb:07:10:4c:20:50:
c0:e8:83:7e:ba:22:0d:78:77:ea:94:c8:6b:db:23:
3b:54:e7:ea:ba:3f:83:6b:d8:21:6c:d8:93:22:83:
07:e4:6f:ad:db:16:b3:29:8f:23:3a:27:f6:99:40:
46:43:b7:e9:34:69:d3:b1:68:70:da:c2:5a:46:a5:
bc:35:8f:ce:61:48:64:20:98:7d:3a:5c:80:57:9f:
31:e6:78:a0:d6:14:f6:4d:ea:e5:a7:ab:d6:d6:53:
2f:c7:98:14:9f:c2:ff:e6:df:a2:de:a5:a4:5e:98:
c4:1d:20:0b:22:de:f2:f0:1e:49:6b:20:98:3e:50:
2a:97:2d:3a:74:a1:6d:f5:0d:c2:75:30:38:7f:08:
76:02:a5:ad:99:7d:91:22:42:13:e6:a1:04:b0:4e:
cb:3f:70:2a:0e:92:28:06:fa:cf:13:29:9c:d6:b8:
3f:07:73:ee:a9:cd:e9:8d:16:81:22:70:cf:e8:42:
ae:3d:94:b6:eb:52:dc:a4:db:56:7d:14:74:20:f8:
bc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2B:53:10:FF:C4:77:CC:91:58:21:58:47:DA:F9:50:35:7F:60:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae505e54-15ac-3e6e-b079-b6fd5f8001f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:126:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:04:a4:4d:25:72:77:1e:05:48:61:ee:ca:e6:1e:71:6b:a1:
67:d2:68:1b:04:f5:a4:95:c4:d5:f1:0c:2a:8a:bd:dc:89:6a:
cd:62:12:05:f6:8e:dc:26:03:cb:eb:ed:89:cc:1b:cb:ce:22:
b8:f9:04:2a:2a:36:40:c5:82:b8:1e:8d:15:fe:d7:c2:43:b4:
8f:a2:4c:35:b9:35:90:86:09:96:63:e4:b5:d1:f2:ea:d5:93:
2c:63:41:a9:2f:d4:6d:c7:d9:c2:cc:8b:c9:71:f0:c6:20:18:
f8:d5:dc:1a:65:60:c8:37:67:72:02:21:fa:bd:7d:a2:61:a5:
14:da:79:49:1b:3a:40:7d:f0:34:68:c1:8c:ba:57:c1:92:5f:
e2:b3:85:72:e1:29:3d:99:36:94:fe:a7:bf:1f:97:4d:92:a1:
e7:85:32:f6:04:62:3d:a9:8d:b1:8d:05:b2:82:2d:f2:62:2a:
17:57:0e:b1:f8:64:b2:f8:52:5a:d6:c7:78:5b:f8:d7:7e:f9:
11:b0:f6:52:c4:f9:fd:98:b3:d5:c4:63:95:33:72:f3:02:df:
5f:f8:bf:6d:7f:dc:3f:af:54:ba:e7:5b:e0:c8:0c:cc:18:9d:
4e:2a:cf:16:93:34:63:2f:b1:5f:d3:0f:28:6d:11:2a:4b:c3:
af:67:5b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:54:37 2025 by rpki-client