Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b6a89dfc-08aa-3700-9be7-4697bc161abd.roa
File: b6a89dfc-08aa-3700-9be7-4697bc161abd.roa (raw, json)
Hash identifier: A97EgPYcKRhgd4ca3K3aqebJUCFrs8lqHtKaAlaVAQ0=
Subject key identifier: BF:78:61:3E:30:4B:66:D9:CD:4A:8E:75:99:D2:87:EA:E3:A3:BA:E5
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489BA0BBF0C7D9726AF67084A4
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b6a89dfc-08aa-3700-9be7-4697bc161abd.roa
Signing time: Mon 20 Jan 2025 14:00:51 +0000
ROA not before: Mon 20 Jan 2025 14:00:51 +0000
ROA not after: Sun 20 Apr 2025 13:00:51 +0000
asID: 396608
IP address blocks: 2001:500:30ff::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9b:a0:bb:f0:c7:d9:72:6a:f6:70:84:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 14:00:51 2025 GMT
Not After : Apr 20 13:00:51 2025 GMT
Subject: CN=bf8571dc-b7d0-42cc-8d54-05d659176cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d4:ec:67:3b:c7:9a:6e:b7:3f:a0:5e:22:ac:
ee:13:33:7c:65:32:14:37:a1:b9:a9:14:15:bb:34:
14:6e:63:2e:fa:7c:f0:b7:81:32:21:8b:48:20:5b:
76:bd:96:b2:7f:f5:22:83:e0:c3:49:0b:16:35:7b:
17:6c:b2:23:dd:38:00:9c:4f:dc:b7:e9:d9:44:bb:
32:5c:0c:5c:8e:71:81:d0:67:75:f7:69:5b:45:6e:
e8:af:75:96:dc:03:45:74:5b:29:d2:24:e5:4b:a8:
f9:d1:3c:33:ff:d3:68:76:0b:13:e3:af:59:91:55:
bb:c5:d7:b1:93:2b:04:0c:a8:a8:22:89:6e:f6:e3:
e8:e1:56:ef:e7:5e:b8:bc:9f:7f:e7:97:6c:13:23:
ed:cd:31:fb:b7:bb:d5:6f:a2:96:b8:6f:fc:a6:2b:
98:e6:26:8a:f4:36:66:92:b9:14:ba:7e:33:b6:a2:
4b:ba:0b:ea:0e:92:80:bc:36:5c:d9:c9:80:11:ce:
61:c6:91:93:fe:ab:eb:be:de:33:75:a4:51:3b:bf:
32:e9:3d:7a:bc:fa:b9:2f:7a:67:fe:5d:9a:56:a4:
7a:0e:60:ce:57:3b:a4:eb:6e:3f:88:ed:6a:d3:6c:
bb:d6:ab:13:67:d8:59:dc:d0:a2:e7:0c:24:6f:17:
52:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:78:61:3E:30:4B:66:D9:CD:4A:8E:75:99:D2:87:EA:E3:A3:BA:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b6a89dfc-08aa-3700-9be7-4697bc161abd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:30ff:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:16:c0:8e:72:3e:bf:2c:31:ff:8a:3a:43:5b:ba:6e:0d:c2:
b4:46:99:56:64:ad:a4:67:d9:9f:45:4b:dc:81:98:d7:f2:fa:
4e:8e:c2:b2:d0:d5:c9:f6:87:a3:5b:b4:0d:88:47:9e:d7:3f:
17:db:ed:ce:98:85:7d:cf:25:89:f0:7c:44:f9:e3:dd:40:a3:
7e:08:b4:32:fe:3a:da:df:b7:16:ad:33:28:7e:00:25:d2:e8:
65:2f:73:f1:8d:a5:ec:c7:f1:67:7b:46:1b:2a:24:2d:f2:53:
71:dc:2b:42:54:6f:ce:d3:5f:fe:0b:f1:21:85:2f:3f:cb:74:
db:7b:8e:1a:43:7f:6d:b7:37:7f:00:92:43:1a:0c:87:f3:f3:
59:cf:92:47:86:46:f4:59:71:b6:db:3c:f7:09:50:f7:eb:7b:
c2:09:16:16:74:6c:44:b1:36:b2:32:d7:58:01:f1:a2:2f:2f:
d7:dd:f1:be:78:78:f5:95:eb:25:ea:6e:fc:5c:a6:ce:5b:26:
b1:27:f9:be:74:46:4a:bf:0b:41:7c:73:95:38:31:ab:b6:05:
ff:c3:20:b2:84:fc:7d:b3:ed:35:49:24:3a:ae:dc:f8:3a:db:
a8:10:bd:08:d6:04:12:4f:51:0e:7a:c8:c1:71:f4:85:45:7f:
4e:f1:37:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:19:42 2025 by rpki-client