Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b7409273-92bc-373d-a7cf-f927162fb17c.roa
File: b7409273-92bc-373d-a7cf-f927162fb17c.roa (raw, json)
Hash identifier: zYsoPoeipKzQduRwXcbsvv2R7LSeRzMZrMlJIVyXMsA=
Subject key identifier: 86:A7:3E:84:C8:70:95:4F:05:37:25:F7:22:88:4E:71:1F:3E:D4:9C
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848906AB1F23A367C52200BB180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b7409273-92bc-373d-a7cf-f927162fb17c.roa
Signing time: Thu 16 Jan 2025 13:38:16 +0000
ROA not before: Thu 16 Jan 2025 13:38:16 +0000
ROA not after: Wed 16 Apr 2025 12:38:16 +0000
asID: 396570
IP address blocks: 2001:502:1ca1::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:6a:b1:f2:3a:36:7c:52:20:0b:b1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 16 13:38:16 2025 GMT
Not After : Apr 16 12:38:16 2025 GMT
Subject: CN=b4368b0c-073d-4b38-8c09-b2630f0931d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:49:f0:5c:b7:09:b5:52:6e:89:5d:6c:9a:ce:
db:69:10:2f:f4:79:0f:79:e4:d4:94:bd:40:5f:f6:
10:a6:4a:34:93:8f:b8:94:9d:19:23:b6:74:d3:27:
70:cb:73:25:ab:02:70:50:e4:11:86:74:ea:9e:2b:
1e:8b:fd:e5:b7:5b:c7:29:62:0d:b8:83:7f:a5:22:
8b:a4:8e:e4:b1:c4:f1:72:e6:07:31:a6:7b:7c:34:
2f:9f:42:9c:1d:53:40:fc:5d:f9:8c:41:a0:57:f6:
8a:c6:2a:af:b5:bb:b3:a9:e0:8a:24:15:83:54:c4:
41:f2:94:44:4b:58:91:e3:ca:a8:3e:4a:4e:32:88:
bd:28:1c:e7:42:7e:ee:77:03:92:ce:da:38:bd:90:
d1:72:7a:98:c6:f7:92:4b:c4:8f:ef:a8:11:76:7f:
7b:8e:f8:e5:c2:66:39:88:b1:e8:6a:9b:7d:f4:6a:
c3:28:84:8e:32:c6:ca:12:94:50:7f:90:1a:78:de:
3d:3d:9e:2c:15:0b:b0:98:e5:04:9b:60:63:6e:60:
b1:1f:43:70:aa:21:5b:2b:5e:f2:74:5e:f9:a5:07:
32:d3:37:ba:48:e1:77:f7:d6:c2:a4:d1:40:7b:f0:
99:f1:d5:92:f0:0f:77:9f:c7:34:e3:4d:58:22:50:
38:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A7:3E:84:C8:70:95:4F:05:37:25:F7:22:88:4E:71:1F:3E:D4:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b7409273-92bc-373d-a7cf-f927162fb17c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:1ca1:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:0b:75:7a:aa:00:62:44:9f:51:d3:1d:97:d6:90:22:9a:5c:
d3:cb:64:2c:33:5e:8e:3c:ae:5e:19:3d:4c:b1:11:a5:a0:f0:
a5:05:b9:44:88:08:ba:16:cf:8a:b4:1d:75:49:9d:18:ff:d6:
c9:27:62:c7:ea:ca:8c:ba:a7:97:3d:6b:60:af:5f:5b:e7:c5:
f7:f0:5c:ea:df:95:38:a3:91:64:90:d4:7b:7d:02:00:4d:d4:
26:9d:0d:43:bb:4b:48:c5:29:d6:64:3a:e6:08:34:4d:dc:b0:
ec:6e:0f:b6:82:27:b0:11:60:c5:98:be:3a:bf:e9:e2:d4:02:
b7:d9:10:11:88:86:8c:83:51:db:f7:5b:0d:05:76:34:16:de:
28:bc:6c:d6:71:5d:aa:f6:09:6a:a4:73:a2:03:85:22:37:4d:
e9:62:6c:ff:61:86:b3:dc:72:a5:2b:5d:d5:58:67:3f:59:c8:
89:44:6f:da:1a:7e:b0:1d:f2:60:ec:45:ab:ee:34:0d:81:9c:
85:ff:d4:d6:6a:35:77:ed:13:c3:0b:79:81:fd:c9:ab:7b:b8:
ee:15:0c:de:9d:c9:e9:b3:2a:24:8a:fb:7e:76:47:88:f1:38:
0a:8d:e6:40:25:c2:bd:c3:15:e6:d2:47:04:70:79:8e:7c:d5:
c5:a7:55:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:53:17 2025 by rpki-client