Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba42adb8-63d3-345f-95b4-402a3aed8323.roa
File: ba42adb8-63d3-345f-95b4-402a3aed8323.roa (raw, json)
Hash identifier: fW9MAUT/yLdlHFjT68EpthuFlwyi+7/U+ULeb0pSoR8=
Subject key identifier: CC:24:3B:DA:E0:B8:92:24:7B:B8:DA:8F:6A:FC:BF:4D:78:2C:DC:AC
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489BA0BAD293EB4F5B742A2100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba42adb8-63d3-345f-95b4-402a3aed8323.roa
Signing time: Mon 20 Jan 2025 14:00:51 +0000
ROA not before: Mon 20 Jan 2025 14:00:51 +0000
ROA not after: Sun 20 Apr 2025 13:00:51 +0000
asID: 20172
IP address blocks: 2001:500:30ff::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9b:a0:ba:d2:93:eb:4f:5b:74:2a:21:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 14:00:51 2025 GMT
Not After : Apr 20 13:00:51 2025 GMT
Subject: CN=649b81ef-ad21-4b0e-ac71-bb6e2646cf6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:50:da:75:db:f4:6d:87:aa:23:67:cb:d3:77:
52:75:fc:e9:dc:a4:7c:bc:f8:c1:fa:cf:b5:cd:d4:
eb:af:d8:5d:c6:c5:a9:06:9b:f2:4d:cc:62:13:51:
76:21:fc:3c:f7:8c:22:1b:a4:0a:d0:53:30:69:fc:
47:82:9b:cb:70:a7:37:a1:0f:fc:c6:08:30:5a:d8:
b1:b7:d8:ff:24:b9:1a:b7:15:73:df:30:7b:5c:34:
ae:4e:f2:27:e0:ab:fe:35:45:62:ae:3e:b0:d1:28:
4e:86:46:f3:a6:24:44:8e:f7:34:56:66:0f:9d:12:
94:54:ce:58:48:cf:1e:ba:89:46:01:df:85:1f:ac:
51:93:af:92:50:d7:81:84:bc:24:4f:05:5c:46:b5:
39:53:2b:ab:0c:38:fe:0b:74:2e:38:ff:7f:66:70:
3f:3f:b6:af:2a:c9:f8:16:15:3e:cd:e5:ce:f4:cc:
b7:65:c1:33:81:7d:95:ef:93:a3:26:63:43:a4:3f:
91:e4:10:07:c0:cf:48:d9:98:d7:10:fc:d7:c1:13:
29:bb:23:0c:39:cd:55:a9:42:e3:8c:73:26:8a:f7:
dd:f6:0c:ec:59:eb:b4:52:78:75:85:d4:fb:0b:e5:
b4:7c:77:dd:70:e9:9b:cc:06:7a:00:5c:d6:74:65:
40:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:24:3B:DA:E0:B8:92:24:7B:B8:DA:8F:6A:FC:BF:4D:78:2C:DC:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba42adb8-63d3-345f-95b4-402a3aed8323.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:30ff:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:37:df:f0:46:44:8e:68:9d:20:78:4e:6c:13:39:a7:0e:04:
92:62:d9:bb:78:c9:d8:bd:16:09:3a:6e:6c:82:67:65:ef:34:
8f:37:6b:8b:d5:a2:ac:ef:4d:ac:5d:6e:b7:6d:73:22:94:02:
cf:47:1b:43:b7:84:5e:15:62:2a:df:c6:25:72:45:dd:15:a2:
1e:de:d3:b1:18:ca:8a:00:2c:91:27:98:47:72:49:01:aa:b9:
49:72:22:ef:18:98:f0:08:c6:38:b0:4f:70:ac:fa:9c:ac:1f:
91:af:cf:6a:ba:0b:a8:93:3a:dc:92:09:54:5b:d2:f5:77:cf:
43:07:d0:b1:96:d6:9e:19:90:78:dd:9f:26:3b:ca:87:dd:fc:
4c:85:a1:8e:7e:19:11:b9:3d:3c:23:e6:a1:54:f9:b5:71:d5:
d0:1d:67:f1:78:05:9d:f5:a2:9d:a4:6a:d2:36:25:4d:b1:bd:
fd:16:84:b0:ff:1a:48:e0:b7:43:80:7d:5d:5d:2d:9b:bb:50:
c2:8c:d4:89:51:f9:90:87:ce:47:5d:97:59:d4:99:5c:48:e8:
97:e0:dd:ba:a3:c0:0a:2a:c0:a9:5a:30:f9:b2:48:b4:0a:4e:
25:9a:54:48:b1:97:8c:a8:72:39:20:62:08:d9:91:e6:88:7a:
22:49:b4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:23:12 2025 by rpki-client