Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bc22ea2b-ee7a-3855-ad9e-2cb062e13f1f.roa
File: bc22ea2b-ee7a-3855-ad9e-2cb062e13f1f.roa (raw, json)
Hash identifier: ACqSlJQ7dEihc+joinYJ5WoRgedH0owSyZeigsjbZ6o=
Subject key identifier: BD:BA:5B:7B:CC:BA:23:3D:AC:DC:CB:7D:31:0D:1A:EA:79:7B:27:D9
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848906AB86FC4314A8BF1FAC680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bc22ea2b-ee7a-3855-ad9e-2cb062e13f1f.roa
Signing time: Thu 16 Jan 2025 13:38:19 +0000
ROA not before: Thu 16 Jan 2025 13:38:19 +0000
ROA not after: Wed 16 Apr 2025 12:38:19 +0000
asID: 21313
IP address blocks: 2001:502:1ca1::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:6a:b8:6f:c4:31:4a:8b:f1:fa:c6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 16 13:38:19 2025 GMT
Not After : Apr 16 12:38:19 2025 GMT
Subject: CN=9d4bec90-f552-4942-a0f3-884ae6dcaa93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0c:39:5e:b6:f2:22:8e:53:56:c5:51:85:e7:
61:e1:43:80:e2:7a:c2:a2:69:4b:ef:40:c1:05:da:
18:79:e8:b1:ec:40:58:fc:d0:c2:e0:36:12:a1:60:
91:72:72:d7:f3:65:bf:c6:70:5c:94:4f:0d:cd:3b:
59:e3:a5:d0:6d:e6:b7:4d:4f:45:92:0c:cd:75:f3:
a6:eb:0a:d2:e1:f0:19:10:7a:23:45:ee:ff:08:9f:
81:9c:0c:22:64:b4:b7:50:62:e0:5d:b6:83:ce:43:
52:c4:88:9a:77:3e:a2:db:2c:11:5d:0d:c0:66:b3:
3f:57:83:38:37:ff:34:92:ed:c6:c7:24:1f:62:6f:
f8:4b:00:7c:b8:65:1e:a2:bd:34:6d:0a:b1:01:d8:
02:99:b2:e2:97:0e:3b:02:49:cb:54:88:e7:23:59:
d7:85:9f:09:68:35:8e:bd:22:35:89:c1:ee:b3:36:
b2:44:c6:97:55:21:1f:07:9f:3f:03:e0:a6:18:ec:
08:48:3f:53:1c:68:4d:42:c4:29:62:56:f3:24:66:
28:cd:60:03:7e:d8:55:fb:de:a7:06:2d:d3:13:23:
ad:17:55:2d:a2:87:b5:6e:1f:d9:3b:84:29:6c:db:
c0:03:00:80:4c:fd:e6:6b:f1:14:de:1e:92:23:94:
63:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:BA:5B:7B:CC:BA:23:3D:AC:DC:CB:7D:31:0D:1A:EA:79:7B:27:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bc22ea2b-ee7a-3855-ad9e-2cb062e13f1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:1ca1:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:cb:0a:45:9e:ac:1b:24:74:45:64:d6:75:e8:bd:55:3d:77:
43:d9:08:d3:87:d1:ec:e0:13:9b:9d:9e:b5:50:bb:29:06:21:
1a:12:1a:39:a2:8b:c8:ce:e1:d7:28:09:01:ed:d1:f6:b9:50:
dc:52:7a:9c:49:b0:6f:2a:02:4e:9a:cf:92:65:89:7d:ec:72:
1f:55:8a:a5:3b:60:da:10:05:eb:13:dc:6a:38:b8:88:e3:b8:
2e:45:cb:15:af:ab:a0:5f:b0:1d:8e:d3:dc:5f:2e:d7:17:91:
e4:a0:b4:57:f0:e9:92:25:4d:ad:4a:5d:b0:7c:b1:c9:75:2e:
3c:59:7d:20:7c:55:21:c7:20:49:6d:83:95:14:71:16:91:b9:
b6:17:4e:eb:68:24:15:fc:8c:b1:2a:d2:2d:56:2e:48:31:30:
21:d7:11:8a:ac:1d:4a:57:d7:8d:6c:0f:41:0d:a3:f9:82:73:
ac:ab:42:84:02:8a:df:21:23:3b:09:07:3d:90:b0:69:9f:e8:
65:02:ed:74:65:d0:5b:fa:32:43:68:43:0f:bd:2f:ea:dd:e7:
9c:24:58:ba:c4:24:fe:bf:fa:ee:d0:61:a3:9a:ee:19:91:16:
6a:10:8e:d2:34:9d:57:ea:16:8f:7e:20:b9:1c:6b:2f:2e:db:
7d:bc:28:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:57:59 2025 by rpki-client