Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c07e0414-e534-3b15-a2e4-e11bf08d2993.roa
File: c07e0414-e534-3b15-a2e4-e11bf08d2993.roa (raw, json)
Hash identifier: +iRM2sYK3Y7vhdjiIBJhWmD6DapQ6kj5CM0oaLtLPwc=
Subject key identifier: 77:6F:8D:8B:71:AF:4F:A6:35:DE:77:1A:E8:CA:4C:49:87:66:20:FC
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489BA0B7A826D49ECBFEA25080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c07e0414-e534-3b15-a2e4-e11bf08d2993.roa
Signing time: Mon 20 Jan 2025 14:00:51 +0000
ROA not before: Mon 20 Jan 2025 14:00:51 +0000
ROA not after: Sun 20 Apr 2025 13:00:51 +0000
asID: 396552
IP address blocks: 2001:500:30ff::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9b:a0:b7:a8:26:d4:9e:cb:fe:a2:50:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 14:00:51 2025 GMT
Not After : Apr 20 13:00:51 2025 GMT
Subject: CN=9f854dde-ebb8-4f9c-b683-a5febe493ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e2:f9:8b:54:df:fd:95:a7:77:91:8b:48:78:
59:0b:75:d8:9e:88:2d:51:b5:14:90:c2:88:6b:50:
5b:bb:de:6f:bd:bb:b0:d4:f2:f8:1b:ba:b1:13:62:
06:47:6e:a4:6b:8f:72:aa:fe:da:84:f5:cd:20:fd:
ce:cd:97:1e:9b:8d:19:eb:06:0f:ca:9a:dd:7d:d9:
d5:3e:fd:20:b9:7e:91:4b:ed:6e:c2:88:40:db:f4:
d2:5a:82:0a:84:58:06:42:8e:15:e5:2d:c2:27:65:
f7:f8:de:09:ec:67:43:ac:f3:ae:b1:de:3c:68:fb:
02:51:59:c1:8d:72:5d:d8:dd:be:3e:76:2b:c8:1a:
2f:06:3c:77:bc:e6:b2:a8:24:4a:b5:ec:3e:d1:1e:
a4:1d:3f:3f:99:a1:7e:09:7c:89:dc:41:91:79:08:
55:09:49:4d:e3:a6:0a:7e:0c:71:4f:00:b8:c0:6f:
80:75:43:81:c1:8c:35:ea:76:6c:8b:53:c5:96:00:
cb:47:e5:03:22:34:3b:5b:e9:4d:b0:50:00:26:85:
24:1f:c5:24:20:e0:44:89:99:26:f6:ee:c7:96:be:
76:95:31:0f:bb:c5:00:7f:b6:44:02:b6:52:2c:06:
09:51:62:01:9f:9d:37:88:1e:87:c3:fb:c0:9f:e9:
36:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:6F:8D:8B:71:AF:4F:A6:35:DE:77:1A:E8:CA:4C:49:87:66:20:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c07e0414-e534-3b15-a2e4-e11bf08d2993.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:30ff:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:94:40:37:0d:54:56:db:b8:9f:b0:ca:eb:dd:46:74:95:b0:
70:f1:5e:82:e8:ef:7d:6b:c9:18:ba:ac:8e:d6:fe:5e:30:0c:
52:ed:f6:47:29:3a:99:5f:01:39:43:14:3b:d3:52:6f:f2:e4:
b3:3f:3e:56:bb:9f:40:f9:e5:04:8d:ba:dd:40:64:48:d3:de:
0a:db:fc:86:02:d0:c5:c0:a6:cc:cb:be:c2:67:f8:85:b2:cc:
2f:e1:ee:a1:a2:ed:b7:f5:ca:c4:07:47:21:27:cd:4a:7b:8c:
ae:a6:aa:a3:d0:aa:5d:e3:dc:a6:e3:f2:ec:4f:98:97:53:97:
ed:f2:a9:9a:44:f4:7d:fc:53:ca:48:fc:42:49:65:12:3b:c9:
6c:7a:f3:6d:b8:de:b0:94:34:c3:6c:db:b8:fe:b1:ba:29:45:
f0:c9:41:dd:0a:6e:f6:c8:a2:df:a5:aa:3f:1b:c3:e2:76:48:
ca:57:e3:22:5b:5a:6a:0a:c3:4a:d1:f6:cb:24:54:d0:6a:63:
22:1a:8a:d8:6f:79:54:57:43:56:c0:dc:40:09:37:0f:d3:b8:
aa:0c:0c:86:d4:be:b1:9b:79:5d:8a:54:27:ae:aa:90:4e:19:
12:36:54:1c:ef:53:52:9b:f0:df:ef:b3:31:78:06:a6:c7:87:
2a:68:1d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:50:01 2025 by rpki-client