Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c089cf17-9ebc-3577-84d5-add47f4fe20c.roa
File: c089cf17-9ebc-3577-84d5-add47f4fe20c.roa (raw, json)
Hash identifier: gBSnP1H3q4TmnMZr+elxtrbCCDhcyphK/DrjSDmvkr0=
Subject key identifier: 54:D8:62:2B:C8:82:C3:DC:39:13:10:A0:3F:AF:DA:77:63:38:04:5D
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848530B0500EFF9B563E2EE6D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c089cf17-9ebc-3577-84d5-add47f4fe20c.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 36630
IP address blocks: 2001:502:cbe4::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0b:05:00:ef:f9:b5:63:e2:ee:6d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=8b6a7235-4acd-49d2-9277-2163aeafb027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0f:11:9b:b0:5a:70:e8:e7:17:bc:68:30:d7:
cd:51:69:89:6d:12:ae:dd:33:7e:6c:95:48:07:4c:
d3:c7:43:2b:2f:7a:73:08:bf:30:a3:bf:b9:bc:9d:
5e:1e:91:ac:4e:69:15:21:c8:9d:5a:f3:c4:4f:78:
5b:34:d9:92:e1:c5:5a:d5:df:20:72:9a:65:30:ed:
e8:04:e9:ff:f1:a5:1d:74:59:13:a2:c6:d4:fe:26:
e1:52:51:9d:1e:ef:5a:4b:e7:67:57:c7:37:a4:f6:
56:09:b6:d5:ce:f7:9f:1f:d2:6c:41:76:37:60:9f:
1b:62:e1:01:b9:5c:ae:ac:a2:d8:58:b5:91:74:6e:
80:26:a1:b1:8a:38:a5:69:bd:70:e8:d2:ae:f3:e8:
e6:89:39:9c:1c:24:76:b8:0b:47:a8:a1:00:e2:e1:
ba:bf:cf:9a:c8:39:10:53:08:1f:e6:fc:9a:61:cd:
13:63:90:02:a3:aa:d7:3a:ca:08:6c:aa:77:71:9c:
f5:32:b2:e6:24:e4:25:db:75:9d:65:5b:f5:43:8a:
13:9b:7a:48:e8:3c:61:19:61:62:b6:d1:2a:d4:b3:
22:ba:8c:8c:17:99:44:6c:b6:c7:e4:26:1c:11:15:
96:30:30:45:7c:d8:90:47:9b:66:26:a3:17:db:77:
76:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D8:62:2B:C8:82:C3:DC:39:13:10:A0:3F:AF:DA:77:63:38:04:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c089cf17-9ebc-3577-84d5-add47f4fe20c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:cbe4:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:a6:c4:2e:52:45:db:85:75:c0:fb:ed:6c:af:04:e6:13:b6:
ab:64:e4:1d:0e:0a:16:9c:ec:25:39:ca:f1:45:4c:e6:69:4f:
60:3e:52:51:5e:fc:65:ed:aa:cc:27:70:30:af:25:14:d2:73:
9c:5f:d9:18:0c:e1:a7:d0:57:6b:10:18:f9:5a:ba:3f:47:49:
4b:b5:a6:b4:71:88:06:d3:ec:78:64:43:6a:74:4f:1a:46:54:
0c:a7:4e:b6:e5:df:4d:36:1e:8b:af:e8:09:63:b8:78:c5:0e:
df:47:c1:be:78:ad:be:ca:a6:d1:4d:36:9f:98:b3:d0:15:ae:
cf:25:dd:94:3d:c0:96:93:18:19:ea:12:f1:6e:96:44:84:a9:
2c:3b:fb:47:e2:2e:f9:7c:3b:45:70:50:05:ae:7d:0d:5e:f1:
4f:c5:f4:76:73:7b:2e:14:ef:d9:99:8c:4a:3f:91:b9:0a:7e:
11:b6:af:45:0a:75:75:c2:10:3a:a4:a9:31:da:c0:34:f3:e9:
c4:d7:9d:b9:5c:3f:54:07:c1:f4:29:cb:80:6d:e4:0b:99:24:
6a:40:ca:64:56:70:6a:c6:12:f4:d2:6e:ab:fc:6c:59:37:a0:
30:ea:c8:36:3e:9b:6b:e5:0e:02:a8:20:4d:41:0b:79:ec:b2:
4f:7d:ef:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:58:37 2025 by rpki-client