Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c0c16530-a619-31e0-ac2f-96287b97a549.roa
File: c0c16530-a619-31e0-ac2f-96287b97a549.roa (raw, json)
Hash identifier: jtWWkZOaBYyOUHU8dXAI3a81qX6pLXeI7lQh9IMb6+E=
Subject key identifier: 71:E8:AA:BF:3C:7D:E9:12:D9:9C:BE:E4:97:98:2B:A3:A8:C1:35:BC
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489BA0BEEA756FD5DB4533C700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c0c16530-a619-31e0-ac2f-96287b97a549.roa
Signing time: Mon 20 Jan 2025 14:00:51 +0000
ROA not before: Mon 20 Jan 2025 14:00:51 +0000
ROA not after: Sun 20 Apr 2025 13:00:51 +0000
asID: 36622
IP address blocks: 2001:500:30ff::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9b:a0:be:ea:75:6f:d5:db:45:33:c7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 14:00:51 2025 GMT
Not After : Apr 20 13:00:51 2025 GMT
Subject: CN=a8ccec1d-44a0-4431-9ab2-cbf42256a0e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:2d:9c:2c:86:13:a1:bf:01:0d:0a:d0:c9:19:
96:58:b4:ea:ba:1f:d8:a4:3e:2e:28:45:c9:f5:eb:
b7:b4:70:33:4b:70:06:be:71:ab:94:e8:47:06:0b:
7b:c3:2a:9a:a1:cd:76:0a:6e:7d:ce:e7:b9:1d:27:
c9:c1:21:9e:50:59:93:2e:77:f2:5f:f1:1c:ba:f4:
b1:e5:ac:fc:d4:1b:47:af:8b:11:f9:d1:b2:fa:c2:
37:0a:83:7b:ce:f9:02:c5:2b:f8:f7:cf:d1:3d:9c:
67:39:53:2d:6e:09:6b:77:24:8e:0d:89:94:ba:a5:
06:b7:23:93:1c:a7:4d:61:28:c1:d9:ad:97:fb:a2:
e0:c6:ab:ed:5f:74:c3:7e:2d:14:20:8f:5e:c7:13:
93:a9:a3:d0:81:55:3a:bb:27:1e:11:be:21:24:3e:
15:99:d9:4e:99:a4:ed:2f:bc:c4:d3:1f:f2:11:83:
0a:a3:d1:90:72:20:92:6b:98:2f:b2:e5:de:71:49:
4c:ce:c3:94:73:82:6e:e8:73:39:41:86:a9:ea:6d:
24:70:6f:47:d3:87:24:8d:42:99:fb:a4:fb:cf:84:
bb:79:58:1e:73:e8:38:fc:29:74:4d:cc:f1:4a:11:
96:03:a8:7d:3b:0b:25:75:58:41:f8:a8:41:73:54:
81:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E8:AA:BF:3C:7D:E9:12:D9:9C:BE:E4:97:98:2B:A3:A8:C1:35:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c0c16530-a619-31e0-ac2f-96287b97a549.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:30ff:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:11:00:ea:7d:f9:ca:96:cf:a8:15:82:0d:72:8b:09:d7:1c:
89:38:aa:b2:57:32:f0:8d:e9:44:0f:62:25:87:28:f5:65:ae:
77:b1:3b:4b:d6:1c:5b:d4:95:b3:bb:cc:dc:94:fe:21:3a:2b:
b8:24:83:cd:f4:95:27:1a:a0:87:6b:95:2d:aa:91:c1:b8:5f:
c8:7a:ce:22:d5:2d:eb:6f:c7:22:91:65:a7:dd:f7:ec:60:0d:
84:4d:9d:17:54:0d:3b:bc:d1:da:9a:2a:93:65:86:a8:67:ec:
12:3e:d0:84:57:bf:15:a1:67:64:c8:36:8f:e0:fd:db:1f:3a:
1b:9b:20:75:5d:28:50:11:57:6c:df:c9:7a:99:67:2d:67:ff:
f6:60:46:e8:60:93:af:fd:0f:ca:f1:14:bd:3c:82:d8:71:25:
2b:36:e3:b0:7c:fa:c7:67:f6:08:2d:82:e4:68:ed:c1:d6:64:
84:33:41:5c:fb:a5:90:df:78:66:84:7d:fd:20:6f:17:ce:a4:
57:07:d7:1f:c6:ef:ac:c2:1b:57:ec:41:1a:74:1b:67:55:f7:
16:1e:66:b6:5d:6d:51:ba:20:af:8d:50:5e:e6:d6:76:55:a4:
89:b0:dd:7d:7c:e1:90:3f:23:dc:05:62:10:e4:c9:79:3e:b1:
ca:56:86:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:38:46 2025 by rpki-client