Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3ef2bee-c190-3a1b-bb95-0676e2164591.roa
File: c3ef2bee-c190-3a1b-bb95-0676e2164591.roa (raw, json)
Hash identifier: rPiDcvQQ1y43N56a3SxJRSkc8LMjzYQrGvtAAZEhXVE=
Subject key identifier: EB:1A:52:03:55:AC:AD:5C:B3:63:4B:25:3D:9A:BD:A6:7B:F7:A0:75
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858484AAAD80099165FA329720780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3ef2bee-c190-3a1b-bb95-0676e2164591.roa
Signing time: Sun 22 Dec 2024 14:00:51 +0000
ROA not before: Sun 22 Dec 2024 14:00:51 +0000
ROA not after: Sat 22 Mar 2025 13:00:51 +0000
asID: 396617
IP address blocks: 2001:500:121::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4a:aa:d8:00:99:16:5f:a3:29:72:07:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 22 14:00:51 2024 GMT
Not After : Mar 22 13:00:51 2025 GMT
Subject: CN=ef176125-edfa-414d-9167-0e907b25b5a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2e:6d:81:be:f0:09:25:57:46:b3:66:aa:87:
be:13:e6:ce:42:b0:92:38:c0:c4:8f:35:03:f9:b6:
62:cc:e9:04:b2:c0:85:9f:d4:ef:68:10:98:b8:9e:
b5:7c:53:e6:70:ad:4c:87:f1:b4:4f:e4:a1:c1:66:
51:ac:18:07:40:95:7c:53:29:bf:e7:30:ec:8e:f7:
0a:e3:d0:ae:6a:b9:80:af:c9:c6:48:48:c6:d1:52:
8a:52:5f:a5:9b:67:bd:d4:c1:f9:d7:c9:f3:07:ec:
ff:ff:63:5b:e3:3d:2b:62:37:fd:e8:01:d1:51:0c:
0d:f3:6f:97:e2:6e:58:38:05:d6:a0:f7:33:05:c2:
38:9b:e7:7b:99:3a:72:21:00:91:5f:ed:71:0b:d7:
90:d3:e8:3f:af:99:df:63:0e:11:93:31:90:d3:a2:
ff:70:8b:dc:b2:90:08:13:57:57:0a:d2:c1:4e:90:
ad:c0:b2:5e:4b:f8:26:95:c9:2c:db:6f:d4:a3:7c:
0c:7e:25:d1:58:98:d7:87:9b:21:aa:c9:94:c2:aa:
1b:95:85:fa:20:81:18:14:f0:d1:ba:b1:67:0c:b2:
35:8f:05:cc:5e:96:49:86:44:74:dd:c5:29:11:2f:
3a:c5:b7:80:a1:e8:78:b7:93:ec:a8:12:64:68:9e:
87:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:1A:52:03:55:AC:AD:5C:B3:63:4B:25:3D:9A:BD:A6:7B:F7:A0:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3ef2bee-c190-3a1b-bb95-0676e2164591.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:121:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:16:c9:49:fb:58:94:9b:8a:43:bc:cc:92:a0:22:6a:2c:f8:
f2:14:71:b9:c8:b9:e3:82:32:0a:62:77:3e:d9:72:7b:bb:6e:
42:c3:68:f4:0e:c3:c9:d7:4a:e3:00:9f:e4:3a:34:50:94:91:
f9:84:40:de:2e:64:07:65:1d:63:11:1f:88:76:94:0c:5a:6a:
78:61:fe:ab:bc:27:f6:1d:75:65:78:cc:4f:38:48:5f:13:ca:
87:e9:85:f4:03:45:2c:84:97:e5:33:50:f8:6d:a7:82:b0:3d:
e8:be:36:ab:e3:c7:88:b0:1a:93:73:d8:72:21:f3:44:26:85:
ff:c0:20:ed:b5:30:b7:fd:94:86:28:e8:c2:fc:35:af:7c:1f:
ab:03:c9:a0:34:10:7c:e9:65:7a:db:89:fc:65:cf:59:07:e6:
a9:56:85:07:6b:e6:51:38:89:4a:32:b2:69:34:72:fb:80:5a:
55:fd:c7:7a:d0:a5:d7:52:1f:a9:19:c2:b8:0f:e1:c8:55:a7:
ad:1d:a8:fe:41:bb:c3:25:15:ad:89:bc:ea:d5:75:4e:71:78:
3a:27:d9:29:fb:a5:13:c6:2f:c3:ab:b6:be:27:d2:20:37:07:
80:64:4e:e3:9a:f0:42:36:7a:9a:e3:8c:77:1b:e8:28:f0:2d:
0f:98:dc:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:28:42 2025 by rpki-client