Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c7cd6171-17e7-320c-bff2-81fe162a9730.roa
File: c7cd6171-17e7-320c-bff2-81fe162a9730.roa (raw, json)
Hash identifier: lAtN9w1M14bDbFu8fHZnc2Zj2NQX7WzCNtG4Rt0JJDw=
Subject key identifier: B0:DF:90:6D:E3:5E:FE:0E:C0:53:8D:2F:55:46:D0:60:EB:52:6C:67
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584842433C0F0D4DE7EDCFDF1D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c7cd6171-17e7-320c-bff2-81fe162a9730.roa
Signing time: Thu 19 Dec 2024 13:45:42 +0000
ROA not before: Thu 19 Dec 2024 13:45:42 +0000
ROA not after: Wed 19 Mar 2025 12:45:42 +0000
asID: 396567
IP address blocks: 2001:500:125::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:43:3c:0f:0d:4d:e7:ed:cf:df:1d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 13:45:42 2024 GMT
Not After : Mar 19 12:45:42 2025 GMT
Subject: CN=770de8e1-1b50-4f18-95f8-93d37fb3cf9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ad:aa:41:b6:6c:c7:4c:7c:4b:1a:e7:3f:fd:
55:cd:07:d4:ca:84:75:38:b2:b5:5d:14:e1:30:af:
63:a9:fe:24:08:67:50:a7:67:0f:8a:06:52:d6:26:
10:9f:0f:89:bc:4f:be:3d:ed:b4:71:87:ec:5e:0e:
0f:af:16:58:93:2e:db:59:89:dc:2e:57:ca:02:a0:
fc:a6:34:a0:f8:53:c1:e0:dc:70:6c:f5:a1:41:df:
c3:06:d7:2e:23:6e:11:ae:99:d3:e3:f8:e0:ea:f8:
a8:4e:03:5a:6f:4c:57:05:19:b8:34:d8:10:49:63:
9c:87:bb:a2:2e:58:27:db:53:db:57:a9:0c:7c:6a:
eb:4b:50:df:be:e7:61:3f:38:c1:bd:22:b2:b9:64:
13:2b:d6:08:a7:0b:6f:d9:fb:a7:d9:89:10:4b:52:
8d:4f:5e:b0:fc:11:b1:e7:69:39:e6:57:fb:96:8f:
5a:18:19:73:2b:2e:8f:fb:12:5c:a3:26:1c:16:14:
be:6f:a9:3a:2d:2f:72:b0:71:26:d7:86:4c:82:cb:
39:ce:29:74:d2:74:3f:50:df:46:89:2c:5e:1d:ac:
ab:67:0e:08:0b:6f:73:27:cb:74:2f:08:69:5d:5e:
e8:d8:00:5b:71:51:0a:86:32:6a:c8:29:fe:fe:d3:
ec:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:DF:90:6D:E3:5E:FE:0E:C0:53:8D:2F:55:46:D0:60:EB:52:6C:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c7cd6171-17e7-320c-bff2-81fe162a9730.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:125:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:53:bc:dd:e8:66:5c:ef:f7:10:58:b1:94:30:eb:3e:ac:be:
ab:4d:c9:89:dc:f4:22:e0:f8:b6:56:13:3a:dd:87:ec:36:21:
0c:e4:14:06:99:44:f9:d5:a0:77:54:8c:e7:d6:6c:4c:68:99:
b1:c2:83:e5:d6:a8:fa:ea:34:a9:2f:0a:07:93:f8:d3:27:09:
e8:04:d0:54:14:eb:04:e7:09:b9:f2:44:61:b8:cf:69:5a:89:
90:ea:32:b0:9b:ca:76:88:69:03:25:df:cd:83:01:a4:ed:50:
b7:b8:f8:fa:c5:3b:d8:58:9d:9c:f3:92:36:25:64:d5:9e:21:
8b:f3:32:f1:3e:a8:73:fb:bc:d3:85:b7:18:bb:be:7c:cc:43:
28:a8:df:69:63:c8:3c:33:2f:f4:26:ce:74:5f:47:e3:a6:8b:
9c:b1:1e:e8:10:1b:40:0f:67:b0:31:83:6e:9b:6c:3c:2f:cf:
0c:6f:34:ab:c0:52:81:cb:83:48:1a:d5:61:66:78:9b:25:bd:
31:cf:38:e6:39:f7:86:76:a3:42:b9:2b:55:be:b7:39:b6:1a:
14:b3:f8:7a:7b:63:6b:0a:e8:bc:8c:d9:9e:9c:7a:a7:8a:d3:
86:65:7e:a7:af:f2:7d:e8:21:8b:88:c5:11:28:15:41:a9:7f:
36:39:8e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:57:20 2025 by rpki-client