Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c8968285-2cba-3390-8083-233c982b8c35.roa
File: c8968285-2cba-3390-8083-233c982b8c35.roa (raw, json)
Hash identifier: KT2RRGL8l7s2NYLbW44Q6Scj4BHEDQ888grX4SWFg8g=
Subject key identifier: BA:B1:7A:C6:D1:DB:17:3D:DB:61:85:A1:D3:63:8A:CB:81:67:60:09
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584858A0468CC386CE8DE8336C40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c8968285-2cba-3390-8083-233c982b8c35.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 396588
IP address blocks: 2001:500:120::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:46:8c:c3:86:ce:8d:e8:33:6c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=0411de8d-9c1e-4316-9066-b9ab400d7a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:93:78:d0:8b:a9:7d:89:ca:2c:4e:3f:77:59:
d2:1d:45:33:8f:b5:29:8d:79:09:75:10:fa:9b:0e:
6b:be:9d:9a:3a:31:3f:75:ed:8a:ae:bb:b3:81:93:
65:7e:5d:d0:af:fc:f0:49:fd:93:38:f9:59:d4:d9:
4b:2f:32:66:40:05:af:15:30:5f:b3:d6:68:3d:19:
45:da:3a:51:4a:37:87:1e:8e:22:81:58:5a:a7:6d:
c5:c3:cf:aa:b7:ae:9d:91:df:55:e3:e1:02:b3:91:
24:6a:e5:ef:f2:2e:b5:0a:c2:89:b2:ef:51:fa:82:
fa:cf:05:4f:7e:a1:9e:d0:a2:c7:d4:cc:f1:88:cf:
ec:24:a6:64:2e:a9:f2:5b:68:94:9d:e0:b4:0e:18:
d4:38:07:3c:8c:fa:79:80:37:e5:9b:6e:c2:da:27:
f0:86:a7:40:7d:35:22:60:c8:84:09:55:ed:51:9a:
ad:77:fc:e5:e6:02:c0:5d:29:c0:61:5c:ad:0a:f1:
dd:15:33:41:7d:f9:e1:a2:31:55:fb:38:e7:b8:8a:
0a:69:c7:bd:de:68:43:82:40:99:3b:5e:8d:92:ee:
40:3f:d9:35:d8:de:7c:8f:30:cf:2c:d3:1f:10:10:
3e:e1:c9:e7:d5:55:77:d4:7a:af:4d:2d:53:6d:55:
d8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B1:7A:C6:D1:DB:17:3D:DB:61:85:A1:D3:63:8A:CB:81:67:60:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c8968285-2cba-3390-8083-233c982b8c35.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:120:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:55:4c:05:0b:30:24:12:e1:03:05:7e:8e:d5:3b:a9:ce:6a:
77:16:d8:7c:25:cd:ec:e7:87:8f:86:7d:88:e6:26:3e:c9:db:
c2:b0:02:f2:90:8c:8c:cf:b0:92:80:69:19:7c:e4:80:77:78:
52:e2:80:56:43:d4:d8:f9:5e:8c:f9:ea:f0:4f:35:19:d1:88:
6a:2f:ff:b6:ca:a4:f3:7d:55:e3:88:e4:17:f8:8a:7b:f5:22:
e9:c0:91:9a:5d:99:32:a8:05:68:e6:77:2c:2e:6d:08:b4:47:
a2:b4:11:6e:34:25:53:15:59:9b:fb:a2:5d:42:f4:fc:ea:10:
73:13:40:4d:81:2b:5d:01:9e:22:e7:45:0a:64:00:eb:9c:01:
2e:08:1d:f0:ec:db:73:5d:e5:39:63:03:1a:2b:86:ff:8a:96:
b3:22:22:51:10:24:ec:25:70:c5:db:7f:d9:46:81:f9:fd:c7:
c2:5d:d6:d4:63:9e:97:3a:56:42:b7:2c:97:56:cc:0f:63:43:
59:7a:ff:65:e8:09:fc:f2:87:2f:b5:96:e4:f4:cb:dc:f5:c4:
2b:66:5e:09:4b:fd:43:52:c6:11:4a:46:2a:a0:e8:7f:ef:05:
eb:82:7e:1e:a5:5d:74:b3:26:88:43:81:64:0c:c7:d3:3f:23:
21:8d:13:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:53:20 2025 by rpki-client