Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cbc90a26-c772-3421-9661-4d4303ec6b8f.roa
File: cbc90a26-c772-3421-9661-4d4303ec6b8f.roa (raw, json)
Hash identifier: OY1d/TsWUIqWJ61RHdZ9MKvCKQGF+JLBxAI7pAifyw8=
Subject key identifier: 80:8D:6A:04:48:4B:6A:CB:6F:87:05:16:05:EC:94:DB:B7:DD:BB:00
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584837201610390A93C8850A17E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cbc90a26-c772-3421-9661-4d4303ec6b8f.roa
Signing time: Sun 15 Dec 2024 14:00:53 +0000
ROA not before: Sun 15 Dec 2024 14:00:53 +0000
ROA not after: Sat 15 Mar 2025 13:00:53 +0000
asID: 396616
IP address blocks: 2001:500:123::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:37:20:16:10:39:0a:93:c8:85:0a:17:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 15 14:00:53 2024 GMT
Not After : Mar 15 13:00:53 2025 GMT
Subject: CN=d72a8a25-d07e-4417-9d30-b223878ab075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7a:bb:13:51:c6:22:3a:ac:ff:a5:ef:db:f5:
08:8d:27:73:3f:e3:5b:3d:a7:51:83:43:ff:fb:1f:
e3:a9:43:11:79:53:c8:f8:4e:ab:0c:8c:07:3f:4d:
8d:90:a9:b1:08:2c:12:85:05:eb:2a:c8:ed:b1:69:
a7:bf:9d:29:48:51:56:8b:35:22:61:03:c0:e1:48:
a8:ff:49:d5:e0:30:07:c2:2a:a5:ee:ed:97:97:af:
90:98:70:86:38:bd:34:8e:1d:bd:6f:75:fd:31:36:
19:3e:ed:44:ae:d5:50:7d:b5:16:03:e8:64:2a:e6:
ca:e5:aa:e2:76:66:04:64:ca:6d:96:d5:7b:70:6c:
6e:9b:ff:f1:e8:1a:60:e2:36:f0:9f:cc:56:3f:19:
71:40:0d:2b:67:41:ae:0d:5a:52:52:af:7a:18:8f:
e1:1f:90:61:77:7c:64:a8:50:92:88:71:7d:29:4c:
57:6d:1c:a2:c9:81:66:b0:c0:bc:a7:13:e9:20:00:
d8:ca:af:6b:81:ea:4f:bb:17:86:22:1e:81:4d:e4:
8c:5b:e8:25:cf:05:40:b2:e9:dd:25:82:ac:a8:3b:
0f:c5:0b:8e:14:20:d1:81:16:6e:63:a9:c7:3d:1f:
cf:08:c4:68:5e:0f:08:3a:d3:08:10:b2:9f:51:de:
57:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:8D:6A:04:48:4B:6A:CB:6F:87:05:16:05:EC:94:DB:B7:DD:BB:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cbc90a26-c772-3421-9661-4d4303ec6b8f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:123:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:84:6f:25:81:bb:cf:2a:37:34:89:52:16:58:69:f6:ce:f1:
29:82:ae:6a:35:43:29:99:ff:68:58:95:61:61:ad:9f:fb:3d:
05:bc:4a:10:6d:67:13:a5:6f:81:f5:39:92:bd:0b:58:0b:b5:
23:50:25:6c:b7:d4:42:3a:90:41:91:c5:1a:a8:b1:88:46:16:
7b:e6:e3:95:e3:47:6a:bc:ac:b5:f5:21:9a:d8:8c:fe:6f:b2:
1b:23:e8:a0:94:8a:6a:76:93:1a:bb:b9:18:d8:9e:2c:54:42:
5c:4d:d1:7c:96:a7:de:0b:eb:74:15:94:2d:42:ce:84:63:41:
90:56:56:c3:2c:16:ff:90:45:6f:55:fd:fc:37:67:55:99:05:
1f:93:6f:bf:32:34:6f:3d:ff:a0:bd:9b:03:a2:33:9b:8a:82:
51:75:93:9b:54:62:a4:4f:42:b7:8d:24:be:e8:2e:99:41:62:
f8:b6:80:e6:15:e7:fb:4d:28:d5:a6:14:2f:cd:b2:aa:74:c7:
15:31:84:e1:d5:93:a9:7a:e0:7e:24:0f:92:26:8d:87:5d:98:
b0:0f:65:b0:e3:8a:8d:93:81:26:e8:b2:14:0e:9a:1b:27:46:
47:02:b5:88:37:fe:fe:ee:04:46:5a:a3:1c:7a:00:1e:64:67:
4d:c8:63:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:30:26 2025 by rpki-client