Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf68daea-eec6-3e02-9e5e-793ec22db812.roa
File: cf68daea-eec6-3e02-9e5e-793ec22db812.roa (raw, json)
Hash identifier: Kyzom9v1IpSJF/rb4PjmAzctmfkMHbzZYe0tcKYfaSU=
Subject key identifier: 0A:4A:B1:1B:C2:1D:97:F4:37:CD:99:14:FD:FA:7F:1A:BD:11:20:5C
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489E5E42860DB5C286976DA460
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf68daea-eec6-3e02-9e5e-793ec22db812.roa
Signing time: Tue 21 Jan 2025 13:34:32 +0000
ROA not before: Tue 21 Jan 2025 13:34:32 +0000
ROA not after: Mon 21 Apr 2025 12:34:32 +0000
asID: 396599
IP address blocks: 2001:503:39c1::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:5e:42:86:0d:b5:c2:86:97:6d:a4:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 21 13:34:32 2025 GMT
Not After : Apr 21 12:34:32 2025 GMT
Subject: CN=6a469257-a12e-43a6-a4c3-524229534eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:21:8b:53:82:80:41:49:55:70:18:c7:e8:b4:
cb:29:0e:b8:d2:f5:0a:47:99:9b:d5:ee:68:f5:17:
7c:8f:ab:99:a3:e9:0a:df:62:8e:5b:59:1f:15:4c:
04:b1:23:19:f8:b0:4a:0f:9f:85:a6:46:96:31:70:
c9:c7:54:7e:a7:86:db:a3:42:96:8f:cd:03:ee:e1:
94:35:22:d2:d0:f9:e6:fa:32:c8:1e:ea:58:25:91:
92:38:ff:a0:55:ba:e2:8c:dc:f9:ec:b9:08:8b:ce:
69:d5:a9:d5:5d:01:f1:ee:9b:3f:b8:43:ed:60:8f:
41:85:24:95:7b:67:16:a0:7b:e1:21:d5:c4:3d:61:
fd:d8:a8:76:01:28:43:59:13:c7:fc:0f:60:1b:be:
33:90:36:6a:15:68:32:da:4c:5d:81:15:76:9a:b4:
3f:b4:cd:91:70:e4:94:d6:2c:db:fe:2a:e9:bf:c4:
98:9e:f2:8c:57:77:c5:d3:22:d8:4b:49:6d:47:ed:
37:dd:f4:2b:86:ad:e7:ee:27:38:65:7f:8a:9a:39:
de:b2:b0:06:42:d5:33:9d:ae:18:2e:47:ca:0e:90:
7f:a0:8c:88:ce:fd:61:69:81:9c:a1:27:cb:1a:55:
07:50:25:2a:2d:b8:43:cf:d4:09:e3:72:06:e8:d1:
03:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:4A:B1:1B:C2:1D:97:F4:37:CD:99:14:FD:FA:7F:1A:BD:11:20:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf68daea-eec6-3e02-9e5e-793ec22db812.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:39c1:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:9c:49:ca:84:f7:74:7f:d6:79:01:3b:5b:17:f4:77:3b:df:
ad:fc:7d:d2:e3:6e:28:2e:df:9c:11:f8:5b:10:f7:17:06:c2:
35:1f:ff:ad:5a:21:08:b9:cb:61:c2:b0:b7:48:57:0d:e1:a6:
d6:ca:d2:10:e3:23:5b:4d:b9:b3:a6:e0:88:a7:5d:ac:d3:76:
9c:bd:63:13:21:ff:3b:5a:e5:80:86:36:70:e6:10:e0:31:d9:
cb:26:1f:5e:f9:8c:c1:85:ab:24:2c:8b:98:f1:21:64:fc:60:
eb:ee:38:96:f2:9e:67:9d:cd:dc:48:71:21:93:de:a0:e3:41:
ff:7b:0b:cb:76:75:55:ec:60:1d:23:bb:c8:de:a1:8a:5c:fd:
57:06:3c:1c:8a:e5:57:85:68:45:6a:36:66:78:08:c4:19:d7:
46:18:cd:a0:c7:97:0b:19:7c:1e:c4:ce:03:55:7d:77:a4:49:
9f:57:0c:fc:d5:fd:c0:11:36:4a:ad:e5:35:38:52:1d:0f:5f:
90:b0:32:3e:fc:9a:1f:72:a7:7d:a4:37:d6:4b:0b:56:56:cc:
47:a1:91:49:85:14:3d:80:88:3e:63:e5:e2:91:4a:ae:24:1e:
91:6e:84:43:bc:b6:ac:f0:d4:5e:54:33:9f:39:b3:d2:96:6b:
6b:ba:aa:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:46:36 2025 by rpki-client