Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cfe5b018-be77-3923-8972-8d680a70503b.roa
File: cfe5b018-be77-3923-8972-8d680a70503b.roa (raw, json)
Hash identifier: u0VW6kDymTiWnhjjbHSckL7KYMmCNZd8aLMyodGhwZ4=
Subject key identifier: 01:53:A8:DC:18:E4:A1:8A:48:BF:52:B5:34:CA:F1:27:0F:80:F8:EF
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848906ABA5AE48148DED2AA3200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cfe5b018-be77-3923-8972-8d680a70503b.roa
Signing time: Thu 16 Jan 2025 13:38:20 +0000
ROA not before: Thu 16 Jan 2025 13:38:20 +0000
ROA not after: Wed 16 Apr 2025 12:38:20 +0000
asID: 40647
IP address blocks: 2001:502:1ca1::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:6a:ba:5a:e4:81:48:de:d2:aa:32:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 16 13:38:20 2025 GMT
Not After : Apr 16 12:38:20 2025 GMT
Subject: CN=2c0aaa0c-42e7-41fb-b798-e1f5d8e05304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1f:2d:87:8f:f0:8e:21:58:ef:64:a8:1a:9f:
14:cc:d3:b8:12:68:f9:3d:c0:d5:13:e0:55:ee:fe:
89:73:05:24:13:e2:44:d4:36:6f:d4:d5:57:4b:56:
55:6d:6a:24:ec:79:3d:e8:72:f0:b7:7c:bd:6d:8e:
ac:fe:45:a9:3f:81:a9:ce:2e:6c:dc:e7:a6:90:c4:
13:e2:ca:b9:e8:58:38:b1:14:a9:11:a6:13:5e:32:
bb:b3:45:e8:1c:2e:d3:29:a2:03:b3:89:33:df:f2:
d5:47:96:ed:02:7b:59:f7:7a:b7:c6:35:2e:b1:d1:
4e:10:bf:6c:8c:d3:85:12:74:c5:34:87:e8:21:a1:
40:fd:ba:dd:bd:08:c0:b1:a1:90:66:26:37:01:f5:
27:66:06:65:bb:94:a4:d5:c3:11:f7:b1:70:f1:6d:
39:f6:ae:d9:6e:fd:fe:d3:32:9a:1a:0f:7f:e1:00:
25:4b:2a:c2:1c:98:98:e4:b4:95:ec:9a:8a:2c:18:
8b:bb:02:20:2e:c0:2d:07:cd:d4:7a:20:8e:22:09:
48:b4:9b:43:d0:23:a3:fe:cf:59:34:cd:46:d2:6f:
75:c6:a1:01:93:d9:ab:47:a6:3f:29:5b:cc:cb:06:
31:ae:a3:6a:1d:a3:f4:b1:2c:1d:cd:57:fe:59:b6:
6b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:53:A8:DC:18:E4:A1:8A:48:BF:52:B5:34:CA:F1:27:0F:80:F8:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cfe5b018-be77-3923-8972-8d680a70503b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:1ca1:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:fe:6e:98:26:ea:0a:92:98:b6:76:88:47:5c:88:47:9a:83:
24:e0:cb:32:8e:43:29:cb:2b:9b:7f:7a:76:b3:50:49:6f:dc:
53:7c:ca:a1:14:dc:f1:ce:c0:39:2c:7e:be:dc:23:83:90:d6:
43:31:0b:a2:e7:09:cb:e3:27:3d:47:f0:8b:59:3e:ba:3c:0b:
17:82:01:0d:71:8d:f6:ba:96:f9:3d:3a:1a:54:7b:7d:10:49:
17:21:8b:9b:8e:6e:ed:33:e6:42:d3:b9:69:d7:4f:e3:a5:b8:
ca:32:7a:52:ea:a4:59:bd:b6:06:e2:78:94:b2:32:86:c8:96:
9d:c5:c4:05:f8:f8:b2:d1:ea:97:60:e9:47:58:e5:3f:e8:55:
1a:85:ac:46:3e:c7:92:34:d4:cd:4f:f5:60:e5:1a:fe:3f:61:
fc:6c:d6:ea:76:76:f2:5c:cf:b3:6a:93:96:ac:21:84:45:82:
40:9a:d2:bf:29:46:aa:6f:c0:84:83:86:cb:18:e8:9a:aa:07:
4f:55:54:b4:0d:17:6a:90:0a:b9:3e:73:64:ee:c2:67:93:32:
3d:31:4b:24:56:e2:a2:21:f9:8a:5e:eb:17:ca:8c:06:a3:4b:
f6:18:fa:6d:5e:fa:25:dc:4d:5d:17:4b:b8:66:b3:a4:31:14:
1b:43:22:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:19:39 2025 by rpki-client