Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d08d96e8-e72e-3369-b3ea-e60ea4a9962f.roa
File: d08d96e8-e72e-3369-b3ea-e60ea4a9962f.roa (raw, json)
Hash identifier: h3sGMXjYpinRZzH+gToTEoNvrUzx/Ide+160wdU9LOQ=
Subject key identifier: AB:E2:3A:0B:B5:D8:30:4D:3B:97:B3:7D:32:0F:C3:8A:A8:B0:1B:B2
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848906AB990B29ACF19D523A780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d08d96e8-e72e-3369-b3ea-e60ea4a9962f.roa
Signing time: Thu 16 Jan 2025 13:38:20 +0000
ROA not before: Thu 16 Jan 2025 13:38:20 +0000
ROA not after: Wed 16 Apr 2025 12:38:20 +0000
asID: 396615
IP address blocks: 2001:502:1ca1::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:6a:b9:90:b2:9a:cf:19:d5:23:a7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 16 13:38:20 2025 GMT
Not After : Apr 16 12:38:20 2025 GMT
Subject: CN=231764e1-8cfb-4496-98cb-a8e28df18d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b7:be:57:df:43:83:c8:c9:f1:04:6e:b9:e2:
51:b8:f1:34:cf:8f:0d:0b:a0:c2:95:2a:f3:31:b5:
ad:ec:32:d1:35:ab:46:e1:65:cf:1a:1c:78:41:c1:
15:29:38:8f:ac:40:cc:13:63:be:cf:1f:93:5d:bb:
53:a2:c7:e4:9e:3e:80:17:6d:72:e2:81:c4:b7:34:
d6:00:78:4a:ff:ae:02:93:ea:f8:f5:9c:4d:1f:e8:
12:15:0f:24:6d:e5:5e:c1:1e:ab:84:02:99:8e:de:
15:5b:5b:65:73:b8:e2:e3:9f:94:0b:78:c2:7c:7d:
03:77:f5:a1:d1:54:70:c2:19:4e:53:6f:b4:2f:4b:
33:a9:25:24:bf:ba:53:92:59:e5:de:4a:c6:e1:de:
40:70:46:3e:b9:71:62:7c:76:56:0a:44:ab:a3:81:
52:93:10:78:06:ee:6e:9a:79:91:5c:24:63:65:24:
9f:08:ec:29:50:68:b7:1d:7e:b2:dd:26:7f:c1:92:
2f:fb:28:30:66:32:3d:89:9a:46:4e:2f:b0:b5:a3:
d4:a9:c5:ce:bb:13:6f:45:c7:9b:6b:b5:47:a3:44:
45:91:8a:e3:aa:bc:24:fb:3f:e4:19:13:50:c3:e0:
db:ca:a0:be:e9:b6:5d:80:95:5f:8f:50:bf:a2:b6:
0c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E2:3A:0B:B5:D8:30:4D:3B:97:B3:7D:32:0F:C3:8A:A8:B0:1B:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d08d96e8-e72e-3369-b3ea-e60ea4a9962f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:1ca1:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:25:48:d0:d9:9c:31:73:ec:42:1e:b8:d4:e3:f8:f5:3b:9a:
31:61:ae:ac:53:4a:5c:4f:59:7c:ce:98:99:63:59:d8:4b:c6:
b1:35:21:65:24:18:4c:20:a1:81:f5:51:ff:6a:8d:5c:01:95:
e7:55:9f:67:4a:f0:16:f1:07:2a:19:60:a6:4e:cc:7c:be:d6:
c1:40:60:80:28:a4:6a:52:2c:63:c7:bc:e3:6c:1c:79:d0:e7:
d2:d1:c3:aa:87:05:75:4b:47:90:e5:ba:cb:3f:39:99:32:b7:
18:f6:44:98:e8:fd:67:5b:66:e8:17:56:bb:95:4f:0e:f9:77:
e5:17:fe:0d:d5:92:d1:3b:83:b3:42:0e:ad:07:94:15:59:44:
4b:1b:75:61:4f:29:23:c0:5c:2a:1e:5f:67:48:03:0d:21:97:
5b:89:54:f0:3e:79:3e:bd:f7:4b:f5:8a:9a:04:97:a2:b6:b5:
18:32:10:7d:80:ba:c5:1c:52:21:f2:a2:47:8a:53:8c:ce:52:
25:40:d7:19:cc:3b:b9:88:fa:02:df:2e:2a:26:64:fd:bd:1f:
ff:ad:b2:cf:32:b7:84:99:b1:31:59:36:b8:87:1e:bc:39:ec:
d3:8a:fa:37:98:85:36:9b:9c:dd:b0:be:16:0b:2d:0f:12:0f:
66:4f:01:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:53:40 2025 by rpki-client