Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d345e031-7e87-3977-9aa7-6b7e19f3795e.roa
File: d345e031-7e87-3977-9aa7-6b7e19f3795e.roa (raw, json)
Hash identifier: MmXgS3KvAnGzyyx6g2pinYIbrxiyDFYOfghbO0jixeI=
Subject key identifier: 8F:9D:DC:91:10:56:94:81:2F:CD:02:EF:7D:B3:6F:5B:D2:53:AE:E1
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584861005B5A00980FC9C78DA200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d345e031-7e87-3977-9aa7-6b7e19f3795e.roa
Signing time: Mon 30 Dec 2024 14:00:51 +0000
ROA not before: Mon 30 Dec 2024 14:00:51 +0000
ROA not after: Sun 30 Mar 2025 13:00:51 +0000
asID: 396609
IP address blocks: 2001:501:8a29::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:00:5b:5a:00:98:0f:c9:c7:8d:a2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 30 14:00:51 2024 GMT
Not After : Mar 30 13:00:51 2025 GMT
Subject: CN=9afab845-3ea4-438f-b248-ac2fa2ed4f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:54:06:c2:07:0d:18:94:4a:76:ef:0b:50:9c:
c0:11:83:bd:58:b5:fe:ef:c5:29:db:29:2e:3c:58:
4d:71:8d:af:9c:43:28:38:87:85:e5:cd:7e:de:8a:
c3:9b:d4:40:c0:81:e5:a6:3f:ba:47:60:d4:0a:ef:
3c:60:2e:bb:bd:c0:bd:aa:27:4b:3f:05:78:81:bf:
4b:0a:b5:cc:a5:4a:1a:34:98:e9:78:21:96:6a:27:
e6:57:f1:e8:fe:6a:86:c9:b9:ff:bb:81:2b:04:61:
d8:24:e1:a1:13:cf:19:f2:9e:76:5d:a4:61:83:e9:
44:29:46:51:a4:26:c3:db:51:bb:18:04:81:94:9f:
31:6f:dc:37:4f:63:ad:93:24:50:87:7a:c5:e6:e2:
b4:44:db:7b:f4:ef:33:e3:d1:ae:54:7c:f8:e2:85:
8d:b3:27:79:03:74:77:f8:83:35:60:64:8c:52:9d:
f6:33:91:44:07:3f:51:ac:7a:ec:c7:19:71:34:0b:
7f:94:c6:41:5e:2c:2e:ac:97:31:9b:ef:3c:1a:c7:
74:46:a6:0b:94:18:dd:f3:d1:b5:35:99:11:26:54:
9a:49:2d:a7:c1:4c:c4:bd:18:96:fa:a1:13:4d:2b:
83:1d:d0:b0:a6:2a:82:90:8b:4f:bb:30:52:98:d8:
b7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:9D:DC:91:10:56:94:81:2F:CD:02:EF:7D:B3:6F:5B:D2:53:AE:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d345e031-7e87-3977-9aa7-6b7e19f3795e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:501:8a29:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:7a:f2:03:53:76:6e:ba:14:7e:a5:c5:ae:2f:16:0e:2d:3b:
f2:de:e4:b6:f8:ee:36:e1:84:8b:db:03:d9:8a:45:74:48:ff:
91:30:af:eb:5f:c3:e0:a3:e5:88:cc:c0:05:68:cf:0b:be:67:
27:2d:03:85:5e:7c:31:89:67:9e:6d:b7:be:60:50:d4:0a:65:
9d:72:95:e4:77:f0:e0:d7:dd:ee:a1:30:a9:2e:8c:ea:40:11:
18:2e:e4:f7:16:ab:0f:c3:c7:ce:8e:22:e4:0f:b1:1f:f6:9f:
40:d0:8a:9e:a1:14:01:93:60:36:cc:61:31:bf:0a:b2:2d:37:
5c:f6:2b:8a:ed:c1:e8:05:86:26:a8:af:97:c4:27:05:bb:32:
c3:13:fd:af:7d:06:60:d2:19:79:36:9f:a3:8b:98:c6:10:a3:
03:45:99:c4:e4:62:fe:0f:0a:5c:38:d9:fb:e5:1e:1c:96:ee:
7e:9f:8c:55:e9:e6:33:1e:5a:f8:c8:6f:59:ab:d3:87:4e:28:
45:a5:2a:48:bf:7d:29:65:9d:ce:eb:4a:b8:e9:fd:a7:13:4e:
e9:ea:ad:b8:40:35:2d:ed:a3:d5:91:86:ca:17:a4:5a:44:09:
ad:0c:f1:7f:e4:73:4f:eb:c0:09:96:dd:9d:6b:73:7f:3e:16:
a4:02:0d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:19:33 2025 by rpki-client