Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d5e18e5a-c6da-3374-83de-cea7c8cc8cdf.roa
File: d5e18e5a-c6da-3374-83de-cea7c8cc8cdf.roa (raw, json)
Hash identifier: OgC13MRc1hF2EXA9S/F8Yb9hsszqdL9GP8auS4hhPJw=
Subject key identifier: 0E:31:3A:CE:4A:54:32:E0:30:68:51:A0:4E:84:A8:E9:DE:D2:11:C7
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489E5E45441C11B3D88B727400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d5e18e5a-c6da-3374-83de-cea7c8cc8cdf.roa
Signing time: Tue 21 Jan 2025 13:34:33 +0000
ROA not before: Tue 21 Jan 2025 13:34:33 +0000
ROA not after: Mon 21 Apr 2025 12:34:33 +0000
asID: 396551
IP address blocks: 2001:503:39c1::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:5e:45:44:1c:11:b3:d8:8b:72:74:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 21 13:34:33 2025 GMT
Not After : Apr 21 12:34:33 2025 GMT
Subject: CN=3d2ddcab-c2ce-45a6-aedb-8203a7021e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:85:85:45:33:25:7b:89:d7:53:2c:f6:ac:e8:
64:59:13:32:78:d7:85:bb:9d:24:15:d2:52:c5:a3:
32:53:eb:eb:ae:9c:ef:44:00:54:5d:f5:ab:06:2c:
26:59:a2:ed:be:fc:0f:8a:94:46:bc:8c:33:4c:94:
f9:0d:d7:35:76:50:77:19:63:89:2f:af:eb:38:c7:
1a:83:14:90:6c:57:3d:a7:6e:46:f3:b2:7e:16:b9:
3e:ca:30:6b:70:5e:ab:40:4f:a0:4e:4c:25:01:5d:
20:d3:0b:66:08:0c:e9:a4:9d:c4:f9:9a:ed:ef:f8:
ae:d0:13:4b:b7:d2:d9:c6:ab:bf:1f:c5:2b:25:17:
d8:c6:29:66:91:5b:6a:d1:8c:67:91:4e:73:cf:ff:
f0:66:1b:fa:08:f4:ed:4f:98:2d:d3:eb:36:45:53:
b3:c5:5e:a1:4a:25:56:b8:23:ee:16:54:6d:fc:2d:
0b:bb:f9:b0:f7:2e:65:69:7c:3e:b6:07:60:bf:8c:
87:ff:81:0a:62:34:f4:17:7b:5a:8a:dc:7a:4c:dc:
1a:ae:ab:b9:7c:c3:55:a8:6f:43:6c:17:73:2d:9c:
76:5d:a2:2a:13:19:46:a8:4c:8e:10:b8:ef:9f:8e:
50:97:55:1f:8c:c1:79:af:47:db:91:f7:98:59:eb:
a4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:31:3A:CE:4A:54:32:E0:30:68:51:A0:4E:84:A8:E9:DE:D2:11:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d5e18e5a-c6da-3374-83de-cea7c8cc8cdf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:39c1:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:be:3b:7c:cb:79:99:ee:ee:ec:c4:95:1e:3e:de:29:d7:03:
6d:b6:e8:70:12:b8:b9:a2:61:4c:2d:fa:29:75:d0:40:7c:dd:
08:9b:24:90:aa:24:b5:24:de:6c:86:0a:f1:9f:f3:a8:52:eb:
92:aa:7e:b9:72:a0:2c:f8:10:8d:77:ca:af:4d:96:84:7a:9e:
1d:9d:bb:35:55:7a:38:05:84:eb:83:df:de:75:70:db:d7:7e:
f0:f3:47:00:83:e5:54:f8:68:a2:b0:55:4f:6f:dc:c9:ad:b2:
83:4f:11:44:00:8f:25:4f:f8:46:0b:29:97:85:66:fc:55:fd:
49:5b:74:1b:93:94:74:cf:dd:5a:ae:99:5b:d5:61:79:d6:ee:
2f:0b:f1:8c:3f:ea:37:97:66:2c:e4:07:b9:16:47:62:d8:92:
04:8c:9e:86:21:18:ea:44:c9:4e:96:be:8f:44:15:30:e4:c3:
35:98:f4:ea:2a:6a:24:94:c5:66:1b:6a:5a:f4:7a:a0:0f:7b:
90:3f:0a:50:ec:55:aa:b7:af:13:a0:f7:a6:9c:f0:db:a7:22:
46:09:a2:a2:21:43:fa:6c:1e:3f:8b:45:ce:33:15:50:98:95:
f0:3b:45:81:29:f5:6f:c9:f1:e0:6b:48:da:d2:c2:8b:17:69:
ac:7a:a6:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:33:12 2025 by rpki-client