Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d67f9c11-9d78-3b93-8e5f-36da655f8d5b.roa
File: d67f9c11-9d78-3b93-8e5f-36da655f8d5b.roa (raw, json)
Hash identifier: +/aNbUSNRAg7/AdYYF9EsStU1KHLPn9hQavCnmR+qCM=
Subject key identifier: D7:AA:AC:0C:C7:07:D9:95:90:7D:10:8A:A7:96:A4:AC:AA:9C:89:47
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848424306D677EE6783591ED600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d67f9c11-9d78-3b93-8e5f-36da655f8d5b.roa
Signing time: Thu 19 Dec 2024 13:45:17 +0000
ROA not before: Thu 19 Dec 2024 13:45:17 +0000
ROA not after: Wed 19 Mar 2025 12:45:17 +0000
asID: 396596
IP address blocks: 2001:500:125::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:43:06:d6:77:ee:67:83:59:1e:d6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 13:45:17 2024 GMT
Not After : Mar 19 12:45:17 2025 GMT
Subject: CN=5874cda3-baa0-4047-a6cc-819f0d51c2d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b9:e4:7d:43:cf:28:80:ac:ba:25:47:7d:05:
96:8e:8d:6a:92:b4:5a:73:8a:e1:63:7d:c4:e2:d6:
83:32:c2:ff:ef:08:34:11:0e:4b:a8:d0:24:92:0a:
da:6e:24:ed:4e:d4:1d:d0:3a:f7:c2:6c:56:88:f0:
e5:57:23:66:29:ac:16:24:1e:d9:6c:0e:ef:44:eb:
c9:53:eb:b7:5b:d1:dc:f3:de:7d:7c:a2:18:3b:f1:
5a:88:6d:56:2d:45:79:b3:4a:0b:19:71:8a:2f:96:
33:b6:1d:50:68:52:7d:7f:2b:8c:71:2a:03:61:1b:
9a:c0:cc:d3:ec:8c:f1:1d:e8:1a:89:87:b7:a1:12:
d2:63:ed:e8:f3:e5:ec:bf:37:80:de:c1:7b:c7:eb:
c9:b6:02:b4:62:89:0d:04:a1:85:28:e8:8b:35:af:
60:00:2b:2c:51:43:e5:f1:2e:dd:9d:12:9c:61:ed:
2d:9a:2f:f8:4f:99:a1:07:20:bf:79:30:55:53:45:
9f:d4:93:09:68:ef:eb:bc:be:31:8b:57:45:b9:87:
1d:6a:39:86:cc:89:3d:20:9e:a4:1f:67:40:b6:c4:
48:09:d9:f6:d3:fb:5a:91:04:31:64:bd:08:a8:c6:
57:7f:8b:bb:16:1b:41:ce:50:86:3a:cc:b0:6b:f5:
43:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:AA:AC:0C:C7:07:D9:95:90:7D:10:8A:A7:96:A4:AC:AA:9C:89:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d67f9c11-9d78-3b93-8e5f-36da655f8d5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:125:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:0f:db:fb:6e:04:6f:c7:06:9e:4c:30:ef:5d:7b:b3:eb:8b:
e0:31:4e:87:b7:86:cb:8a:fd:81:03:f2:e7:d9:ff:07:ad:7f:
b5:50:7d:23:9a:48:48:4d:23:44:40:fb:33:07:81:64:7c:71:
1d:a1:57:e6:41:f0:e8:81:a3:30:54:72:d7:ee:77:2b:f9:26:
b4:9e:a5:57:7e:f0:58:d2:53:5c:a0:96:8e:d6:c4:e5:65:97:
66:eb:b4:34:a4:5f:e1:67:e2:9b:3e:e5:c9:4f:7e:10:17:45:
43:95:c6:a3:2f:c6:87:c7:a1:3f:48:c3:18:1b:fb:ef:93:3a:
7c:49:1a:82:ba:dc:a4:d6:31:74:b3:19:ce:5b:0c:37:78:b5:
91:1a:ba:bc:83:08:23:8d:fe:f3:ff:c4:2b:54:23:39:2a:54:
0f:89:f7:1d:39:6d:b6:43:16:bd:64:bc:67:b6:27:96:82:07:
f6:19:2a:7b:c7:8e:a5:0c:7f:af:3c:3c:8d:21:ee:89:44:b9:
9c:7a:9a:90:7f:87:82:2c:ca:63:7c:26:6e:dd:aa:36:a9:79:
59:40:f8:43:66:98:50:3d:e6:82:e1:29:3e:24:ef:64:bc:85:
29:03:7d:90:fa:67:d3:dd:a6:b3:a8:13:85:9e:15:68:10:de:
72:b3:90:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:43:23 2025 by rpki-client