Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db0a84cd-661e-320b-9672-f65227366ab8.roa
File: db0a84cd-661e-320b-9672-f65227366ab8.roa (raw, json)
Hash identifier: G4M0PZ42nM7L3bDVAD3y4gxRApG0CDSCI8pPrNJGFxU=
Subject key identifier: 4A:25:6E:91:CA:39:B6:FE:5F:95:BD:53:74:8A:37:2F:53:A2:35:2F
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489BA0BF964DF6F8D4B897EB80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db0a84cd-661e-320b-9672-f65227366ab8.roa
Signing time: Mon 20 Jan 2025 14:00:51 +0000
ROA not before: Mon 20 Jan 2025 14:00:51 +0000
ROA not after: Sun 20 Apr 2025 13:00:51 +0000
asID: 396617
IP address blocks: 2001:500:30ff::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9b:a0:bf:96:4d:f6:f8:d4:b8:97:eb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 14:00:51 2025 GMT
Not After : Apr 20 13:00:51 2025 GMT
Subject: CN=1ad098d5-f7ea-47ef-b116-9ddb6c1ff872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:8e:a1:e1:a6:e4:c9:50:48:34:d6:f4:49:5b:
9c:a1:9e:3e:36:ff:be:a5:c9:f5:6d:17:8a:a7:b1:
91:5a:d0:1a:ac:c9:9b:90:4c:62:7c:34:8f:03:51:
35:c7:ad:cc:cb:b3:8f:2d:fe:bf:00:98:df:06:ae:
64:f5:ee:9c:50:f7:0e:ac:e8:df:43:27:84:21:4c:
ad:10:69:56:cc:fe:0e:6f:9a:a5:75:13:95:76:30:
a4:b6:e1:f9:b2:05:37:df:ad:c6:e1:5f:43:42:c1:
13:ed:bf:64:f9:bc:db:e9:b1:1e:e2:c0:ce:98:72:
4a:a7:4c:f4:77:5d:81:a4:1b:40:e6:d9:aa:5d:7c:
55:15:48:12:57:13:d2:5b:4a:6d:5e:ce:39:a2:7e:
c9:3b:54:15:74:a2:a3:72:fe:f9:6d:14:7a:76:94:
26:11:2c:22:60:c4:b0:b1:68:6c:c6:94:b5:ea:97:
e2:05:1e:89:dd:dd:bc:6f:de:0b:a0:98:db:86:ee:
3e:69:77:8d:c6:5d:4d:05:56:a5:c2:32:1d:38:58:
9c:e8:33:03:5d:e7:2f:4d:f4:22:56:99:5f:7c:02:
e2:9d:1c:43:54:79:e1:40:f2:02:41:f3:3b:e0:21:
e8:29:bd:12:ca:60:9f:6c:79:fd:de:11:18:c3:dd:
18:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:25:6E:91:CA:39:B6:FE:5F:95:BD:53:74:8A:37:2F:53:A2:35:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db0a84cd-661e-320b-9672-f65227366ab8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:30ff:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:ff:97:79:90:f3:b1:d7:43:c5:fb:9f:7a:3d:dc:c5:67:31:
5e:1f:43:75:42:33:cb:cc:ad:ac:e3:18:7b:64:5d:e0:f7:65:
86:a6:68:65:9f:ef:f3:2e:b6:64:df:4c:e4:8f:78:15:65:1d:
ed:b4:58:ad:3e:57:6a:55:53:f9:a5:41:05:0b:4d:e1:f0:97:
f8:6b:29:e7:96:99:e1:27:31:6e:63:48:0e:b4:80:98:8e:c7:
08:eb:48:5b:cd:28:c8:77:52:5d:80:19:87:e0:d5:be:1a:18:
41:28:36:35:63:86:56:fa:27:2e:08:1c:b4:90:2f:e3:e7:5c:
b1:a5:ba:aa:cd:47:3a:4b:e2:2d:53:ee:6e:5e:90:d1:b0:09:
4d:6f:4b:49:14:ca:75:7b:49:37:b9:ef:12:0a:f0:0f:a4:ba:
34:7b:99:d9:fc:e6:d1:45:40:77:cb:36:91:57:1a:ae:e8:14:
56:68:ab:39:0d:b0:3f:2f:29:f1:e3:23:8e:46:05:55:8d:f9:
25:b4:9b:fa:6e:14:3f:82:60:d2:9d:a2:70:53:b5:29:8c:91:
29:4e:50:3e:64:cb:57:df:b4:6e:70:2c:0a:32:84:c8:92:2b:
fa:61:11:7e:b4:e2:1c:5b:97:01:a4:f9:ff:3f:d0:d0:d9:cb:
17:80:29:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:19:05 2025 by rpki-client