Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db25afb9-9676-3382-8f8d-d56f2762303d.roa
File: db25afb9-9676-3382-8f8d-d56f2762303d.roa (raw, json)
Hash identifier: DwJ95+eJMyfax9PzfPGe4CkwrZFdnJcHoynNFOPAFY8=
Subject key identifier: FA:42:5E:B2:93:F4:E1:F4:21:E7:57:2F:19:14:61:4A:66:93:71:B4
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584845157E5A87D7F24DF6814F40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db25afb9-9676-3382-8f8d-d56f2762303d.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 396827
IP address blocks: 2001:500:122::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:7e:5a:87:d7:f2:4d:f6:81:4f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=eb69249c-c038-492b-833b-27879d326704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:59:8a:ef:53:4f:9d:d6:cf:be:0b:61:09:e4:
46:7d:75:96:6e:14:7e:65:8d:fa:a8:fe:25:d1:f6:
35:c8:33:bc:93:9b:5f:09:c2:41:ff:e7:aa:11:98:
c8:6f:99:b0:a2:3b:22:e7:fd:a7:b8:ad:eb:17:71:
0f:77:02:1f:d5:d4:c3:32:14:e9:4c:c7:f8:8d:0f:
71:44:52:fa:b3:cf:a1:ad:8e:9f:ab:c6:eb:4e:02:
12:b6:d2:86:59:cc:8f:a5:fd:cb:2c:36:0d:7c:29:
18:92:cd:c7:7c:31:25:f3:5b:ac:5f:24:d3:68:03:
d6:88:63:0c:84:7c:34:8e:0c:10:0a:24:57:5d:f2:
bc:3a:29:58:c2:cd:23:c8:9e:16:47:e3:6b:3d:24:
49:74:d0:3a:fb:17:25:34:cd:e0:0c:66:6e:06:29:
b0:d5:8d:86:a6:5f:d5:dd:90:63:0c:5f:b0:f9:59:
8c:0e:57:00:fe:f1:9c:4d:0f:76:6f:ce:4a:a4:9a:
c4:f1:49:81:66:0f:27:84:0f:41:74:6f:07:31:9d:
92:20:73:8b:5c:ad:1f:6f:6a:4c:60:d7:53:17:c0:
33:6d:25:08:91:49:08:e9:93:0b:f8:8d:e7:c0:d6:
d1:35:77:ae:d1:36:a4:a7:45:cf:9b:bc:f5:b9:24:
ad:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:42:5E:B2:93:F4:E1:F4:21:E7:57:2F:19:14:61:4A:66:93:71:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db25afb9-9676-3382-8f8d-d56f2762303d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:122:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:d7:89:04:59:c0:b1:d0:61:22:0b:7d:a1:d9:2d:9a:32:d3:
9d:d7:bb:3b:04:0e:dd:c0:5c:56:82:13:5e:46:98:fc:c7:b2:
9c:1d:cd:b4:3a:37:1d:b1:e7:f5:9a:e8:cf:bc:e5:a7:5f:80:
e7:0b:9a:86:54:f9:9d:af:27:7d:6d:de:39:10:b2:c7:1b:43:
c5:35:76:25:8a:9a:50:57:ca:5a:02:be:05:6d:79:1d:ee:cc:
51:13:04:fe:ed:ed:8a:e6:f1:5f:e1:c7:38:10:dc:a6:9a:ef:
e8:01:34:99:bf:1e:2b:58:5f:67:a4:74:75:86:6a:b9:a0:86:
a9:e2:0e:ff:cf:53:6b:f1:fb:3b:6c:e9:fb:7b:03:54:d7:6f:
6f:1e:ff:bd:23:8a:a8:71:6c:97:2f:ac:01:ae:ab:32:a5:4e:
62:6e:27:46:c4:c3:1e:b0:96:49:b5:a7:5f:dd:b3:a2:6d:80:
71:b3:a2:d5:73:f6:d0:dc:a6:6a:df:c7:21:4b:ee:6a:a1:3a:
63:8d:d9:e0:9f:48:3e:de:52:a2:89:cd:f5:5e:d7:28:ea:c2:
ad:b9:a4:89:bb:e3:f0:c3:8c:c9:e6:f6:40:3b:d2:c0:ae:0d:
61:01:06:44:ef:f2:8b:7a:75:83:e2:3a:60:d1:43:d2:ed:54:
91:ed:17:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:23:10 2025 by rpki-client