Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db6a6acd-acc7-399a-be43-a179b1535cda.roa
File: db6a6acd-acc7-399a-be43-a179b1535cda.roa (raw, json)
Hash identifier: O2ERioc92kdWRHQETuWd6EE32B+eYKMaYakbKPB29U4=
Subject key identifier: 3E:B7:3E:08:52:37:D0:51:8C:C9:88:53:C9:22:D5:E2:02:F7:B1:A8
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848530B00CB3D714E00FE009480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db6a6acd-acc7-399a-be43-a179b1535cda.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 36617
IP address blocks: 2001:502:cbe4::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0b:00:cb:3d:71:4e:00:fe:00:94:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=711a276d-830f-4bc3-b652-234f08af8796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1f:6f:98:f5:ea:94:01:ba:c4:d6:ca:8b:d5:
22:3e:58:9a:8e:f9:62:88:cf:af:89:1b:24:aa:53:
65:de:7c:c7:07:e8:25:40:d0:20:8c:f4:85:c0:d0:
d2:f8:48:16:49:d9:70:56:b0:47:3b:fc:08:a7:23:
78:aa:c3:67:ae:70:f3:7e:ac:ae:14:84:25:a9:24:
fe:d4:61:61:7e:a8:c5:b3:43:65:de:a3:8b:af:cf:
aa:f9:f4:4f:b0:b5:50:78:99:02:b1:e7:dd:0b:89:
f6:dc:87:26:2f:83:f2:7d:29:17:44:3c:9a:9a:27:
99:a4:da:d4:5e:2a:f4:cd:89:e6:e1:bb:fb:d4:b2:
dd:a4:4f:5b:a4:e2:54:4c:87:10:7a:69:5b:8e:70:
51:fd:36:fd:1d:8c:b9:84:68:5e:64:b3:8e:37:0d:
23:d6:c5:b1:b7:82:b4:76:96:eb:6f:3f:07:19:5b:
db:c5:2e:ab:14:e0:0c:ca:d5:01:bd:0f:0e:a0:9f:
72:35:a1:72:a4:f0:95:c6:c0:1e:fc:18:e5:4e:90:
f6:08:fc:c7:3d:5c:48:b5:cc:9f:5b:b1:50:65:64:
88:ce:76:17:ac:e5:81:c9:be:0d:76:56:d8:ba:07:
88:73:0d:cf:32:70:03:9d:4c:e9:d3:ce:91:05:f6:
d7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B7:3E:08:52:37:D0:51:8C:C9:88:53:C9:22:D5:E2:02:F7:B1:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db6a6acd-acc7-399a-be43-a179b1535cda.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:cbe4:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bf:6a:11:74:78:63:a1:a7:00:e7:6a:d3:4b:e9:54:24:94:5e:
9b:61:34:58:14:0a:41:43:2a:85:e9:8b:57:4b:75:8d:66:b6:
71:99:74:92:ec:40:01:62:56:aa:4f:5c:d9:2c:50:6d:76:c9:
13:75:01:1c:43:90:ef:4f:bf:3c:7e:e5:cf:ff:2a:2d:95:31:
ec:df:dc:66:71:47:7f:e9:49:04:b0:fc:6b:20:e5:ba:32:ed:
9d:f8:d6:89:07:56:8d:34:a4:a4:22:59:45:6e:5d:b7:0e:0f:
fc:a9:e6:80:72:b0:5e:35:f1:a6:62:aa:66:08:f0:03:7d:36:
0d:94:28:6d:88:ef:00:c2:bb:a1:3b:da:f0:4f:a6:5e:bc:c3:
a1:38:06:f6:23:b6:f3:ca:d3:6d:d2:c4:3e:00:94:31:a3:ca:
17:0f:fd:3d:1b:da:2c:ca:32:aa:3f:59:71:23:34:44:27:07:
dd:09:06:27:94:c9:f9:18:e0:a8:68:1c:db:fa:15:77:3a:79:
21:af:57:83:1e:94:f8:eb:2e:72:88:2e:ab:5a:9e:3b:da:12:
9c:38:e8:25:6e:13:e2:02:42:17:2a:e9:77:cb:de:ea:92:e8:
e9:40:a4:b3:4c:4d:e6:6c:7a:32:ab:98:aa:d2:66:59:62:cd:
3e:57:14:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:56:20 2025 by rpki-client