Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df3a3076-4869-3a4b-b0fa-2b94a1f52fec.roa
File: df3a3076-4869-3a4b-b0fa-2b94a1f52fec.roa (raw, json)
Hash identifier: JTl7A0a09jwrJl5t+C2NAldsABRPxhZ4HvFY36lCFnw=
Subject key identifier: 17:74:64:83:A0:3B:C6:93:34:7C:0E:12:73:4B:9F:FF:A7:1D:50:58
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584842433B2E12013099FC1D2228
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df3a3076-4869-3a4b-b0fa-2b94a1f52fec.roa
Signing time: Thu 19 Dec 2024 13:45:42 +0000
ROA not before: Thu 19 Dec 2024 13:45:42 +0000
ROA not after: Wed 19 Mar 2025 12:45:42 +0000
asID: 36629
IP address blocks: 2001:500:126::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:43:3b:2e:12:01:30:99:fc:1d:22:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 13:45:42 2024 GMT
Not After : Mar 19 12:45:42 2025 GMT
Subject: CN=8eccf7d5-831a-4709-b0c5-f893f29e2151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b6:65:9a:c1:0a:f6:0f:b1:09:ed:a2:04:2b:
d0:c7:fb:2c:f0:93:b7:0e:df:fe:5c:f1:fe:4c:96:
a5:34:e8:32:40:bc:ee:03:ab:64:c9:b0:aa:69:bf:
aa:b5:2a:fe:ba:6c:55:6f:9c:39:92:76:87:5e:f6:
7c:2c:24:27:18:ba:e9:c3:39:12:30:33:1f:91:86:
25:0a:7a:aa:cc:3e:6e:a6:ab:1b:01:14:b9:71:b3:
72:78:4b:97:c7:01:2d:14:b0:15:81:a0:3b:db:aa:
b7:a8:16:d8:77:1e:f1:a2:ae:bc:a4:4e:f2:24:85:
21:a9:56:bc:b5:2b:ca:02:24:ca:12:ac:67:f2:db:
e0:fc:ed:06:de:ac:71:17:c8:93:76:09:ab:52:ba:
90:47:c3:f3:99:be:c3:9a:83:f9:f6:2a:19:77:db:
27:85:1a:09:5f:75:48:dc:34:01:b3:8c:f3:66:b0:
01:e1:8a:61:e6:d0:d6:c1:64:ac:d5:71:35:e8:04:
9a:48:d1:39:4d:dd:6f:cf:3c:06:fa:9f:f0:02:ca:
43:34:f4:9f:e7:40:0a:82:fa:99:da:82:c9:dd:df:
39:90:9b:04:1b:d9:01:f2:e2:bd:1f:c2:a1:94:58:
8c:1c:1c:c5:6c:f1:3e:00:b8:a1:77:e1:ff:20:ee:
c6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:74:64:83:A0:3B:C6:93:34:7C:0E:12:73:4B:9F:FF:A7:1D:50:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df3a3076-4869-3a4b-b0fa-2b94a1f52fec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:126:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:95:1c:60:6a:4c:c2:ba:ae:e8:09:eb:57:ab:cf:15:ec:4f:
d7:52:3f:ce:2e:90:bd:e5:df:49:f1:1c:22:b4:75:03:18:9b:
fc:f6:42:ab:a4:22:7e:07:0f:3f:e0:78:8e:41:ec:6c:54:33:
28:87:7b:19:43:55:cc:85:b5:25:13:95:6b:47:19:38:0b:7e:
96:ed:86:9c:0c:7a:c5:60:cb:30:a4:9a:3d:8f:a9:b5:d5:ed:
c3:55:f5:1f:5f:94:22:bb:c1:e5:e5:ac:19:a4:f0:8f:b8:39:
39:37:19:aa:32:5f:9e:64:72:00:31:19:55:01:0a:9d:e2:10:
4a:b1:d1:fb:8d:70:4e:19:d1:16:e2:e2:b3:93:86:44:f1:be:
63:91:2d:57:3f:1d:15:56:ad:82:91:1e:c7:60:dc:8a:69:b1:
c6:84:14:94:86:d8:2e:52:7e:4b:3f:f9:c0:99:d4:e1:2d:9a:
c8:ac:5f:0a:0c:cb:69:bb:a8:21:f2:be:5b:93:e5:3a:62:40:
01:cf:9a:e6:63:3b:8d:0d:65:dc:4c:be:6d:2c:87:5d:fa:22:
0a:38:76:45:76:23:dd:90:4c:26:db:74:90:9c:a3:08:23:3b:
30:06:de:b4:e7:16:76:cc:fe:65:b0:14:e5:49:ae:83:57:af:
be:fb:41:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:15:01 2025 by rpki-client