Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dfe5921b-e849-3d2c-b734-5940a246cbd6.roa
File: dfe5921b-e849-3d2c-b734-5940a246cbd6.roa (raw, json)
Hash identifier: n/CWZ5LxVP69spqTRuFKQGcWRYz4CVkpjYqyMrEQTLI=
Subject key identifier: E7:47:2B:DC:FC:CD:94:54:EE:E3:8F:CD:22:6C:4D:24:92:4E:F8:81
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848530AFECA6AE164D5367CDC80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dfe5921b-e849-3d2c-b734-5940a246cbd6.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 396553
IP address blocks: 2001:502:cbe4::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0a:fe:ca:6a:e1:64:d5:36:7c:dc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=6b588590-f91a-42dd-9d92-03e9193a125f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c3:90:6d:4b:42:61:f1:78:15:2e:9a:7f:4a:
00:61:7c:b9:c7:c7:8c:99:96:76:2a:ec:c2:f6:93:
32:03:da:4f:ab:df:1d:be:e7:49:16:64:1d:93:66:
f2:37:cd:2e:b5:5b:26:f1:f2:3c:4c:da:22:b5:74:
c2:e0:98:e5:45:ad:42:46:ec:37:ad:f2:21:4c:6e:
0a:21:71:8e:37:a2:32:9f:a1:7b:16:2c:83:85:e4:
57:7b:c2:4e:fe:1f:c5:3b:dc:26:41:b1:fc:1a:05:
f6:2c:c0:73:5d:20:f9:f9:0d:4b:97:aa:23:44:58:
8a:7d:c1:e9:9e:ae:ee:3c:e0:e2:46:f2:19:23:cd:
76:16:a1:2a:3a:dd:c3:a8:0f:64:bb:b2:16:3e:88:
93:c2:89:2f:be:2b:55:bc:24:db:fe:97:83:7e:e5:
55:7c:03:4a:ab:f5:e3:0d:b9:77:65:0c:2e:55:10:
17:e6:56:44:ac:1c:5a:4c:53:54:b8:bc:82:c9:f1:
18:5b:b2:15:7f:0d:ce:c8:b1:a7:31:99:29:ea:69:
f6:1a:58:7b:84:38:d6:aa:56:9e:e2:9b:12:69:29:
8a:74:44:68:e1:71:17:6e:30:4f:ab:a0:45:66:c1:
47:0d:00:1a:d4:5f:76:5f:be:59:5b:ff:bc:dd:86:
45:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:47:2B:DC:FC:CD:94:54:EE:E3:8F:CD:22:6C:4D:24:92:4E:F8:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dfe5921b-e849-3d2c-b734-5940a246cbd6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:cbe4:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:84:dc:64:26:6f:ed:40:cd:bd:79:85:93:d9:1c:ae:f5:7c:
d1:3a:1f:ba:d0:2f:95:de:5d:6f:d6:82:5e:64:4c:2b:4a:a8:
e0:b9:14:84:d6:53:55:c7:7a:a9:fb:44:1a:39:c9:49:23:4e:
87:9a:b1:4c:e3:27:9f:9e:0c:c4:5f:7b:c6:1d:95:f4:5f:41:
bd:94:01:20:07:f7:f8:c8:1e:82:1b:a2:5d:b7:b1:8d:ef:6d:
2c:0e:04:3e:d1:ee:df:61:15:ab:23:37:7c:27:73:eb:a2:6e:
5b:2b:3d:78:ba:41:ba:9c:98:c0:0e:0b:91:06:a4:da:ad:58:
a3:77:39:4a:a1:99:04:6e:fd:7a:3f:0c:80:70:65:50:af:c1:
61:35:2a:65:18:46:f6:a4:e0:65:75:3c:b2:ce:e5:b2:e8:8c:
ec:b2:eb:9c:a6:fe:c6:c9:d2:97:d9:cd:54:d9:93:a7:ff:ed:
95:66:1f:07:3a:ab:cc:d7:0e:cd:34:79:72:fe:09:e0:c4:1d:
19:d3:90:5e:96:47:7f:6f:88:21:df:3f:36:5b:f7:bd:09:1c:
bf:7f:db:93:c2:44:72:c1:e1:16:8f:f2:41:80:e6:03:ea:24:
e8:f3:70:0f:8c:e6:ff:9c:bc:4c:ea:8a:85:bf:4e:cc:61:13:
05:b5:2d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:20:18 2025 by rpki-client