Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e19f4b8e-0ee4-38de-a8aa-2eeae414524a.roa
File: e19f4b8e-0ee4-38de-a8aa-2eeae414524a.roa (raw, json)
Hash identifier: PwuJhtySNW9Lzbc+2FCwrYJgMt50x7pD+eQ9sRwvVeU=
Subject key identifier: 92:9F:92:71:28:CD:80:E9:C6:7C:A9:99:48:AA:5D:F3:3B:11:A6:B7
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858484AAADACCB85A53DA16E1F700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e19f4b8e-0ee4-38de-a8aa-2eeae414524a.roa
Signing time: Sun 22 Dec 2024 14:00:51 +0000
ROA not before: Sun 22 Dec 2024 14:00:51 +0000
ROA not after: Sat 22 Mar 2025 13:00:51 +0000
asID: 396594
IP address blocks: 2001:500:121::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4a:aa:da:cc:b8:5a:53:da:16:e1:f7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 22 14:00:51 2024 GMT
Not After : Mar 22 13:00:51 2025 GMT
Subject: CN=dcb8d2e2-3aa2-4a47-97e7-191a1abf12cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cb:0c:ba:87:58:eb:32:fc:57:f2:90:cd:ff:
39:63:21:73:6d:ef:bd:40:af:c3:15:c6:07:68:e7:
7c:92:b3:ec:3d:7b:4d:95:70:12:a4:74:11:f0:a5:
3d:fe:7a:1c:1f:9a:f0:08:3c:17:ab:ac:fd:02:33:
7a:e2:c8:50:9c:de:2a:a5:c2:20:f7:bc:c4:21:ff:
a9:8d:06:01:bf:c2:fc:fb:5c:f3:ab:18:8d:f3:59:
71:0c:c1:6e:46:49:5a:f3:a9:88:d4:9c:94:1e:10:
92:35:44:ca:22:ab:b7:15:35:63:aa:85:ca:df:c9:
c5:3a:5d:46:b2:bc:df:54:d4:e3:e8:c2:44:bc:d5:
da:5b:dc:71:ee:cc:a6:38:37:3c:9d:bb:5f:95:48:
81:20:6b:8d:b9:f4:c9:90:2a:ac:93:ed:37:e4:9e:
45:c9:d4:c0:4f:0d:a1:a1:ee:cb:fd:79:12:95:35:
05:d9:50:20:99:52:55:6f:a5:5b:e6:d2:ea:57:4d:
10:c7:0d:25:07:60:43:33:61:de:14:ff:3b:d0:f4:
dd:04:5f:59:ba:33:37:4b:49:73:2f:5c:67:23:d5:
16:d2:0a:a0:b4:ca:93:a2:42:43:73:15:a4:c4:f8:
c1:dc:e9:05:82:1f:14:e3:2f:20:95:4e:74:da:7b:
a3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:9F:92:71:28:CD:80:E9:C6:7C:A9:99:48:AA:5D:F3:3B:11:A6:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e19f4b8e-0ee4-38de-a8aa-2eeae414524a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:121:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:7e:82:4f:44:7d:d8:61:2f:8d:e9:19:d8:af:4e:07:01:99:
36:90:43:4c:94:99:03:98:5c:c2:66:1d:7c:a6:1c:63:ec:1d:
a8:f5:99:d1:80:05:9a:61:15:0d:34:93:c8:57:17:e1:d3:76:
65:4e:e5:73:5d:35:c1:3b:ff:2d:42:16:69:1e:ca:70:26:a5:
af:3a:2f:0c:28:6f:9e:bb:1a:92:7c:02:f6:9f:d7:ed:4f:f8:
28:e2:64:3d:9d:71:e4:b6:d4:83:92:9a:b2:b8:d4:ce:b3:3b:
e4:20:a6:6a:a2:5f:bd:96:77:f6:93:67:2c:c1:0e:ff:8a:d3:
63:a1:7a:9e:36:69:1e:94:b4:d1:ee:e2:7c:c5:01:0a:ba:0a:
b7:fb:a5:4f:ce:de:97:ab:e2:a8:f4:4e:98:02:49:bd:d0:c6:
52:72:77:6f:b5:82:e3:13:2d:f3:e6:19:fd:e4:47:f9:7b:51:
e5:97:17:9c:4d:02:42:0d:11:da:f1:49:54:64:ce:27:b5:ea:
82:ce:d4:1c:4b:b4:c5:6b:25:65:8b:6f:7a:39:75:63:84:d6:
1f:d1:81:22:cd:59:e0:3d:c9:aa:c5:7c:69:c9:0c:88:26:3a:
ef:d1:7c:72:dd:f7:e9:6a:4d:f7:02:b6:ea:a1:09:b5:53:3d:
83:25:93:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:12:11 2025 by rpki-client