Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e22d6240-82c4-300b-93bc-75c59aa2698c.roa
File: e22d6240-82c4-300b-93bc-75c59aa2698c.roa (raw, json)
Hash identifier: kgcWtTVLBzUIEamzqT+KFi8eoiPIY9dp7vd/ooaquss=
Subject key identifier: 90:C1:BD:BA:E9:B1:3C:63:D4:AE:3A:2C:5A:C9:EC:5A:F1:B8:2E:46
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858483720162E9D3DC39B4CE94D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e22d6240-82c4-300b-93bc-75c59aa2698c.roa
Signing time: Sun 15 Dec 2024 14:00:53 +0000
ROA not before: Sun 15 Dec 2024 14:00:53 +0000
ROA not after: Sat 15 Mar 2025 13:00:53 +0000
asID: 40717
IP address blocks: 2001:500:123::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:37:20:16:2e:9d:3d:c3:9b:4c:e9:4d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 15 14:00:53 2024 GMT
Not After : Mar 15 13:00:53 2025 GMT
Subject: CN=ef65eeab-d055-4955-b04e-6a2723f916ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6c:88:c2:2c:84:a9:37:1e:49:4e:8a:c1:ec:
6a:1e:ab:17:e7:cc:a8:67:f6:77:62:08:fc:89:20:
15:14:23:13:1d:ff:fe:d8:cf:e5:1c:a2:82:0f:8f:
c4:c2:b6:c6:de:19:6c:b0:d0:df:d0:f2:48:cb:f3:
56:b5:8a:84:9d:a4:1e:1d:39:05:5d:b1:d0:36:48:
4c:a8:fb:df:a3:56:97:28:e2:a4:76:5a:f3:41:f5:
de:e8:29:21:8f:0b:bc:07:c0:c9:d6:b2:78:01:34:
56:68:ae:7b:0e:ef:91:a8:5f:a5:82:29:08:05:0e:
5f:34:ed:62:60:7b:00:41:82:5e:c4:d4:c9:42:65:
ad:91:67:af:3e:2e:75:d3:89:9b:b9:f3:e3:5f:63:
96:36:16:10:ff:37:f2:15:9a:e3:06:5a:c6:05:fc:
a4:22:07:8e:30:21:e0:72:b9:67:43:5f:c8:71:84:
2c:8f:68:d5:bd:92:77:4e:35:7e:02:fe:6c:7c:25:
15:49:60:d9:04:d5:3c:f1:cf:9c:87:7e:19:68:9f:
34:05:06:f2:20:8a:d7:f9:8c:cb:13:9f:4c:fe:f9:
5d:3b:51:0e:58:18:34:b0:57:f6:80:7e:40:c0:49:
c0:d5:f8:21:43:0b:b2:95:db:ee:b2:01:c1:89:ce:
37:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C1:BD:BA:E9:B1:3C:63:D4:AE:3A:2C:5A:C9:EC:5A:F1:B8:2E:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e22d6240-82c4-300b-93bc-75c59aa2698c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:123:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:a9:6d:23:37:2b:36:38:df:1d:9c:4f:8e:62:38:07:20:8d:
04:f8:3b:5f:0c:80:fc:c1:c0:ad:18:a3:bf:ec:61:db:cb:57:
e5:39:09:b9:f7:62:16:e5:7c:99:cb:56:b9:0f:ae:aa:3a:0e:
50:12:5b:33:88:18:6b:d6:33:e3:20:f2:bc:98:e1:f0:7e:63:
41:64:e4:fb:19:d0:80:24:7c:c5:58:92:9a:03:34:d0:92:c1:
39:42:08:ff:01:b0:f2:a7:f3:be:3d:7a:5f:41:8a:59:31:e8:
fb:c8:a2:f9:04:22:f1:9e:3b:d5:b3:73:ab:60:6d:da:f0:4b:
a8:69:46:81:47:38:1b:d6:13:31:52:dd:1c:e3:28:e6:8b:f4:
6c:3e:5e:4f:c2:ad:ec:e3:8a:6c:15:e0:f8:24:7a:d3:f6:a0:
fa:0f:84:63:e2:11:5d:aa:6e:bc:ed:54:24:c2:eb:e7:47:0c:
3b:7d:8d:84:e5:c9:17:03:75:26:a3:7d:1c:f8:a1:6e:a8:b1:
d2:49:68:d4:82:12:c4:3f:46:a2:3b:c6:60:05:50:48:cc:cd:
84:6e:0b:4e:59:c3:a2:cd:cb:b7:0f:6a:6e:6f:b1:24:71:1b:
3d:b5:9c:30:73:48:4c:0f:6e:6a:cc:ea:e0:e3:c0:4b:ee:8f:
a1:1b:38:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:44:53 2025 by rpki-client