Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2fcffa1-7c64-3a77-bc35-1406762f6d7d.roa
File: f2fcffa1-7c64-3a77-bc35-1406762f6d7d.roa (raw, json)
Hash identifier: KIXLMfLzr/TuIGVO3tKslM6B69g6lCnGmwYBEihOlPc=
Subject key identifier: 63:83:86:8A:DA:D1:C9:FD:8F:AB:AA:3E:D5:A2:42:54:F4:2C:98:C2
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489BA0B717EFB7E74E8FFB38C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2fcffa1-7c64-3a77-bc35-1406762f6d7d.roa
Signing time: Mon 20 Jan 2025 14:00:51 +0000
ROA not before: Mon 20 Jan 2025 14:00:51 +0000
ROA not after: Sun 20 Apr 2025 13:00:51 +0000
asID: 396585
IP address blocks: 2001:500:30ff::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9b:a0:b7:17:ef:b7:e7:4e:8f:fb:38:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 14:00:51 2025 GMT
Not After : Apr 20 13:00:51 2025 GMT
Subject: CN=a44dbc93-5a74-4aab-a1ab-52d6529d97de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8e:f9:da:33:6d:09:e9:cd:70:0b:c7:fa:2a:
f6:28:1e:e1:4e:f0:cf:d7:75:04:db:f8:c7:d7:05:
64:56:d2:db:9b:93:c7:1f:b2:85:3f:ee:be:b6:ff:
be:ad:1e:fa:a5:01:15:b0:bc:af:94:f2:40:9f:f8:
d0:cf:86:07:bd:c0:2f:1b:88:da:a4:97:e8:ff:47:
16:e0:8e:12:d5:49:0b:fc:af:b6:ff:3d:dd:7f:b5:
06:23:68:fd:20:9d:a4:12:b4:15:09:80:a0:29:cb:
d7:9d:99:85:55:e6:9f:9e:cf:35:fa:ed:92:3f:91:
43:91:cf:a9:ea:2c:61:75:ef:bc:77:5e:93:9b:0a:
e6:ab:d6:8d:cb:26:8c:7b:e2:5d:38:94:8c:23:6f:
98:f4:94:0b:ac:4c:a0:77:17:3a:1e:bf:75:ba:e8:
6f:b8:a8:70:b4:09:c6:99:39:79:3b:ef:7e:4c:5c:
24:42:09:c3:77:bc:a3:96:e3:70:79:2f:2f:f7:0a:
23:b9:a0:6a:3c:7f:5a:8c:ee:15:26:3d:33:2e:86:
4d:ac:25:89:c6:df:e5:b5:87:ed:45:96:9b:95:39:
7e:14:ec:a9:b6:4d:2f:49:42:0c:91:52:cb:a1:66:
32:1f:a5:92:59:d9:12:08:b6:6f:1e:73:6a:57:b2:
32:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:83:86:8A:DA:D1:C9:FD:8F:AB:AA:3E:D5:A2:42:54:F4:2C:98:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2fcffa1-7c64-3a77-bc35-1406762f6d7d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:30ff:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:21:57:e8:9a:ba:78:bb:ec:9b:dc:aa:f5:85:dd:a2:6d:80:
ee:0c:6e:28:1e:14:99:aa:c7:1d:10:2d:62:a1:29:72:51:31:
f7:35:14:b1:69:14:5d:b9:51:ac:41:b9:37:c3:46:8f:ef:05:
04:36:4c:1a:17:01:de:6d:51:c0:fb:79:46:3e:1d:4d:2e:7d:
8e:03:1d:ec:57:9b:7a:78:86:2e:2d:3c:76:22:59:ae:d5:e7:
7b:be:47:6d:41:c3:66:eb:5d:72:57:3d:ac:a9:cc:ae:fb:99:
3b:5f:50:a4:89:8b:bf:ba:96:fe:4e:39:cc:d3:95:ab:f3:8f:
ae:f1:08:b3:aa:02:57:f8:2f:34:d2:17:61:92:03:7b:42:02:
56:2d:9a:ae:71:85:16:15:85:be:8f:3f:12:10:5f:dd:34:83:
e6:9e:09:7b:83:ca:d4:90:6e:6a:d5:30:6f:02:c9:ec:00:c4:
42:c1:bc:6e:93:44:8c:2e:6a:84:a1:9b:2f:0c:8f:b3:36:a0:
99:c9:e8:b2:1e:c5:33:59:98:45:26:06:22:01:41:47:43:1b:
23:b2:6a:1c:08:dd:1f:6d:3b:95:58:3d:dc:77:8c:83:7f:c4:
b4:38:30:0f:7d:20:e8:e2:ca:14:d5:37:ac:90:a0:e7:36:67:
a2:10:a2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:56:09 2025 by rpki-client