Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fa9ebc53-c3f8-3cb6-8d45-58066a364c85.roa
File: fa9ebc53-c3f8-3cb6-8d45-58066a364c85.roa (raw, json)
Hash identifier: e2A8DfjkCT0IHO8tDFY/R/3byk2KnkSR92l44293wAA=
Subject key identifier: 3E:95:DC:80:2B:59:FA:35:47:41:FA:AD:8B:DC:38:CB:56:DE:ED:09
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848906AB349638F0C32FD9F5F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fa9ebc53-c3f8-3cb6-8d45-58066a364c85.roa
Signing time: Thu 16 Jan 2025 13:38:17 +0000
ROA not before: Thu 16 Jan 2025 13:38:17 +0000
ROA not after: Wed 16 Apr 2025 12:38:17 +0000
asID: 396599
IP address blocks: 2001:502:1ca1::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:6a:b3:49:63:8f:0c:32:fd:9f:5f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 16 13:38:17 2025 GMT
Not After : Apr 16 12:38:17 2025 GMT
Subject: CN=31cffc5d-c615-41f7-ae3d-81b4c1358f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:67:41:21:99:3a:99:a6:ee:6e:42:b2:2b:db:
c7:fc:ba:ac:71:48:71:42:11:79:1c:bc:fa:1c:75:
85:73:5b:05:44:ff:18:20:79:b3:02:3f:24:0a:74:
f4:70:64:e1:49:0b:7c:40:a3:e3:03:ea:01:2c:e2:
07:28:68:53:0f:8b:2f:e7:cc:06:c9:f9:b0:9a:f1:
47:d4:c9:51:6f:b1:79:02:9b:9a:18:24:48:e9:a2:
2c:5b:e8:20:ba:a7:bb:53:08:b2:04:88:4f:33:c9:
5d:26:c6:cf:73:d7:f9:4c:ef:0e:5d:47:42:fa:87:
c0:ac:8d:cb:5d:67:5c:ec:33:a7:89:ed:c5:85:c1:
72:51:3e:d1:cb:d1:42:5c:30:f8:4e:65:1e:0e:5e:
66:e9:ea:98:a8:74:b5:73:ac:8b:e7:c5:f9:50:08:
f7:f6:a3:ae:fe:ca:4f:86:1f:e7:59:f2:da:bf:02:
37:a2:61:c3:ab:5e:01:3e:02:43:fa:49:bc:ab:78:
8b:ac:6b:f1:63:88:91:82:98:fa:00:65:37:5d:cf:
67:5c:6f:0c:05:f3:ac:f0:41:1e:ba:7e:81:d2:78:
1d:6f:7e:04:9e:c2:e9:31:97:3a:d0:08:32:ca:3d:
cb:3b:3b:db:76:3c:34:2f:cc:75:4f:33:4a:2a:f3:
dc:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:95:DC:80:2B:59:FA:35:47:41:FA:AD:8B:DC:38:CB:56:DE:ED:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fa9ebc53-c3f8-3cb6-8d45-58066a364c85.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:1ca1:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:ae:8b:46:fd:01:4c:7d:d7:1c:1c:1f:a1:bc:e4:16:75:99:
2c:6b:a2:62:18:45:70:f1:9c:0a:51:2c:8c:4b:a8:46:b7:bb:
34:80:5b:8a:7b:69:cd:1c:95:bc:1c:06:5d:fc:8a:cb:da:10:
51:de:4e:f7:22:e3:57:02:cd:cb:50:43:99:36:97:ba:83:be:
49:65:25:a5:01:46:25:fa:51:27:82:84:72:c0:85:d9:ea:bb:
78:2b:17:60:35:e2:44:f6:c3:0f:90:f4:e5:b5:bc:1d:6b:29:
c7:f6:24:7b:04:18:f7:e6:9f:b7:f7:b9:27:f0:d8:7e:11:80:
74:a7:41:69:97:e6:d4:3f:53:4e:ac:7b:42:2f:b0:dc:01:61:
c3:c2:7e:ad:8f:3d:ce:33:20:f8:7e:92:b5:8d:cb:1d:e6:fd:
34:41:f0:d1:71:6c:33:8c:3b:91:a1:b2:87:16:4f:fe:8d:90:
60:f0:6f:a7:1e:15:87:ac:1d:d0:38:76:d1:e2:76:b8:a6:2f:
d7:93:43:df:90:bb:44:6a:a8:01:6e:08:55:0e:3e:fa:55:e0:
4b:35:f8:1c:bb:0b:cf:95:48:04:2a:de:99:56:f0:6b:8e:1c:
88:9f:c4:cf:8e:07:66:da:03:69:24:9b:76:3d:01:3d:58:d2:
07:2e:d4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:22:39 2025 by rpki-client