Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fdb4f4a3-d480-3998-8c26-d9218a358aeb.roa
File: fdb4f4a3-d480-3998-8c26-d9218a358aeb.roa (raw, json)
Hash identifier: 8w5D8XI9aYGSJZ/ihZcgjMfdsDUMwHO0fNr7sjYN8A8=
Subject key identifier: 90:28:B4:71:03:16:6F:B7:EF:97:42:BE:98:78:5D:48:56:C6:9D:84
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489E5E47A457DD72BEBFF0EE00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fdb4f4a3-d480-3998-8c26-d9218a358aeb.roa
Signing time: Tue 21 Jan 2025 13:34:34 +0000
ROA not before: Tue 21 Jan 2025 13:34:34 +0000
ROA not after: Mon 21 Apr 2025 12:34:34 +0000
asID: 396578
IP address blocks: 2001:503:39c1::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:5e:47:a4:57:dd:72:be:bf:f0:ee:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 21 13:34:34 2025 GMT
Not After : Apr 21 12:34:34 2025 GMT
Subject: CN=fbe7f5d2-52df-4fe8-95f1-bee38e49ff2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2a:71:0e:6a:7d:f7:67:a5:73:05:d2:9d:b7:
5f:58:24:41:d6:be:cf:a1:64:41:0a:9c:78:5c:46:
6b:a1:6a:89:88:1d:74:7b:db:3d:92:3e:32:a8:21:
1b:ef:b3:d5:97:a3:9f:2c:86:f8:bd:2c:f8:2f:6d:
2b:63:a3:e2:5c:9b:8b:0d:0a:37:4f:c1:4f:c4:4f:
df:8c:51:1f:50:c5:29:8b:78:be:a2:a5:c4:dd:2b:
53:bf:03:72:79:ab:8b:b8:a9:01:b6:8d:57:cd:f9:
37:74:f2:59:cf:7e:99:ed:ce:6f:77:65:ee:aa:b4:
25:25:26:26:92:19:c6:ed:5a:9f:3c:bf:f4:14:b1:
2a:7a:ae:38:5e:90:0c:75:ec:fc:d1:de:3a:0e:6a:
e6:2c:10:0f:1c:ee:a9:07:e6:1b:ab:86:d0:41:82:
9a:2f:55:14:21:eb:70:c6:ea:e2:e7:89:f8:f1:c9:
df:2c:9e:26:84:4d:54:10:71:40:51:da:bf:e8:22:
1f:ad:fa:58:a4:8b:d4:e8:5b:e9:d0:42:d4:a2:2f:
e2:b7:b4:0d:6c:b2:f9:fd:d4:5d:59:a1:3c:09:c4:
a2:7d:76:1b:8c:b8:4d:b7:28:b5:dd:0d:bc:92:23:
ec:37:d7:d9:62:26:26:af:44:9e:ba:66:a5:4d:ba:
4c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:28:B4:71:03:16:6F:B7:EF:97:42:BE:98:78:5D:48:56:C6:9D:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fdb4f4a3-d480-3998-8c26-d9218a358aeb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:39c1:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:10:53:d9:f4:a3:d5:d9:ae:37:1d:0b:7b:c6:fa:a9:a0:92:
eb:e1:ed:cb:14:d9:fe:ae:87:f6:5f:26:32:9c:12:ca:ff:30:
b3:cd:40:c1:a6:cf:9a:5b:b7:bf:65:1c:f8:2d:4b:bd:74:aa:
91:b0:69:36:83:47:f2:6c:b3:e9:a9:cf:80:42:92:0c:4d:85:
ac:7f:b5:61:b5:ab:1d:98:dd:76:bd:1e:40:62:49:10:16:92:
ee:d6:c5:fc:5e:c0:90:4d:45:53:12:1a:d1:22:bb:d5:4c:84:
10:40:14:ec:dc:fe:0c:62:9c:a0:f8:55:fa:6c:d3:a6:e3:f1:
c2:22:a9:80:02:64:82:91:cd:e8:35:b0:8b:07:6f:20:83:cb:
65:8b:ee:b3:0d:2b:36:6b:99:1a:e5:8a:d4:36:5f:60:73:42:
da:19:ec:11:79:7b:1c:6a:c9:b3:99:d1:15:aa:07:76:b8:a0:
fa:68:c3:02:24:eb:36:9f:b1:5e:17:c5:a2:dc:88:45:57:42:
b7:b4:85:5d:cd:eb:f9:da:8d:c2:00:aa:d3:66:18:c6:8a:89:
a8:67:e3:63:29:b5:60:c2:98:2c:31:d6:49:62:3a:ab:de:e2:
24:56:ea:b2:58:8d:0c:b8:b5:b8:9f:2e:fb:4a:99:ac:a9:48:
c9:da:f5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:39:05 2025 by rpki-client