Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff5baeef-a41a-3b2c-b731-ca7e5b71fe5f.roa
File: ff5baeef-a41a-3b2c-b731-ca7e5b71fe5f.roa (raw, json)
Hash identifier: V/Nn+gweirpzQK90sDV8tmhsQRV0vBQTqKnhrUXjhTM=
Subject key identifier: 8A:CD:FF:D6:EA:E2:1E:26:DE:B8:BD:2C:A0:26:DE:B9:9E:4F:C8:1B
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848424323031B16D40084414F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff5baeef-a41a-3b2c-b731-ca7e5b71fe5f.roa
Signing time: Thu 19 Dec 2024 13:45:31 +0000
ROA not before: Thu 19 Dec 2024 13:45:31 +0000
ROA not after: Wed 19 Mar 2025 12:45:31 +0000
asID: 396826
IP address blocks: 2001:500:124::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:43:23:03:1b:16:d4:00:84:41:4f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 13:45:31 2024 GMT
Not After : Mar 19 12:45:31 2025 GMT
Subject: CN=2673dde4-fab8-4600-bcbd-e7299e888623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d8:f4:15:b6:a3:70:45:22:7f:83:f6:ec:ac:
02:45:aa:a6:78:4d:c6:48:8d:be:8f:50:d0:7c:50:
bc:42:23:67:aa:e0:12:f7:db:75:00:ab:31:51:44:
48:77:4e:d4:5f:0b:cd:3f:b7:88:7d:59:b6:d7:de:
5c:c5:8d:f9:4b:92:79:2c:23:a4:f5:a0:46:ce:ec:
11:61:46:47:4c:55:11:30:e6:a6:2f:ab:9a:d8:c1:
10:56:88:f6:f6:6c:d9:49:f3:87:86:51:ed:8f:f5:
75:cc:83:3f:a0:28:9f:cc:6e:e8:61:14:e5:f2:86:
5f:ff:ce:8e:3b:50:f2:e7:78:a0:2a:fc:6f:ce:f2:
ca:2a:1a:14:4b:0b:00:c9:bb:7e:b8:fe:0b:88:19:
33:9e:2a:6e:c3:12:28:9c:3c:5c:8c:3c:da:e6:ca:
ae:9b:ae:0e:69:16:4a:66:61:f3:af:cc:46:31:9a:
d0:d6:4d:f6:7e:1d:a1:dc:07:27:be:ff:52:18:12:
24:d8:64:97:54:48:a4:3f:80:df:c2:71:72:45:1c:
08:c2:1e:98:9b:db:6b:08:de:37:11:18:0e:4e:af:
3d:7a:76:f4:80:af:a0:04:02:97:a9:19:f1:b3:29:
6b:98:c4:36:27:47:90:2d:97:8e:65:91:3e:29:b8:
ce:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:CD:FF:D6:EA:E2:1E:26:DE:B8:BD:2C:A0:26:DE:B9:9E:4F:C8:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff5baeef-a41a-3b2c-b731-ca7e5b71fe5f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:124:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:0d:88:dc:2a:8f:7c:fd:5b:89:6f:7f:3e:3d:39:58:40:fc:
96:de:10:e9:05:0b:23:48:05:ad:98:c3:dd:4f:af:05:e1:1f:
d1:0c:59:83:7f:f9:a4:93:95:39:9a:e6:97:47:5d:9f:04:70:
d8:cd:36:50:e5:62:81:15:92:eb:3b:0d:d9:35:74:0a:d4:69:
8e:e6:d8:81:fe:1f:fa:40:b8:e7:42:11:33:bc:b8:c4:3c:e7:
d5:ba:73:33:9e:de:5d:70:96:b0:3b:5a:34:b9:2c:ce:35:eb:
ae:a7:97:52:3a:e3:d9:96:18:4a:87:d9:d9:5d:13:36:ed:f5:
ac:ef:6d:4d:23:75:dd:ff:2b:6b:a7:85:9d:05:fe:81:db:0b:
c1:50:ca:57:99:11:25:76:56:b9:21:b1:da:f3:af:d8:d8:cf:
ec:fc:cd:ba:35:49:83:2b:a6:c2:21:05:df:9f:69:77:95:46:
89:90:7e:a6:c0:0f:83:89:9e:81:76:7b:0a:10:f2:b6:00:e1:
a7:36:8d:1c:95:e9:fb:ff:23:ca:71:d2:ec:60:4b:59:9b:d9:
62:df:42:61:5c:6e:a7:7f:0e:2e:ea:13:fb:ef:17:f3:39:ba:
ca:87:96:fe:43:18:70:73:30:b1:f2:fd:0e:66:c9:4b:85:75:
f9:ae:0a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:52:52 2025 by rpki-client