Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fff8dccb-aed1-3cf1-9e44-a5047f453321.roa
File: fff8dccb-aed1-3cf1-9e44-a5047f453321.roa (raw, json)
Hash identifier: icDFU2ZvPYju3XjniZwqsMHwijsnU6pZW+qSi6jfb0g=
Subject key identifier: 70:10:24:6A:B7:CA:BA:E9:59:E2:99:2F:A9:21:40:A0:C0:4F:94:76
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584845157463F3BAE30DA35DE480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fff8dccb-aed1-3cf1-9e44-a5047f453321.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 396568
IP address blocks: 2001:500:122::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:74:63:f3:ba:e3:0d:a3:5d:e4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=559960dd-02c2-435e-afa3-33a5f59a39fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5b:00:0d:ab:95:0c:17:1c:f7:6b:5a:7f:f8:
df:78:77:43:b5:fe:ee:44:a3:42:b6:36:fd:ef:4d:
97:d4:08:af:50:90:29:dd:bc:cf:a3:ba:a5:cc:87:
d0:a3:aa:12:b2:db:07:1f:71:1b:51:0f:60:91:fa:
ca:8b:e8:bd:fb:38:6b:bb:6a:27:98:ee:80:6a:db:
0b:93:6c:42:7e:60:7c:87:58:fb:52:97:b8:63:7d:
30:3f:27:26:3d:9e:e9:9e:b4:a0:bf:80:f1:b3:a9:
93:24:8b:5e:dc:04:75:c1:08:2b:64:a6:6c:f3:a1:
62:71:97:95:4a:a6:47:bc:28:ef:c8:a7:58:b5:3a:
a4:7c:d3:84:b3:dc:8c:51:7a:76:b6:61:ed:c5:3f:
3f:c7:a7:66:6e:b2:52:90:41:b5:76:37:09:f8:36:
14:36:e9:71:15:a5:09:4e:ff:68:5e:9d:a5:ee:b2:
28:f3:e2:02:30:be:d3:b9:20:39:b6:1e:0e:74:e6:
4c:13:f7:99:5a:55:a4:08:7d:a4:b3:03:e5:72:94:
cf:6c:86:83:30:e2:3e:4f:21:b6:54:ee:70:cb:2d:
d9:f5:0c:1b:69:20:53:73:ce:fc:61:2c:7d:f4:3c:
9a:7f:f2:34:b0:41:f5:fc:b6:81:d6:76:26:e8:06:
f2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:10:24:6A:B7:CA:BA:E9:59:E2:99:2F:A9:21:40:A0:C0:4F:94:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fff8dccb-aed1-3cf1-9e44-a5047f453321.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:122:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:31:3a:f1:65:ae:25:49:17:d7:bc:60:4a:5d:85:45:03:59:
85:69:05:4f:b7:d7:a1:af:de:7c:d4:6c:f4:b1:6f:6f:cc:67:
f5:4d:d0:f6:52:86:af:f6:8d:21:4a:72:5a:da:7e:c7:e2:f3:
bb:36:56:96:8f:90:7f:51:be:a5:00:84:4d:83:fc:01:1f:b4:
b0:f3:e7:9a:71:1f:54:b6:4a:1a:45:39:75:7a:f4:3f:b4:69:
6a:55:ba:fc:42:6b:e8:6b:1c:76:a0:0f:b3:cb:30:9b:63:10:
09:be:06:69:9d:98:b8:ff:86:15:18:2a:c7:30:f2:05:83:1a:
5e:51:9e:0f:98:ae:76:0d:36:1c:4a:9b:45:86:d4:6a:63:52:
05:94:9c:20:6e:09:06:b1:4a:c3:4d:63:29:9f:3f:6d:d1:a4:
a6:69:5c:9b:49:59:4c:38:73:03:45:b5:a2:5e:d5:34:0c:8b:
3c:90:6e:0b:35:b7:f3:96:32:33:a0:9b:ef:9e:bd:92:8d:27:
0c:9b:c3:cc:71:e8:b2:2e:60:fb:dc:73:4f:00:92:a9:b6:4d:
13:1d:2d:bb:12:a8:6a:73:ac:c8:97:30:62:94:27:f8:d1:d2:
dd:d7:85:47:58:c8:ca:e9:08:2a:56:8e:e5:a2:aa:fa:a6:8a:
76:3c:e4:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:38:26 2025 by rpki-client