Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2117ec74-a0fe-31ba-984d-fd38b154aa02.roa
File: 2117ec74-a0fe-31ba-984d-fd38b154aa02.roa (raw, json)
Hash identifier: uGuOiktPYdIcjyWgXpiRuNrutveq2EumCdOotvD4bUg=
Subject key identifier: 86:E0:CC:A4:8C:8E:67:22:9C:A6:AF:C1:78:33:11:D3:FF:A3:EF:BE
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848906AB429407354E8C6D25C80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2117ec74-a0fe-31ba-984d-fd38b154aa02.roa
Signing time: Thu 16 Jan 2025 13:38:17 +0000
ROA not before: Thu 16 Jan 2025 13:38:17 +0000
ROA not after: Wed 16 Apr 2025 12:38:17 +0000
asID: 396608
IP address blocks: 2001:502:1ca1::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:6a:b4:29:40:73:54:e8:c6:d2:5c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 16 13:38:17 2025 GMT
Not After : Apr 16 12:38:17 2025 GMT
Subject: CN=89685258-a9f7-4ff8-8372-90c1cc7cffef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9e:c3:96:98:60:f3:6a:33:45:06:ce:3b:b0:
a3:e0:77:cb:62:12:a1:7b:c8:cb:0c:c7:6a:2c:11:
bb:54:38:3a:74:eb:2e:e0:0a:8c:47:b6:67:56:20:
10:2d:d5:79:c4:d6:22:72:9f:60:ec:c5:05:dc:2d:
b7:e4:07:7e:77:95:dd:25:a6:6f:f1:61:dc:f8:ec:
4e:41:4b:24:ed:48:22:0f:7b:ca:9f:4b:d6:ae:87:
9b:2c:d3:b6:b1:38:0f:f7:4c:97:bc:bc:01:76:19:
2c:1b:8b:7b:71:eb:6e:c9:df:77:af:66:5e:d9:92:
dc:57:34:82:ff:fe:d2:c3:13:a9:48:fb:aa:98:76:
2e:68:2e:a0:5c:fb:ea:ec:38:2f:6a:d6:31:50:1f:
a5:37:fa:ba:54:5c:92:8e:66:99:5e:59:d0:af:3e:
09:bd:18:3e:0e:dd:c7:d2:ab:99:d2:cc:fd:05:8e:
00:21:a4:4b:0f:5f:c3:d7:4f:2f:b4:69:e0:dd:ac:
ae:9a:19:44:4a:84:aa:7a:e9:4a:97:f2:cb:d6:b9:
1e:ec:ba:a2:d0:e8:65:52:09:be:94:bf:4c:dd:25:
4a:b6:46:ea:18:d7:c6:2f:ca:4b:46:72:13:e0:3d:
d1:09:b2:5f:0c:de:6c:32:4d:aa:c4:77:7a:57:2e:
61:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E0:CC:A4:8C:8E:67:22:9C:A6:AF:C1:78:33:11:D3:FF:A3:EF:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2117ec74-a0fe-31ba-984d-fd38b154aa02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:1ca1:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:0d:16:1d:18:3a:f0:d6:f5:9a:20:40:ca:98:70:05:11:37:
dc:31:15:a6:2b:dd:d6:f4:9d:f8:d0:3d:3b:1a:9d:8d:0c:77:
1f:d6:14:2a:c3:a0:bb:bb:52:a3:37:5c:00:26:93:2b:84:20:
2e:e9:60:17:27:a2:25:71:c9:49:2f:e5:97:6d:3c:97:b2:ef:
1f:f3:e0:82:08:74:f7:99:9b:69:81:e4:14:45:a9:49:cb:a4:
50:2b:61:e6:63:0d:f1:ba:e2:2f:a1:90:48:60:74:14:98:7d:
dc:28:db:27:b5:ea:f6:90:41:aa:42:c0:89:fd:23:c4:5d:79:
b5:50:30:ea:cc:31:60:94:70:a7:89:fe:fe:2b:d6:a5:7e:ef:
61:3d:da:1f:cc:53:d6:8f:80:9e:1b:0e:45:75:cd:01:6f:b3:
52:88:3b:e6:ec:ef:d8:f4:43:9f:15:dc:64:03:13:ce:76:1d:
da:53:5e:69:3f:76:02:4d:57:5e:33:b8:c9:20:9c:fe:b9:29:
ba:4c:9a:5c:f2:ff:63:29:7c:b2:ce:c5:2f:a7:c9:0f:3b:e9:
24:7b:e5:76:71:14:65:37:f1:59:01:c6:45:fe:ed:67:aa:bd:
15:c7:0f:d6:f0:eb:ad:e4:f3:75:ba:3e:03:4b:be:f6:d9:25:
71:e2:05:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:10:52 2025 by rpki-client