Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2e3f530c-72ab-34bb-9470-eeac5efc04d4.roa
File: 2e3f530c-72ab-34bb-9470-eeac5efc04d4.roa (raw, json)
Hash identifier: w3jytcpyXmJoI68n8XI6z8QJ6OOtgcbgVECYLTJ8fNU=
Subject key identifier: BC:D4:4A:AC:A5:1D:E4:4B:40:64:0D:47:DE:A5:B5:AF:C9:86:7E:A6
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858488DAB7626F4DC4EF9F1842E60
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2e3f530c-72ab-34bb-9470-eeac5efc04d4.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 397204
IP address blocks: 2001:500:7967::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:76:26:f4:dc:4e:f9:f1:84:2e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=4ed43539-166c-4b9f-8642-a9829444d0a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f3:07:02:c2:0f:3a:4c:fc:80:8e:87:60:0a:
10:78:05:b3:7f:91:65:48:a0:ff:37:f6:da:81:70:
83:3a:97:1a:bf:b7:b8:be:f6:c0:ca:de:ca:9c:c8:
ee:a0:97:d5:be:20:90:49:c9:f7:1e:98:f5:4a:88:
a8:ff:eb:4f:aa:0d:d3:d8:8b:59:2d:93:a2:fd:48:
8b:c2:b7:ff:48:76:4b:40:14:6a:27:10:df:f4:77:
9b:fb:b9:08:1b:18:6a:15:c8:4e:ba:28:37:60:6a:
6d:a5:b4:ad:93:b7:86:d4:d3:51:25:4c:d7:e9:e7:
3d:5a:a9:90:84:10:23:f2:a7:4c:6e:16:2f:72:c4:
03:82:14:03:79:17:a6:fd:1b:82:ce:d7:b2:9a:e7:
73:f9:a0:32:01:31:7d:0f:0b:c2:4c:7a:bc:e9:94:
27:43:75:1b:3d:a3:35:13:c5:13:37:aa:3f:87:91:
41:ad:4e:b6:1d:50:b6:57:30:d7:36:36:44:26:b2:
fd:77:c2:f8:c7:39:de:1d:53:03:f5:0d:fe:d4:f2:
d1:5a:28:f0:fd:47:61:de:b4:4d:0f:d3:c6:65:d2:
4b:f8:c0:af:1f:2a:19:52:57:25:53:28:b1:42:16:
bc:1f:48:89:f7:2e:a8:ac:77:95:bb:ff:0b:26:d9:
c6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D4:4A:AC:A5:1D:E4:4B:40:64:0D:47:DE:A5:B5:AF:C9:86:7E:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2e3f530c-72ab-34bb-9470-eeac5efc04d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:7967:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:7e:dd:79:2b:82:d2:25:76:45:b0:52:8f:5e:62:27:17:b1:
fe:ab:ab:04:71:a8:99:ae:f4:df:fa:f1:b4:72:a7:67:42:ac:
bf:51:e2:33:4e:a5:41:50:2b:42:55:ed:41:34:cd:0f:e9:95:
c9:6a:a5:2a:56:9f:69:3d:1b:b3:cd:84:2d:89:fa:9d:5d:76:
6c:6d:41:81:c0:d1:b0:ae:15:11:fe:3e:d9:28:8a:d0:db:c0:
9d:02:43:45:01:62:6f:ca:15:a2:44:d7:35:65:42:97:76:ed:
4e:1f:43:88:ad:14:a6:58:31:18:83:dd:b6:15:54:6f:5e:c4:
20:8b:f6:eb:f3:ef:e6:2f:86:84:f0:b9:3b:17:8c:6c:38:65:
ef:cb:a2:d2:1f:57:db:17:57:70:96:89:0e:ba:5f:ca:80:f5:
b1:f6:a7:08:9a:00:4f:ad:ae:54:83:f1:d6:a4:8c:75:16:cb:
6f:c4:e2:9c:e9:8d:b3:08:08:da:cb:be:e9:30:9a:8b:39:ce:
89:93:65:69:43:8f:d0:03:4f:46:12:6e:9c:a3:43:89:7d:14:
fa:fc:e0:87:df:a4:2f:65:cd:6a:5d:00:62:cf:c9:a6:2f:c4:
12:cd:26:a5:c2:52:b9:5a:40:d6:f1:14:09:ba:9b:86:0f:0a:
51:88:dd:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:11 2025 by rpki-client