Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2f8492e5-e2ff-3abc-819b-1440566d3d7d.roa
File: 2f8492e5-e2ff-3abc-819b-1440566d3d7d.roa (raw, json)
Hash identifier: VtjDOY8rj+5HbVRdNSMlFi4mzaeSnJaGssZkmjC6XxQ=
Subject key identifier: F7:3D:32:31:AF:AA:52:52:0A:A2:C1:3B:FE:D6:4D:ED:7C:83:A2:8E
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489BA0B7E9BA658B9A508A30C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2f8492e5-e2ff-3abc-819b-1440566d3d7d.roa
Signing time: Mon 20 Jan 2025 14:00:51 +0000
ROA not before: Mon 20 Jan 2025 14:00:51 +0000
ROA not after: Sun 20 Apr 2025 13:00:51 +0000
asID: 396554
IP address blocks: 2001:500:30ff::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9b:a0:b7:e9:ba:65:8b:9a:50:8a:30:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 14:00:51 2025 GMT
Not After : Apr 20 13:00:51 2025 GMT
Subject: CN=43b1d37c-1b9e-4f8e-a5e4-f2430cc4fe21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e1:9f:f0:cd:68:d5:f2:42:0f:0e:42:ca:55:
c7:8c:31:18:5a:f6:64:d3:17:34:e7:19:3d:9a:1c:
b8:a5:78:cb:41:db:42:9f:f0:53:90:3c:36:6a:48:
56:16:7c:3f:50:76:33:7a:24:9f:96:74:7d:e9:ed:
82:37:46:cf:40:00:7e:20:c9:6f:95:4e:41:f8:ca:
34:61:71:40:69:b5:8b:d2:89:66:c6:d4:60:a4:9e:
d7:8f:fa:89:92:f4:24:70:de:92:c9:13:ec:0d:f4:
44:60:75:06:b9:5a:1a:b5:ef:93:17:68:82:97:18:
e2:6f:9e:91:3b:16:20:46:2a:ec:67:ed:04:fd:6b:
c1:28:27:d1:d7:73:22:ef:83:b3:17:ad:0d:17:74:
bf:d0:cd:79:67:c6:6c:79:c1:a8:fd:15:ef:83:c3:
6a:63:b4:4d:49:49:41:6b:09:4d:0f:bf:32:0c:ea:
a0:f4:b2:48:29:b1:9b:e5:62:fb:ba:5d:50:f8:1f:
c3:6e:9d:37:0e:53:1a:a4:f3:9f:e1:6c:5a:52:f9:
8a:ff:3f:5e:e2:25:aa:4f:3c:bf:f7:88:5e:ea:c9:
fe:8f:80:57:64:04:27:7c:d7:c0:50:b0:33:a4:e5:
41:ab:31:a4:db:8f:14:5e:1a:33:70:26:b5:45:e7:
49:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:3D:32:31:AF:AA:52:52:0A:A2:C1:3B:FE:D6:4D:ED:7C:83:A2:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2f8492e5-e2ff-3abc-819b-1440566d3d7d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:30ff:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:67:e7:3b:11:fe:9f:25:3b:7e:b8:90:07:c8:6b:9b:b5:b4:
d0:64:5f:83:59:db:8c:9d:4a:98:a7:c4:17:8e:e6:37:0a:1f:
f9:07:7e:3d:73:86:3b:84:7d:bb:43:1b:9f:e7:39:c6:70:65:
b8:fb:5d:60:a5:e6:e1:0a:20:d4:07:42:27:b1:14:5c:c7:a9:
ec:4f:44:26:c2:e6:82:0d:17:b4:6c:c1:e4:17:cf:f6:d1:35:
c3:1b:fb:b4:14:bc:ec:38:d6:e9:d2:19:92:7c:3a:a1:c3:f9:
88:2b:3e:60:2c:16:0d:a3:32:95:9a:47:d9:b8:ec:33:f2:16:
ba:9a:5b:34:d9:b5:47:13:41:96:32:18:a6:c8:48:cf:ec:b5:
e4:a9:33:cd:28:2e:b1:ca:0d:a4:d4:13:a3:0d:6d:f8:33:17:
a1:67:3a:bf:b0:bd:0e:a4:89:79:a9:55:82:b0:2d:7b:14:98:
73:e6:36:d3:51:c2:07:8e:68:d7:47:62:07:df:c8:b5:63:5f:
7e:25:80:7b:f8:2c:4b:92:17:14:dc:ab:21:82:16:54:b8:29:
da:9e:ab:d4:44:16:61:92:0d:5e:35:16:a7:79:49:2e:85:4c:
06:81:e4:80:d5:fd:63:2e:be:7d:73:b4:f6:03:7a:82:55:43:
52:48:a0:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:09:23 2025 by rpki-client