Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/329cd614-f877-3905-9a50-b7b249be459c.roa
File: 329cd614-f877-3905-9a50-b7b249be459c.roa (raw, json)
Hash identifier: 9ASIgVtWqZHeQSngkd6Nzx3UO/rJOc3YNFoB6QjuDG4=
Subject key identifier: 5C:BD:C7:4B:C5:B3:71:A5:EC:50:3F:05:A9:FB:85:85:DD:7B:43:8C
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858488DAB7372B1702C81407F4360
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/329cd614-f877-3905-9a50-b7b249be459c.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 396583
IP address blocks: 2001:500:7967::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:73:72:b1:70:2c:81:40:7f:43:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=9282d9cc-b2d6-46b4-9f69-791c0e4a0047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:65:89:fe:91:35:eb:d7:ed:e1:6a:34:1f:6a:
c5:cf:99:18:bf:77:b0:9d:47:4a:9c:d4:b4:6e:46:
ae:6d:d4:3a:42:e2:0c:d6:7d:0d:40:df:43:82:5a:
09:9b:8e:06:04:30:85:af:d6:29:32:f1:26:26:7e:
bd:62:57:99:c0:1a:77:b5:c2:dc:bd:29:f7:bc:a4:
4b:b0:09:0d:4a:f9:f3:c2:d5:98:71:67:0a:5b:f0:
be:0b:d3:78:dd:1c:5f:f9:37:70:cb:52:21:4d:40:
ce:e2:0d:70:56:33:8a:89:a7:96:1d:ee:71:b5:33:
71:81:fc:67:e1:fe:fb:5a:ae:ee:5b:9f:69:33:4c:
de:ad:c3:ce:a0:54:05:80:ba:03:3d:08:11:7c:21:
33:40:9b:e2:06:c4:e9:fc:c8:89:ff:3c:52:a8:7b:
91:1a:7b:38:c1:65:8d:19:91:8f:c9:00:92:72:58:
6b:2d:70:c4:c6:44:fd:e2:44:f0:de:c4:5b:7b:6e:
cd:95:07:34:3f:5f:b2:07:fc:d7:8b:42:77:8e:3d:
49:2b:56:ff:a5:77:aa:d2:9b:17:7f:b3:bd:91:5c:
7e:51:e6:fb:de:bc:39:71:f6:fd:77:60:2b:0a:33:
fb:bf:65:d6:4f:73:09:f4:7d:9f:2c:6e:c3:fd:0d:
13:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:BD:C7:4B:C5:B3:71:A5:EC:50:3F:05:A9:FB:85:85:DD:7B:43:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/329cd614-f877-3905-9a50-b7b249be459c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:7967:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:09:84:bb:e2:a1:53:49:e4:48:99:15:25:40:86:6a:8c:bd:
83:1d:a3:02:90:6d:bb:e5:94:43:84:43:8e:ab:dc:02:7c:b6:
5f:7d:17:1e:bb:2d:30:d1:4f:95:71:c5:d4:f8:19:4a:15:fe:
9e:99:3d:ec:ef:70:f1:5a:f5:69:e4:7f:5a:cb:ba:8d:65:b0:
9e:7e:17:d5:d0:45:b2:f1:1c:99:3a:8d:e1:38:4a:96:65:b0:
4d:ae:e3:4e:46:11:8b:1d:ee:e5:9d:fe:fc:bf:21:22:4f:b6:
7a:9b:da:4e:92:7d:0a:55:7d:92:e8:39:b4:56:29:11:43:22:
c1:6a:b3:ba:69:70:0f:c3:cf:61:2b:f5:7a:c1:f9:ee:75:a5:
0b:99:12:ba:c8:66:ff:0d:a3:1d:47:69:30:e3:23:de:46:4b:
8e:14:3b:2b:5c:89:84:b2:a5:13:81:1b:b8:5f:b9:39:8c:ef:
e6:89:e5:4d:3b:e0:2c:d7:5f:a5:01:90:91:58:9d:07:e8:68:
24:00:93:64:b7:53:cb:24:5b:41:b7:bb:9f:42:03:f8:00:eb:
f3:da:fa:5a:04:5c:b4:3e:d0:1b:74:3b:69:4d:6b:d6:c9:ae:
06:39:c6:33:bd:61:82:2e:a0:65:c5:19:1c:bc:15:b5:9d:ec:
83:2b:43:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:39:50 2025 by rpki-client