Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/332ffaa0-3d2a-3a79-8c60-76cb5d663403.roa
File: 332ffaa0-3d2a-3a79-8c60-76cb5d663403.roa (raw, json)
Hash identifier: zBx+2fKHZzA+2Gz2tcX935p4Snd5G9+WOnTm4YpZewM=
Subject key identifier: 06:06:1B:87:63:1C:07:7E:81:4E:B7:0E:C2:2F:89:36:9B:29:C7:AD
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489BA0BAE1320F087C107E6DA0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/332ffaa0-3d2a-3a79-8c60-76cb5d663403.roa
Signing time: Mon 20 Jan 2025 14:00:51 +0000
ROA not before: Mon 20 Jan 2025 14:00:51 +0000
ROA not after: Sun 20 Apr 2025 13:00:51 +0000
asID: 397198
IP address blocks: 2001:500:30ff::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9b:a0:ba:e1:32:0f:08:7c:10:7e:6d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 14:00:51 2025 GMT
Not After : Apr 20 13:00:51 2025 GMT
Subject: CN=5c11c74e-db59-42cd-959e-07423c87b11d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:43:1b:03:6b:8a:0a:ce:45:f2:02:7f:b1:d8:
56:d9:5a:d7:60:eb:06:10:6f:8d:78:6a:34:ac:0f:
be:e3:70:f0:97:01:22:d3:a3:6e:da:f1:65:68:22:
ad:f4:a7:fa:7c:75:52:44:7d:92:3d:ae:60:b6:98:
48:9f:a1:57:48:4a:14:d8:24:33:c9:b0:0d:88:c3:
a6:16:73:61:a1:4a:b5:e7:40:fe:f9:49:7b:76:28:
c9:4b:10:4c:09:e3:1b:09:f9:f8:83:4b:88:c9:e0:
e1:bc:1b:39:84:37:22:8d:b6:84:fd:ac:5c:08:a3:
31:ee:bb:ef:77:d1:6c:41:0c:85:8f:70:6d:a3:13:
e6:29:6b:20:9f:d7:b6:60:90:6e:63:eb:6f:d8:0e:
6f:b7:f5:8e:f0:66:24:5a:4c:9f:28:51:7b:2c:db:
2c:bd:da:0a:a9:7a:3f:79:7d:b3:3e:b9:a3:a2:44:
40:7f:10:f0:8d:d6:2e:13:e5:35:5c:68:cf:fb:df:
50:6d:e3:16:c9:b2:fe:87:bd:d6:1e:46:85:25:39:
01:d2:60:3a:a4:7b:94:1e:cd:43:c7:7a:40:39:2c:
69:54:e2:a7:eb:5f:68:c3:d2:32:b2:85:87:37:b8:
15:31:08:b8:68:9e:bd:61:c3:ef:87:03:4e:23:67:
18:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:06:1B:87:63:1C:07:7E:81:4E:B7:0E:C2:2F:89:36:9B:29:C7:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/332ffaa0-3d2a-3a79-8c60-76cb5d663403.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:30ff:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:35:f3:6c:14:ff:49:fd:53:66:fe:5c:6b:f0:dc:bd:fd:15:
d9:13:80:b0:fa:de:31:56:3b:6b:35:71:9d:60:d8:d1:d6:22:
b0:fe:ad:b5:ee:97:5b:e5:0b:f5:a0:fa:1f:9b:56:97:82:0b:
ee:25:f7:5b:62:25:0e:ef:ff:d7:c3:cf:9c:92:40:24:e9:49:
da:fa:20:ee:24:3f:28:31:5e:b6:67:cd:ea:a2:e0:11:47:57:
ab:24:88:f5:67:ff:e5:7f:4c:22:42:10:10:25:84:4f:2c:91:
da:8a:97:bf:b5:73:be:f5:10:d8:2e:08:8a:b8:75:a5:de:f8:
52:a8:ea:46:7c:c6:2f:e5:88:02:b6:d3:a3:0b:15:14:32:13:
14:f1:30:c2:98:3a:b2:75:fb:cb:ed:14:0f:11:68:89:75:08:
2a:0b:01:9e:6c:8f:99:c8:6f:95:47:08:93:e1:0b:79:d0:68:
a0:92:ca:43:72:b1:1e:32:42:9d:09:08:50:02:d6:7d:b7:02:
aa:77:95:b9:dc:bd:fb:ef:55:a2:d3:a2:b1:33:e6:cf:ba:99:
82:f9:f1:89:d6:49:22:70:63:24:1a:02:94:e3:ff:d0:0f:61:
2e:e9:d5:6b:02:b8:1e:a6:b9:04:c5:c6:b8:fc:e9:0b:4d:b4:
5d:4b:f2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:18:51 2025 by rpki-client