Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3477d90c-49d7-3bb3-a4d5-a83ae4c07f87.roa
File: 3477d90c-49d7-3bb3-a4d5-a83ae4c07f87.roa (raw, json)
Hash identifier: TvOiBX8M6anbsSKEZ2uVCCiNosC4CYZg86e/1gt55Ec=
Subject key identifier: E0:13:00:25:61:13:32:8E:C8:24:1E:43:DB:3A:19:E7:85:60:6E:72
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858488DAB7355FDB7985323B85F80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3477d90c-49d7-3bb3-a4d5-a83ae4c07f87.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 396602
IP address blocks: 2001:500:7967::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:73:55:fd:b7:98:53:23:b8:5f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=90748ef3-5b78-40c4-b208-455dff7d530c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:db:99:e1:48:b1:db:de:87:af:b0:2a:4b:9e:
29:80:24:80:1f:f1:3f:9d:ca:42:35:69:78:25:19:
1d:72:3b:24:2e:5b:4f:06:04:5e:04:47:13:15:2d:
e5:83:50:e6:25:33:37:3d:d1:a8:07:f5:87:8d:b5:
a9:86:d0:ac:a5:ee:45:dc:35:1c:77:26:31:88:aa:
71:91:8f:e2:b6:5f:1d:87:7d:dc:9e:bf:3b:ba:2a:
4c:db:6b:21:fe:8e:26:c7:c8:a9:ec:bc:bc:8c:26:
48:99:a7:bc:44:01:9c:bf:52:17:b8:46:ba:3b:06:
ce:c0:74:a0:da:81:1f:5f:f3:ef:ae:03:f7:9d:95:
cf:fa:ea:69:8b:a4:cc:53:bc:8a:65:5d:59:d4:dc:
08:fa:46:09:3b:12:3d:7a:30:05:95:84:c9:1c:19:
36:74:52:de:3f:c1:33:d7:92:d3:d2:ca:df:bd:5f:
1c:32:68:52:b3:25:09:eb:83:4b:1a:80:e0:e2:8c:
5d:9a:8b:55:f0:d7:b3:4d:43:8a:57:10:91:e3:4b:
10:ab:93:23:a3:3b:fc:41:43:3e:44:26:26:25:b1:
e5:31:e0:1e:f4:66:57:06:03:74:d0:0e:ff:fd:b6:
29:e3:d6:59:42:bc:31:67:40:98:80:0b:f9:94:90:
69:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:13:00:25:61:13:32:8E:C8:24:1E:43:DB:3A:19:E7:85:60:6E:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3477d90c-49d7-3bb3-a4d5-a83ae4c07f87.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:7967:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:75:a4:07:3c:fa:ca:43:27:3b:5c:3e:5c:48:b4:df:1f:71:
bf:3e:db:22:52:2b:d0:e4:86:50:d0:b0:c4:ab:a2:fd:b4:a8:
c8:10:e6:c3:30:2f:00:74:f2:a2:cd:d3:d4:c6:33:75:ab:21:
84:49:21:9f:b7:0a:a8:6f:7c:5a:f4:6a:8f:e7:8e:1d:bb:e6:
67:dc:35:3f:c1:bc:90:74:35:e4:02:2b:fb:c0:e7:27:07:0d:
d7:2a:2f:37:60:80:25:1b:b2:7c:d8:03:ad:72:62:05:5f:3e:
b6:58:57:25:18:ad:48:65:fe:0f:6b:4f:25:43:14:63:5f:3d:
04:1e:70:89:29:3c:a3:b2:e6:55:11:b6:69:a0:5f:b4:8b:6b:
20:ba:d4:ae:26:58:61:11:aa:cc:a8:b0:49:8b:f4:34:0d:d4:
b0:4e:72:69:af:97:39:d1:51:3f:92:a5:17:37:2b:be:46:b3:
52:0c:6a:80:45:31:02:c4:70:a2:e4:5e:05:4a:67:3a:fa:1d:
a2:73:ab:61:70:6d:c3:7a:94:10:8e:5b:80:bb:21:93:ab:9e:
e9:d8:fd:64:ac:56:f9:40:fa:91:f7:4b:0a:b1:31:de:2d:7b:
8c:4e:0f:b6:80:e2:ed:d2:88:44:cf:c3:37:c6:10:1f:71:c6:
ae:f2:27:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:40:28 2025 by rpki-client