Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/436394c3-8039-3911-9e8f-576517a3fbc8.roa
File: 436394c3-8039-3911-9e8f-576517a3fbc8.roa (raw, json)
Hash identifier: myzEw9e4aOlGHNU2VgISoXDFSMbZThDGBNjEQ3rUIbs=
Subject key identifier: 96:CA:C5:62:18:80:B4:B7:D9:A6:3C:46:01:95:8C:F3:63:82:5B:DD
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848A3F58EBF1AEFFB5B077A1AC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/436394c3-8039-3911-9e8f-576517a3fbc8.roa
Signing time: Thu 23 Jan 2025 13:38:25 +0000
ROA not before: Thu 23 Jan 2025 13:38:25 +0000
ROA not after: Wed 23 Apr 2025 12:38:25 +0000
asID: 397211
IP address blocks: 2001:501:b1f9::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a3:f5:8e:bf:1a:ef:fb:5b:07:7a:1a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 23 13:38:25 2025 GMT
Not After : Apr 23 12:38:25 2025 GMT
Subject: CN=c0c1b610-bf93-413b-a43c-6a380b004f39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2d:5e:06:53:ad:7d:1b:56:13:fc:d1:26:c1:
de:93:68:b9:45:25:99:7e:9d:7c:39:44:84:65:f8:
e4:84:95:e3:29:d6:85:1c:5d:02:45:57:a7:ce:2f:
cd:09:ee:c8:35:6e:f7:31:ab:02:13:22:b4:42:12:
aa:0b:5d:62:41:1b:06:ea:b0:74:e5:d0:c7:a0:6d:
36:b4:c3:5d:94:a9:ec:6e:25:ed:a9:fc:15:de:18:
c6:f1:bc:84:78:88:27:69:5a:23:95:f0:45:51:17:
a3:29:c7:56:b9:96:de:62:93:05:55:ee:3b:05:91:
54:9d:d8:a6:4f:75:f6:31:8c:c2:73:5c:9e:ea:af:
64:8a:01:8f:a3:d2:3c:be:42:ee:dd:9b:ed:0b:ef:
75:a4:9a:ce:97:15:ab:8d:c9:1b:0f:74:40:8a:bb:
ee:f7:e8:35:fa:e0:a1:b1:9a:75:60:15:c6:eb:ab:
4c:e4:ec:5f:8f:99:c8:38:07:de:e8:97:51:f2:32:
68:44:c0:d4:5a:9b:4a:57:af:b4:5d:2a:46:46:5b:
f2:37:c0:58:61:95:d6:50:3e:71:04:39:69:cf:2e:
3a:23:b9:4b:b0:18:1c:6b:c2:dd:e8:86:d9:b8:e6:
c8:40:86:09:99:74:9a:0f:8b:92:1c:82:ec:bc:66:
07:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:CA:C5:62:18:80:B4:B7:D9:A6:3C:46:01:95:8C:F3:63:82:5B:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/436394c3-8039-3911-9e8f-576517a3fbc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:501:b1f9:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:16:db:f1:22:8b:fa:35:cb:f6:6e:72:18:d9:3d:4c:97:7e:
da:8f:bd:9c:9f:7b:37:22:c0:2c:c9:db:42:87:46:3f:ea:94:
2d:43:57:f8:4b:ef:c9:5e:e2:a5:d1:d1:f0:dc:b3:26:8a:bd:
34:f5:8d:2e:55:8f:01:d2:59:ce:03:ac:a4:f6:c0:ad:8a:ca:
ee:7c:26:e3:a1:7a:05:64:27:c8:ff:2f:55:58:9e:65:ef:d3:
3f:88:95:01:1e:c8:40:b3:91:c9:29:04:e4:c0:fc:54:74:9a:
f1:d7:31:a4:14:2c:b9:e5:9c:48:a1:22:da:45:51:36:43:6e:
89:b6:6a:08:68:8c:25:2c:62:2d:9c:a9:39:2f:7c:3e:8d:34:
da:19:8d:19:b9:5e:aa:24:80:51:7b:eb:f6:a4:9c:6b:cd:4b:
bd:d6:db:98:b1:57:86:54:42:ce:3a:7e:5b:52:73:01:2e:20:
b6:9f:7f:56:ab:41:00:d3:e4:c5:36:4a:f5:b5:c2:9a:e3:e8:
f0:26:15:ef:02:1e:20:85:21:a2:22:e0:a5:fc:60:dc:f3:f3:
87:aa:de:b3:8c:a0:ee:5c:d4:25:02:20:8c:de:de:61:4a:43:
dd:f6:dd:64:de:b4:67:c1:e8:6c:51:6e:15:6b:dd:0a:46:69:
ef:ee:92:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:18:23 2025 by rpki-client