Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b2f4fba-9fe9-3543-84f5-57a9b72112ba.roa
File: 4b2f4fba-9fe9-3543-84f5-57a9b72112ba.roa (raw, json)
Hash identifier: tPAtUDY6tcW+6K2EihLv3CBZSFqLwP3E/fzMRY3jp10=
Subject key identifier: B4:80:25:45:9E:87:C5:CC:87:62:CE:C9:7A:EA:DB:98:D4:49:D2:D4
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848C57334D2F25915E147F4F380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b2f4fba-9fe9-3543-84f5-57a9b72112ba.roa
Signing time: Tue 04 Feb 2025 13:33:16 +0000
ROA not before: Tue 04 Feb 2025 13:33:16 +0000
ROA not after: Mon 05 May 2025 12:33:16 +0000
asID: 396582
IP address blocks: 2001:503:c27::2:30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:73:34:d2:f2:59:15:e1:47:f4:f3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Feb 4 13:33:16 2025 GMT
Not After : May 5 12:33:16 2025 GMT
Subject: CN=cffbacdc-ea7f-4ec8-b790-2b3a9ee3634e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f9:3e:6f:9a:e9:88:f9:73:8c:b4:0b:76:54:
15:46:6a:0c:f5:0a:f3:b6:1d:cf:bf:d8:a9:c3:a3:
aa:0c:c6:ac:ad:de:14:6f:65:45:9f:6d:27:d8:dc:
7d:ff:4f:9d:b1:aa:ae:fe:0e:c2:a3:06:11:7c:23:
b9:e3:1c:f7:41:5b:31:0e:35:7e:e8:f9:ef:c8:65:
f0:83:98:2c:03:e1:53:e1:c0:3e:d0:2d:80:74:a1:
97:f6:b1:b7:80:1c:99:ca:45:39:6c:aa:ed:e5:6d:
bb:fa:fe:11:cd:88:01:f3:ae:c2:70:35:3e:ba:d4:
69:fa:b5:b9:2d:12:8b:84:55:79:d5:e7:9a:a4:06:
94:2b:d9:51:3f:bd:c9:19:bf:1b:b1:58:b6:98:31:
26:64:33:00:93:43:e0:e0:b8:7f:ea:e2:42:e3:4c:
c6:11:98:06:3b:5b:62:84:b5:d4:8f:f0:ba:39:bc:
b4:64:e9:4b:38:89:0f:2a:89:e3:18:29:43:dc:c1:
53:8f:aa:bb:94:0a:13:39:81:c1:eb:81:d2:a6:79:
a4:e9:af:11:85:0c:8e:1a:09:6e:a7:f7:76:d5:01:
9a:db:82:7f:c9:62:d3:d8:ef:47:9e:bd:3e:54:c1:
6a:00:9c:14:96:99:56:3c:bf:8c:05:28:df:c4:74:
7a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:80:25:45:9E:87:C5:CC:87:62:CE:C9:7A:EA:DB:98:D4:49:D2:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b2f4fba-9fe9-3543-84f5-57a9b72112ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:c27:0:0:0:2:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:a3:85:d0:b1:de:89:d7:71:3f:25:64:2b:47:77:bd:1d:70:
f7:49:60:24:0c:46:9c:d4:13:87:ea:ae:52:15:a4:02:a3:a4:
58:99:a2:86:ac:d5:00:3a:ba:90:6a:d9:ef:e8:a6:b0:77:17:
13:dc:43:f1:8c:59:46:98:1b:06:72:fc:b8:62:26:a0:e2:34:
db:4e:46:cc:a3:84:0c:88:8a:83:eb:55:88:50:5b:18:77:8e:
a6:f4:b9:6c:aa:ab:e5:fd:fc:d5:a5:25:90:89:94:66:ab:75:
91:92:a6:d1:09:04:92:47:7d:e5:08:a5:7e:00:9a:3b:df:f6:
8f:0e:3e:de:dc:65:80:43:ca:ec:b3:3d:8e:6b:bb:58:1a:fa:
58:43:ee:3d:b1:6d:53:fe:0f:c8:8a:96:c4:a3:51:ed:79:fb:
c9:c1:9c:29:0f:49:7f:cc:64:ed:55:fa:ce:e3:aa:f6:92:65:
bd:19:2b:a6:54:c1:55:39:0b:fd:03:98:60:d5:8d:d0:56:13:
62:33:57:12:7c:82:f7:1a:0f:0d:c7:a2:34:9c:9e:4e:f3:02:
c9:bb:33:d2:5f:68:34:12:39:be:13:2c:de:66:db:20:1d:ec:
ce:78:d2:bf:25:8c:dc:05:70:be:4f:12:99:62:9d:ed:77:8f:
04:e7:a5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:42:51 2025 by rpki-client