Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4ce21b84-7ee2-3847-8f8d-421cc0e53ee1.roa
File: 4ce21b84-7ee2-3847-8f8d-421cc0e53ee1.roa (raw, json)
Hash identifier: WXVyQ147DKOqYhxuF6fH/hyjXkZ0GPeKr/lQdei7osw=
Subject key identifier: 33:10:3A:A2:C7:51:98:EA:BB:71:F9:5E:36:C3:28:25:66:2B:70:26
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848906AB4608853869FAC418040
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4ce21b84-7ee2-3847-8f8d-421cc0e53ee1.roa
Signing time: Thu 16 Jan 2025 13:38:17 +0000
ROA not before: Thu 16 Jan 2025 13:38:17 +0000
ROA not after: Wed 16 Apr 2025 12:38:17 +0000
asID: 396588
IP address blocks: 2001:502:1ca1::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:6a:b4:60:88:53:86:9f:ac:41:80:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 16 13:38:17 2025 GMT
Not After : Apr 16 12:38:17 2025 GMT
Subject: CN=3896cc44-1c3b-48ba-b416-d7f81614fd50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8f:c0:bd:a3:63:5a:de:40:7d:d2:45:6d:ca:
07:9a:fd:2c:2c:67:46:98:be:4d:bf:e8:76:6d:c3:
97:fb:c4:4c:97:1c:57:13:83:63:27:51:d4:e9:1e:
23:a4:2e:03:05:6f:45:c9:32:e7:ea:cc:26:a0:b1:
2d:cc:44:13:00:63:f6:2a:47:ff:c4:c9:8c:92:b1:
f2:a2:ef:1b:12:ca:15:6e:52:51:91:7d:a8:a6:11:
c4:83:f6:e6:b7:36:1d:85:d2:77:a8:55:6d:94:ab:
05:ee:8a:f1:2e:bf:7a:a0:99:34:9f:b6:18:66:c3:
52:0f:d3:36:41:da:54:c8:ea:c8:91:f4:cd:b8:94:
4c:4a:5d:2e:68:39:cf:1f:34:c0:17:f6:80:58:bb:
48:3c:25:59:aa:0a:ec:b2:82:a1:f4:e6:1d:31:3d:
6a:79:03:c9:fd:9f:74:df:7d:09:02:70:0f:b4:1f:
7d:7a:8d:84:a6:e3:7b:38:b5:00:13:e7:ed:4f:97:
37:f9:98:0d:f7:09:64:42:f5:15:7e:10:a0:6f:80:
56:f2:93:a5:02:82:54:63:ef:be:64:0f:af:04:17:
a9:54:ee:d8:4b:88:ea:e3:bc:54:86:3b:4d:0e:aa:
d7:b9:35:5f:fc:3b:ef:3d:1f:cf:e1:af:0a:37:33:
0a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:10:3A:A2:C7:51:98:EA:BB:71:F9:5E:36:C3:28:25:66:2B:70:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4ce21b84-7ee2-3847-8f8d-421cc0e53ee1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:1ca1:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:a8:b0:57:60:d9:a3:e5:fd:d2:ae:e6:df:33:1f:19:53:c4:
e6:06:c6:9a:8f:a6:3d:b8:11:9e:c7:85:24:27:81:40:65:da:
e9:66:32:84:2f:5a:c4:38:00:e3:fd:6d:e2:5d:a6:ff:0d:3c:
a2:2b:bf:2a:fe:aa:13:d2:54:31:9d:32:8d:73:5b:7b:53:cd:
87:46:cf:60:6a:79:16:7f:55:23:ca:94:fe:02:56:ea:b4:d6:
60:da:64:6f:b3:b0:92:86:59:66:b1:2d:70:d6:e1:b9:a0:c6:
dd:e4:bb:3c:a0:a3:2d:50:7b:53:f9:4e:b3:39:cd:a0:76:6f:
52:6f:30:4f:d1:d1:79:4e:6d:b5:9f:95:cf:29:6c:43:ad:dc:
85:0a:50:8c:78:9f:fc:22:47:b1:74:0e:9e:07:81:38:0b:d7:
1b:bb:6d:97:bd:cf:0b:37:50:8a:3e:9f:9e:7f:29:bb:b5:f2:
3b:92:dd:62:91:6a:a2:94:44:62:df:76:ce:2e:4b:30:ff:da:
41:cd:cf:f3:2f:dd:88:66:4c:6a:c4:e3:b9:1e:da:3e:f5:0b:
60:7d:71:c5:82:c5:26:3e:a9:56:69:73:b4:0c:5f:f7:07:3b:
83:05:c4:a0:fd:3f:8d:75:47:bd:d6:02:32:78:54:80:02:06:
54:78:6c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:03:55 2025 by rpki-client