Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/55e6e3a1-5ca1-3be3-8769-9386a6a35774.roa
File: 55e6e3a1-5ca1-3be3-8769-9386a6a35774.roa (raw, json)
Hash identifier: ey+9zzjVl82SRkIa556Upv9V85WT6cNeOpclVbJM6+A=
Subject key identifier: 5A:03:5A:47:35:3E:9F:E7:8F:AE:F9:AE:D9:61:D3:00:06:83:DE:1D
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489BA0B88320FB09F6B1C53720
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/55e6e3a1-5ca1-3be3-8769-9386a6a35774.roa
Signing time: Mon 20 Jan 2025 14:00:51 +0000
ROA not before: Mon 20 Jan 2025 14:00:51 +0000
ROA not after: Sun 20 Apr 2025 13:00:51 +0000
asID: 397196
IP address blocks: 2001:500:30ff::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9b:a0:b8:83:20:fb:09:f6:b1:c5:37:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 14:00:51 2025 GMT
Not After : Apr 20 13:00:51 2025 GMT
Subject: CN=a251267d-e7bb-4246-a645-ff65e1e26a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ae:4f:bb:05:e9:6b:45:f9:53:88:0e:f3:31:
af:ed:47:19:10:e4:0a:49:ad:08:32:61:fa:af:61:
11:68:da:d1:39:00:c2:c9:d2:a3:91:97:37:30:df:
24:a1:5a:e6:61:3b:1d:68:37:6f:59:4b:46:25:fb:
1a:db:bc:cb:32:61:83:d4:1c:d1:c1:05:c0:9d:42:
0d:29:19:ba:f5:db:97:d7:81:17:fb:15:82:3e:69:
9d:da:2b:41:6f:d4:63:6f:4b:80:ee:8d:93:57:aa:
04:b5:1e:a1:70:93:fb:81:cf:04:ca:93:92:91:b7:
4a:b6:37:be:1a:07:3f:6f:60:78:5d:e3:42:91:77:
e0:9b:8f:10:7b:e3:fb:06:71:25:ed:b3:a3:1f:e9:
41:20:ea:15:84:44:d9:a1:66:4b:99:80:89:58:63:
d0:52:93:12:3b:87:67:69:aa:0d:7b:88:40:6f:7e:
a8:1e:69:f3:9b:c7:39:dc:e9:b9:14:7f:e6:22:33:
34:59:e8:8f:74:be:a1:c6:6b:c3:37:03:85:31:52:
b0:dc:c3:aa:ca:bf:4e:2e:55:dd:0c:35:3f:f3:74:
51:82:7e:5f:b7:17:b8:da:c5:c9:02:63:be:f8:77:
02:2c:4d:98:ef:bd:8f:da:16:cb:f6:b2:d0:1b:21:
bd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:03:5A:47:35:3E:9F:E7:8F:AE:F9:AE:D9:61:D3:00:06:83:DE:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/55e6e3a1-5ca1-3be3-8769-9386a6a35774.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:30ff:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:22:90:7e:fa:29:b9:e4:4a:f1:3c:f0:b1:db:98:22:f2:ca:
98:af:be:04:a5:74:89:c4:9e:91:ca:9f:c7:fc:ab:67:e8:eb:
14:ad:df:de:f4:b2:4a:24:54:db:b0:e6:bd:0f:51:71:53:60:
b9:34:41:8f:2a:65:13:43:91:63:56:33:a4:e7:64:89:ae:21:
c8:33:56:07:3b:88:70:ec:a2:f8:80:8a:57:43:9d:54:02:38:
13:bf:a4:77:b9:fd:90:e4:3d:9d:9d:d9:7e:9b:88:94:f6:24:
fa:fe:a1:da:65:ca:98:c4:01:d8:7d:76:1c:e3:e7:aa:75:79:
98:95:b0:63:cf:84:b8:5f:3d:45:4e:3f:be:d4:25:8b:2b:04:
e4:4f:9a:04:29:ab:2e:17:95:98:af:3e:d9:f7:61:01:ee:5d:
e7:54:da:44:ca:3f:3b:95:19:6b:1c:fd:a1:b6:02:70:4e:15:
e6:3f:3f:bd:d9:d0:ef:00:64:45:44:70:8e:c8:52:ef:c6:dc:
57:fd:d8:5f:56:0a:51:aa:74:ba:bf:55:a2:89:06:6e:61:12:
1d:41:07:cc:01:48:f1:d4:3f:0b:cf:91:4b:2a:7b:5d:f2:1b:
ab:2d:9c:d1:f7:d3:0f:8a:9a:36:d8:93:29:9e:12:56:f6:ae:
7f:94:e7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:19:00 2025 by rpki-client