Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5a89986a-8b40-37a5-9b6b-bf931dff8dc1.roa
File: 5a89986a-8b40-37a5-9b6b-bf931dff8dc1.roa (raw, json)
Hash identifier: 2BKzEHA1ZpmvW4HuTknGzQcFPu0N2fjjRZfpmeM8vdc=
Subject key identifier: 18:40:E6:85:B0:24:60:A3:45:5C:44:03:8A:81:70:93:E3:9B:1F:EB
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858488DAB73DD7DBA7169340D5C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5a89986a-8b40-37a5-9b6b-bf931dff8dc1.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 396543
IP address blocks: 2001:500:7967::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:73:dd:7d:ba:71:69:34:0d:5c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=562ba30d-d875-436a-8887-955f15fe0b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6b:51:e8:0b:8e:57:32:ec:8d:30:99:e8:1d:
7f:a0:a2:81:e0:04:9b:17:8d:63:9d:8f:82:8b:bc:
63:fd:db:5d:81:99:e9:67:bb:ff:68:71:63:27:fc:
06:9a:70:f9:89:14:69:b8:79:4f:17:f8:e0:c2:e5:
5e:48:48:c6:c7:1e:25:e8:68:75:cc:f3:1e:6b:a2:
b9:62:7b:69:38:96:a6:f2:e7:7f:34:f6:e0:fa:7d:
16:c0:ce:0a:01:7f:e6:a0:ad:a2:32:e3:9a:0b:bd:
0a:3c:f3:56:dc:a9:8b:9d:4b:8e:0d:12:23:41:4d:
57:73:16:e8:0e:4f:e9:fc:ca:6c:56:3e:bd:d4:c3:
83:41:19:2d:1e:6a:19:f4:fa:a4:42:f4:f0:9b:69:
64:10:4f:f0:6f:0b:bb:1f:3a:33:73:76:90:0f:11:
20:6b:76:4d:79:7b:5f:5f:1a:67:5d:65:21:de:fd:
2d:c7:1f:88:0f:66:56:d9:1d:d8:f9:a0:61:ee:08:
d5:d7:3b:d5:25:6d:47:f7:ab:eb:1f:ab:68:59:97:
f4:9b:65:f8:59:2a:55:35:23:ac:8c:73:c3:01:f8:
98:1a:a3:e7:43:6b:e8:65:b4:7c:d5:61:9b:71:11:
fd:d4:8c:cb:17:b4:83:16:62:cd:b4:08:35:60:1e:
4f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:40:E6:85:B0:24:60:A3:45:5C:44:03:8A:81:70:93:E3:9B:1F:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5a89986a-8b40-37a5-9b6b-bf931dff8dc1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:7967:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:4e:9a:26:0e:a4:52:86:f2:05:d5:c8:dd:65:8e:65:a5:ee:
52:55:fd:02:9c:65:d6:19:94:46:e4:52:45:a2:5c:82:db:13:
ed:28:f2:78:c6:52:cd:a5:b5:a8:1f:74:25:ae:8b:f0:6b:ad:
8b:51:95:6a:c1:ae:15:c5:81:34:2d:06:ce:a9:e8:59:73:dc:
9f:6d:bf:51:6a:33:4c:1c:20:76:0b:e1:42:5b:90:75:63:bd:
f3:94:36:e1:47:6e:8f:49:e1:72:a2:09:2e:11:b3:9c:04:30:
28:5e:72:30:c6:4f:db:bf:90:89:31:f7:23:27:d4:31:b8:ac:
ef:8b:c8:de:65:bd:a2:05:8d:ba:26:77:98:b3:56:f2:c8:de:
7a:06:7c:aa:06:17:4b:c3:a9:d1:2e:ea:85:eb:de:2b:03:0e:
a7:39:46:39:02:17:0b:4a:6a:ef:09:51:05:b6:c1:40:71:db:
35:e2:d4:49:07:c5:a1:d8:79:21:79:cd:8a:fd:11:dc:b4:dc:
af:74:82:2c:8b:e6:bb:87:2f:2f:98:0c:69:6b:59:4f:07:2f:
7b:d7:b3:e2:12:28:13:1b:20:ae:3f:10:2d:73:df:cc:8c:69:
c3:03:99:7d:d3:94:43:32:2d:86:e5:8d:9e:20:a6:37:cd:f3:
12:bb:e7:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:17:21 2025 by rpki-client