Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65b38a65-eb90-366e-956d-edb71209e5e8.roa
File: 65b38a65-eb90-366e-956d-edb71209e5e8.roa (raw, json)
Hash identifier: a5OUALdCwxzGerN0XNlCzBz/d9yoOiSuH7pmJ7HKI/Y=
Subject key identifier: D2:7D:E9:81:3A:CB:2C:F1:0A:AA:CA:2E:E8:94:92:83:C8:DE:70:79
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489BA0B7552B0FF9540274995A
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65b38a65-eb90-366e-956d-edb71209e5e8.roa
Signing time: Mon 20 Jan 2025 14:00:51 +0000
ROA not before: Mon 20 Jan 2025 14:00:51 +0000
ROA not after: Sun 20 Apr 2025 13:00:51 +0000
asID: 397212
IP address blocks: 2001:500:30ff::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9b:a0:b7:55:2b:0f:f9:54:02:74:99:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 14:00:51 2025 GMT
Not After : Apr 20 13:00:51 2025 GMT
Subject: CN=041718ac-804f-4e41-a38e-dcbeb2648f24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:9c:97:95:89:03:78:32:df:ff:ad:a7:76:f4:
36:f9:ce:c8:e9:c5:ac:5c:ae:c9:13:f8:ee:c8:88:
65:a2:b9:12:eb:74:79:da:84:4d:c5:5f:1b:ae:6d:
a3:00:9f:d8:d8:72:ac:5b:3e:31:d0:7d:e6:96:6a:
6b:b1:6d:3e:75:6d:c0:01:a4:07:b6:c3:4a:6b:88:
3d:ba:d3:c3:47:14:d3:b0:08:c5:84:14:c1:9f:7e:
0c:79:9a:e6:91:9a:28:dd:42:1f:76:c7:1f:70:0f:
7a:7e:44:7a:80:9e:e8:78:e8:32:19:d6:be:21:52:
34:9c:56:10:82:2e:37:f3:d8:1e:15:e0:46:60:32:
c5:5b:d6:af:c2:30:28:d4:aa:fc:3c:6f:32:a5:f5:
b9:70:8a:2e:c9:85:a9:d3:ea:92:2d:99:1d:b0:59:
06:8b:59:6f:95:86:3c:f5:85:0f:68:95:eb:76:86:
ca:e9:0f:fc:49:79:69:9c:22:32:4e:0a:55:c2:06:
bf:38:f1:b0:85:68:a0:cd:4f:e9:cd:30:e8:78:b5:
de:84:e5:88:fb:0d:25:58:d1:56:f3:aa:f1:e9:3f:
50:eb:0b:6d:e9:bf:a6:c0:64:7a:af:34:c0:1b:be:
44:6a:17:e1:55:4c:b2:9f:f5:ac:c3:ef:5e:4a:69:
94:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:7D:E9:81:3A:CB:2C:F1:0A:AA:CA:2E:E8:94:92:83:C8:DE:70:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65b38a65-eb90-366e-956d-edb71209e5e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:30ff:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:e1:b9:c6:a3:9e:6b:38:c4:3d:b6:71:cb:96:82:34:db:68:
30:ab:70:cc:a1:f5:62:e0:35:96:7e:6b:c5:3a:b8:63:39:25:
c2:ed:52:03:eb:de:40:69:de:23:74:03:c0:9f:2d:34:b6:68:
ec:13:f8:96:36:e2:ad:f8:51:e7:83:0d:d9:f3:7b:61:aa:f0:
a6:11:1d:74:fa:4e:04:a4:6e:c9:ba:1f:53:af:3a:45:58:74:
51:eb:2e:0c:92:aa:48:b8:f8:a4:2d:52:03:87:14:c5:71:5c:
b9:2b:c7:19:ee:62:0b:9c:cf:d9:16:3e:f5:9e:7f:a1:0a:c0:
b4:fe:b1:10:bc:de:ca:2c:28:7f:b7:0c:d5:e4:80:61:5f:43:
8f:2f:f0:c9:38:93:a2:d3:4f:c3:90:25:55:69:17:b1:3d:b9:
b3:e9:c8:04:ee:d3:37:b3:53:64:c3:fa:29:a7:37:f9:10:b4:
ae:08:04:2c:05:55:68:5b:c3:4a:10:84:66:89:1e:72:0f:90:
d6:f8:de:c4:32:c1:5d:bc:49:ce:46:f9:80:60:28:4d:a9:d9:
d9:ce:6c:64:4e:63:7c:e5:63:64:d6:d7:e1:81:7e:0b:08:4b:
7e:4b:bc:63:40:ec:51:3a:c1:81:26:a7:5c:1e:e1:83:dd:74:
89:8a:4e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:17 2025 by rpki-client