Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/78171ad1-f9d2-3d39-b9c1-057e41a6dba8.roa
File: 78171ad1-f9d2-3d39-b9c1-057e41a6dba8.roa (raw, json)
Hash identifier: UpDSLNZQsZhxc8GwceJMhcJz5jx9FEIwJ5Idg0L6/Yk=
Subject key identifier: 92:F4:AF:58:75:64:57:39:25:3E:8B:DA:E3:00:28:A8:D3:CA:F7:6F
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858488DAB77346889EA045AFBB700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/78171ad1-f9d2-3d39-b9c1-057e41a6dba8.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 396579
IP address blocks: 2001:500:7967::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:77:34:68:89:ea:04:5a:fb:b7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=6cb5d581-6cf8-4f0b-984d-f479a57e1204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:86:39:66:94:63:b1:82:45:ad:e1:72:e1:63:
b8:25:2b:dd:c7:04:d3:ff:4b:fd:86:28:df:b2:7a:
e9:92:d4:d4:0a:8f:87:56:ee:07:a6:11:3d:32:a1:
eb:c9:95:78:a9:20:93:a5:c9:f5:81:b4:67:f6:3b:
1b:6e:0d:70:00:ba:6d:91:0f:da:3c:77:d0:0f:2b:
4a:48:c2:51:c8:8b:08:f5:34:47:d3:36:36:97:54:
75:8a:dc:41:00:63:d0:13:33:f0:55:5b:17:60:d3:
e4:12:86:d0:09:1d:b7:7f:d5:61:6c:d4:5f:ef:fb:
01:cf:93:37:99:3c:dc:f7:8f:4d:7e:c2:6b:96:42:
2f:3c:a7:9b:7a:a1:cb:fb:f4:37:06:10:37:82:9d:
ec:fa:c2:e8:47:da:47:67:38:b5:52:62:02:aa:c3:
66:31:fb:8d:7a:f9:d9:98:96:73:dc:62:38:81:a1:
a2:1c:93:f3:18:c0:a5:8b:8b:56:46:a8:18:0c:11:
88:0d:08:3a:11:ff:1e:f8:5b:30:59:56:cb:4e:21:
ec:d0:ad:42:42:53:ed:68:0b:a3:81:6a:fe:bf:c4:
fb:ff:b0:22:b2:ea:dd:31:69:de:ef:e5:00:20:0a:
7d:74:5d:6b:5c:7c:26:9c:9a:1d:fd:8e:d1:bc:8d:
94:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F4:AF:58:75:64:57:39:25:3E:8B:DA:E3:00:28:A8:D3:CA:F7:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/78171ad1-f9d2-3d39-b9c1-057e41a6dba8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:7967:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:ee:33:1e:da:69:4d:f5:f1:ec:21:d2:70:20:ba:e0:88:4b:
ba:88:75:ae:1d:d3:c0:1d:6a:0f:67:91:cf:14:13:70:b2:b1:
8d:63:88:d9:0e:49:9a:c4:04:7c:57:9d:ae:6c:0f:9b:b3:9a:
7b:ab:8f:88:92:c3:80:71:8e:18:0c:68:a9:d6:ba:46:ca:32:
85:89:f7:e2:3d:91:a3:41:f4:ce:85:cb:e2:ed:73:d4:ba:a9:
a1:f3:81:3f:19:7d:4f:03:0f:01:0c:12:aa:f8:2e:91:9f:4e:
8d:70:fe:12:40:77:03:c1:f5:1f:0d:b4:33:55:72:c4:c7:9d:
cd:1a:e1:d0:9f:e1:2e:3a:9d:9a:95:51:70:23:e1:09:8d:be:
ed:b3:d5:bd:79:f2:3f:8c:c6:56:db:df:b4:d9:03:1a:ce:36:
db:89:d4:07:33:8e:cc:72:ce:52:dc:a0:85:b2:86:ab:9c:3b:
a1:7f:f1:bf:36:93:35:d8:09:5e:c1:1c:5c:68:60:21:88:9b:
ba:28:a3:3b:86:8a:a4:eb:b8:a1:01:7a:e5:db:cb:37:63:03:
a9:44:97:6b:96:f3:62:fd:21:4c:c6:8f:4b:72:8a:bf:4d:94:
9e:27:dc:0d:fb:5d:09:ed:98:81:12:cb:e2:ce:dc:e2:ed:dd:
78:e9:27:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:44:04 2025 by rpki-client