Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/835546e6-5669-3952-ba0e-a5e15c609c88.roa
File: 835546e6-5669-3952-ba0e-a5e15c609c88.roa (raw, json)
Hash identifier: M2DQhml+Q5wkHPaG0lZmKyCxfXyjXntKDoKqDk8fggI=
Subject key identifier: 3B:EE:04:AB:FB:9F:B9:10:54:B7:9D:55:68:BE:6C:C0:82:EB:D9:AC
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848906AB9E3A7ADD3A169A06A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/835546e6-5669-3952-ba0e-a5e15c609c88.roa
Signing time: Thu 16 Jan 2025 13:38:20 +0000
ROA not before: Thu 16 Jan 2025 13:38:20 +0000
ROA not after: Wed 16 Apr 2025 12:38:20 +0000
asID: 396553
IP address blocks: 2001:502:1ca1::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:6a:b9:e3:a7:ad:d3:a1:69:a0:6a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 16 13:38:20 2025 GMT
Not After : Apr 16 12:38:20 2025 GMT
Subject: CN=3e737ca7-2e10-4f43-ae01-d3aaddb3422d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:34:83:46:30:ed:9e:16:ed:58:33:fa:2b:64:
77:9a:69:c9:c0:34:20:71:d6:c3:cc:bb:18:ec:28:
13:e1:fc:f7:d7:fd:e1:7e:c7:32:7b:d2:de:1c:14:
bb:04:83:68:9c:3c:49:40:e4:f4:47:c8:24:56:f7:
a0:4c:ae:0c:b6:1e:b4:57:70:03:af:a3:ad:d1:af:
6d:ff:83:7d:90:98:73:1d:20:c4:cd:b5:77:2a:3f:
6c:1c:e2:98:d3:7f:00:18:b5:83:84:13:62:c1:95:
61:54:49:41:2a:fd:9d:77:50:56:31:18:20:d5:e8:
b0:b2:60:91:46:78:48:56:cb:ef:a1:15:56:fc:3a:
de:81:a8:f0:e3:ed:5e:9c:7e:00:01:a0:d7:6c:9b:
bc:9a:fd:42:e3:17:f8:b3:8a:94:87:29:c7:52:ca:
ee:dd:9c:4b:a3:95:08:d4:d7:3b:1f:e1:a9:57:dc:
9a:1e:6a:7b:0c:44:c3:b2:93:f5:86:3e:fa:ac:5a:
b5:30:06:33:9d:a7:46:e6:79:1f:3e:73:06:e2:f1:
f5:92:d1:dc:2e:7c:75:f0:76:30:2e:48:5e:7d:90:
f6:7f:22:b3:81:36:aa:63:19:8e:60:d5:b6:d7:ca:
e7:6b:f3:e4:0e:b6:84:60:f0:a5:96:bb:97:a6:2a:
2b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:EE:04:AB:FB:9F:B9:10:54:B7:9D:55:68:BE:6C:C0:82:EB:D9:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/835546e6-5669-3952-ba0e-a5e15c609c88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:1ca1:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:d4:28:f1:ef:ab:dd:66:d0:31:78:b0:25:2c:2e:7d:97:f2:
ef:d2:17:a6:a1:27:56:b3:05:b4:9e:b0:b4:21:7c:04:fc:6d:
df:16:64:be:c7:8e:ad:89:eb:3d:3d:b4:7a:4b:8b:0e:b4:25:
8a:f3:83:de:09:58:44:70:6f:e3:ad:5c:55:dd:68:38:89:99:
9b:7b:67:cc:6a:30:b4:85:d7:57:cf:62:0e:4e:ac:b9:f4:95:
c3:6c:d5:c3:1f:04:c7:4c:ab:91:e8:a3:61:28:db:c0:8a:81:
52:b8:5d:dc:29:72:a5:d6:ce:87:73:71:7e:0c:34:3a:06:dd:
b9:26:fd:a3:3f:cd:d2:ce:4e:69:2d:e3:a4:dd:e2:9f:80:be:
ea:36:4b:58:7f:fc:ba:a3:64:72:1d:48:28:5b:a1:75:4a:78:
ef:a3:d6:65:2c:9e:c1:39:eb:c2:0d:af:2a:58:54:3d:77:2a:
2f:90:2b:70:79:a9:f7:b5:53:1c:81:02:cb:f7:5a:92:bb:5c:
50:44:eb:d3:85:9b:55:3a:8e:1d:1f:99:14:01:77:42:e7:47:
37:cd:25:5e:a8:84:c8:df:3e:56:b8:95:39:52:75:4b:aa:4c:
69:e1:32:26:38:df:92:b9:ad:2a:87:f1:51:7d:62:93:7b:00:
27:4d:b2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:28:21 2025 by rpki-client