Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9594f358-7f5c-3593-83f6-5fa15e1f6d31.roa
File: 9594f358-7f5c-3593-83f6-5fa15e1f6d31.roa (raw, json)
Hash identifier: hU39g6pnRXs/q+1yHpooehyKgZR93QEvWa2jSyHiqWI=
Subject key identifier: F1:20:52:65:40:C0:F7:DD:80:2D:13:1D:67:8A:02:F4:8C:A8:20:A3
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489BA0B8F7B6F29719EBA29B80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9594f358-7f5c-3593-83f6-5fa15e1f6d31.roa
Signing time: Mon 20 Jan 2025 14:00:51 +0000
ROA not before: Mon 20 Jan 2025 14:00:51 +0000
ROA not after: Sun 20 Apr 2025 13:00:51 +0000
asID: 396580
IP address blocks: 2001:500:30ff::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9b:a0:b8:f7:b6:f2:97:19:eb:a2:9b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 14:00:51 2025 GMT
Not After : Apr 20 13:00:51 2025 GMT
Subject: CN=c9b6cfd4-b599-4aea-a576-58713f5dc966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:cc:1d:26:b1:41:6b:81:0f:23:45:10:25:89:
89:83:83:69:09:50:44:8a:70:f7:8b:71:17:4d:12:
93:9f:1e:d6:68:20:78:be:09:ff:04:58:a1:55:6b:
20:35:eb:ab:ba:00:ea:d4:07:2d:9e:0e:85:2b:26:
0b:b3:33:8c:a7:69:0a:ae:cf:28:b6:ce:fa:d8:d0:
b0:7f:e1:b8:db:fa:55:e5:86:11:01:59:47:17:c3:
23:36:a4:3b:df:9e:03:80:6a:74:df:1f:73:32:80:
0c:51:de:3e:4a:b9:ba:d0:5e:8a:1b:02:20:a1:eb:
5f:dc:1d:86:80:34:91:33:4f:71:6f:8b:89:9d:69:
4f:8d:e5:88:d3:9e:0a:f7:db:c4:7d:92:94:8d:1c:
23:ab:0b:d5:65:28:40:f7:38:89:53:6f:38:79:01:
56:00:9c:32:11:ec:31:3d:b4:5b:ce:06:68:b2:d7:
a8:b1:87:e6:91:e6:0f:c7:97:fc:dd:40:a7:03:04:
77:38:c4:3d:ae:41:e9:99:34:0b:5a:ed:d8:e3:c4:
e0:0c:d7:85:98:67:1f:a6:4a:6d:c9:88:5d:26:d0:
ae:ff:36:c2:91:cc:f0:03:8e:b3:9c:3b:2c:a8:85:
0c:0d:e1:87:cc:9e:46:57:08:1d:a8:e1:80:89:33:
cf:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:20:52:65:40:C0:F7:DD:80:2D:13:1D:67:8A:02:F4:8C:A8:20:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9594f358-7f5c-3593-83f6-5fa15e1f6d31.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:30ff:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bb:31:72:e5:e2:73:3b:52:bd:d7:e5:e1:de:5a:21:94:f4:16:
3c:5e:07:a6:6a:fc:91:28:cb:e0:c6:e3:c9:58:39:0f:95:24:
78:dd:52:14:4b:3c:37:d2:c3:ca:82:46:40:d1:88:3f:7b:38:
39:72:f0:6f:2f:85:31:72:f1:6d:c8:ad:24:7c:92:e3:a5:eb:
76:79:a5:8f:18:5e:c6:a1:e1:e6:e9:5c:38:9e:ea:ba:cb:44:
3d:31:56:10:1e:c1:76:24:bc:d3:e9:b5:2b:9c:27:94:67:f8:
82:6b:75:31:ca:10:f0:63:2f:5a:a2:12:fc:82:38:b3:c4:c6:
23:c9:bf:c7:36:cd:bc:97:2d:fc:0f:01:5e:d5:df:68:3e:d0:
08:a8:14:89:91:4b:98:f6:3e:1a:53:6c:1b:27:7a:e2:6e:04:
6e:4b:02:f5:0c:74:bb:a6:9a:58:a6:95:7b:4d:4e:05:25:2b:
8b:58:f8:62:91:e9:7b:9a:bb:ae:c1:5a:78:c5:b3:53:b1:bc:
86:b7:75:75:62:04:e9:b8:3f:51:35:66:21:78:de:85:e8:8e:
cf:fe:d8:ed:6f:ee:4c:d4:06:92:9b:3e:80:41:15:03:97:6d:
89:e8:0d:42:05:73:50:59:c7:dd:14:d0:78:3a:d0:12:b4:5e:
c0:cf:bb:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:26:20 2025 by rpki-client