Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/98b1a606-ab1a-3c9c-9d9a-7c3b6a45f42d.roa
File: 98b1a606-ab1a-3c9c-9d9a-7c3b6a45f42d.roa (raw, json)
Hash identifier: igyduHeFU7TGyB95xt6YG0/4Qpmky8uhKu1/+omdDUc=
Subject key identifier: 0C:43:D0:11:D9:02:26:95:54:98:73:9D:51:7F:61:79:15:93:67:FA
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848906ABA20566981F272564600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/98b1a606-ab1a-3c9c-9d9a-7c3b6a45f42d.roa
Signing time: Thu 16 Jan 2025 13:38:20 +0000
ROA not before: Thu 16 Jan 2025 13:38:20 +0000
ROA not after: Wed 16 Apr 2025 12:38:20 +0000
asID: 397207
IP address blocks: 2001:502:1ca1::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:6a:ba:20:56:69:81:f2:72:56:46:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 16 13:38:20 2025 GMT
Not After : Apr 16 12:38:20 2025 GMT
Subject: CN=12b2e402-a363-4a71-acfd-7df5a7a2c951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:e0:a9:00:9a:d5:d3:d2:25:0c:54:20:c2:97:
41:b0:21:b1:f6:5d:a5:d9:72:09:eb:d3:62:87:41:
5f:d3:64:39:35:4c:e8:ff:4e:83:09:8e:3e:c0:ef:
dc:69:b8:9f:e5:60:20:d8:3d:c2:74:a5:d3:fa:d8:
7f:ae:a9:24:f2:c6:c5:14:8e:dc:65:ff:b0:f8:50:
59:be:e0:36:e7:d2:41:fb:14:95:b8:30:9c:a0:86:
8c:34:51:40:04:45:17:b7:5b:ad:8b:ad:62:2f:c6:
8b:03:88:8a:5a:1e:e5:fd:99:25:40:55:70:7b:cc:
bd:fa:4a:ee:16:6f:55:45:7f:bc:13:d2:6b:17:aa:
50:a0:22:a7:99:76:65:ee:15:7e:59:b5:01:4f:77:
51:da:dd:e7:38:cf:d6:23:83:c4:ee:ac:ec:9c:b7:
41:75:5f:03:1b:5c:63:e9:db:6a:e6:0d:dc:32:37:
57:32:5c:5b:ce:cc:c5:06:60:cc:eb:34:06:05:04:
a8:09:e2:53:fb:64:87:8f:66:19:bb:bb:ae:39:76:
6d:3a:3e:e3:9d:08:c8:9c:e0:84:4d:18:29:2a:86:
ee:10:1e:0b:d3:31:dc:2c:f7:87:49:3d:6b:1a:21:
4e:ed:97:fa:ae:ce:56:b8:96:4e:58:a0:9d:c4:a4:
55:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:43:D0:11:D9:02:26:95:54:98:73:9D:51:7F:61:79:15:93:67:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/98b1a606-ab1a-3c9c-9d9a-7c3b6a45f42d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:1ca1:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:5d:7d:93:d9:7b:dc:7a:c6:a8:a2:5a:b9:e6:4a:17:dc:99:
da:1a:72:ba:24:07:d2:c2:ae:3d:d7:5a:0e:92:31:be:dc:85:
76:80:31:70:2a:37:e9:46:ec:82:99:00:03:17:cd:e3:24:9f:
a2:da:2e:9e:2a:e8:5d:5b:39:2c:2a:df:93:68:df:ed:aa:7f:
54:ee:2f:4f:93:73:c5:ab:99:70:8a:55:c6:63:54:db:8b:b2:
b1:09:4f:7d:42:f3:70:16:df:c5:36:5b:eb:7d:7d:bb:b9:ca:
15:96:60:ef:0f:14:bd:41:53:92:ba:b8:20:05:22:60:c1:92:
71:bc:da:e6:45:bf:51:5f:1c:bf:f8:30:23:48:0e:9f:2c:bb:
3f:c9:bc:76:54:79:41:74:68:99:3b:d1:bf:cd:b5:91:5e:76:
94:dc:61:42:ed:9e:a3:b5:cc:38:25:a2:3b:61:4a:4b:fe:57:
a5:f6:e5:de:ee:58:81:22:bc:f7:50:5f:36:80:f5:a6:af:80:
05:e3:cf:8a:ca:91:11:37:d2:c2:49:a7:9d:04:cb:2c:72:02:
97:fa:1e:0d:e3:18:5b:70:01:78:7a:1d:bb:9a:c9:49:d6:29:
46:9e:69:4d:61:a1:f1:2a:3e:30:8c:e9:6e:df:5e:b5:f1:25:
6c:b7:17:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:52:08 2025 by rpki-client