Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a3fc415a-b800-397d-9956-3558e1562447.roa
File: a3fc415a-b800-397d-9956-3558e1562447.roa (raw, json)
Hash identifier: xVEGv4psumxoW7atYT+mGBOWBLLFgEzOYDdLbxuz+28=
Subject key identifier: 06:29:DD:D0:E6:62:EA:86:3A:FA:19:9D:80:0D:8D:20:26:A0:09:4F
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848A3F57F4AD7ED6F0D3FF00D40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a3fc415a-b800-397d-9956-3558e1562447.roa
Signing time: Thu 23 Jan 2025 13:38:18 +0000
ROA not before: Thu 23 Jan 2025 13:38:18 +0000
ROA not after: Wed 23 Apr 2025 12:38:18 +0000
asID: 397204
IP address blocks: 2001:501:b1f9::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a3:f5:7f:4a:d7:ed:6f:0d:3f:f0:0d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 23 13:38:18 2025 GMT
Not After : Apr 23 12:38:18 2025 GMT
Subject: CN=77890eba-0d5b-4c45-a795-746d72a9b7ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b2:bf:5b:36:51:e0:6b:c2:57:f8:1b:a7:75:
71:4e:95:40:e4:ea:4a:53:1d:57:cb:52:c0:cb:de:
98:91:e2:e6:06:de:a4:d3:48:9a:2b:4e:ae:03:1c:
b3:75:9a:74:3b:98:d9:6d:05:b9:1e:cb:f3:87:77:
ab:97:3d:15:35:5d:87:d7:66:be:bd:e6:dd:8b:94:
d1:50:e8:83:bc:cc:f0:24:32:9a:33:94:69:00:f9:
59:7b:20:1e:d5:3f:39:03:b5:73:c2:f4:2a:1b:64:
60:8e:f8:46:83:65:d4:ae:f5:d2:87:d1:7c:8c:c2:
f5:cb:f4:49:db:41:a5:7b:4b:31:86:16:e4:31:16:
cc:a7:74:43:70:09:51:9d:91:30:ee:0d:21:4a:28:
0e:36:94:84:95:fe:4a:e0:59:01:7f:98:64:eb:5a:
08:21:28:f2:7d:95:df:54:cc:fe:70:d3:3c:0b:2b:
bc:7e:29:00:ae:49:37:07:6f:f0:01:cc:e4:78:a5:
7a:79:e5:39:97:6f:22:5a:a2:89:a5:a4:bf:e7:64:
b4:40:3d:2b:31:99:8d:67:ae:f4:8e:7b:84:47:ed:
af:7b:11:a4:8d:11:fb:65:60:91:7f:f7:9b:13:8b:
7d:89:46:1f:3a:db:7b:f1:90:79:9f:9d:2c:54:91:
64:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:29:DD:D0:E6:62:EA:86:3A:FA:19:9D:80:0D:8D:20:26:A0:09:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a3fc415a-b800-397d-9956-3558e1562447.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:501:b1f9:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:b8:e7:5a:88:1f:99:28:8d:b5:b3:43:db:d5:fd:0b:ab:d8:
65:f0:45:34:6f:25:40:af:a9:86:b5:9a:f6:f2:5b:40:e3:1f:
09:3f:c6:36:f0:8b:40:22:41:90:84:21:29:48:ff:29:8c:b1:
a0:e1:6c:dc:38:c8:d0:09:74:6f:e8:ac:2d:5d:a4:e0:3e:6b:
01:3d:0a:98:58:2a:2b:8e:39:32:78:12:0c:7c:ac:b0:ee:1c:
41:db:f7:51:ff:ec:ac:b4:20:36:68:25:3d:b9:bb:0b:a6:c7:
e1:d8:16:37:66:a9:35:a8:35:75:6c:80:3a:28:ff:ba:9d:50:
87:7c:db:97:02:0b:e4:df:b5:97:1f:7c:40:38:83:05:6f:e8:
11:74:5e:06:13:1d:5d:85:e4:b9:a8:8c:8e:cc:a4:4a:d2:f3:
0d:06:f9:6a:e9:59:c9:12:cc:56:25:bc:02:cb:04:64:9b:ae:
fb:8a:44:46:eb:5a:91:1e:eb:8a:e7:38:e8:78:bb:0b:d1:2b:
78:da:5f:2e:34:1b:44:a4:1d:69:51:46:86:d2:d7:54:23:6a:
0a:03:a0:79:35:75:de:71:05:4e:a6:77:97:f6:72:84:ce:3b:
70:60:40:76:eb:87:a0:d7:e7:c1:45:07:ea:03:5b:93:ff:6f:
59:19:08:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:32:39 2025 by rpki-client