Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9acf128-8e6a-3ad9-9ac2-b677883e8c01.roa
File: a9acf128-8e6a-3ad9-9ac2-b677883e8c01.roa (raw, json)
Hash identifier: sUS49nTpHWFk6Fzlcv8PeGFgudgL5J50t8BQVfZfHYI=
Subject key identifier: C0:10:AC:3E:CC:6B:5F:F1:E9:53:74:31:7A:32:E8:70:AF:22:1F:67
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848906AB5E4AECB529F0E134E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9acf128-8e6a-3ad9-9ac2-b677883e8c01.roa
Signing time: Thu 16 Jan 2025 13:38:18 +0000
ROA not before: Thu 16 Jan 2025 13:38:18 +0000
ROA not after: Wed 16 Apr 2025 12:38:18 +0000
asID: 36620
IP address blocks: 2001:502:1ca1::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:6a:b5:e4:ae:cb:52:9f:0e:13:4e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 16 13:38:18 2025 GMT
Not After : Apr 16 12:38:18 2025 GMT
Subject: CN=da9c029e-ee14-4c11-bba4-0682cd73bc9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6d:08:04:69:55:71:e9:da:62:41:c0:f3:99:
43:38:7a:f2:fe:56:dc:df:93:4a:b7:32:1d:9e:47:
ad:89:d3:af:6e:aa:66:a1:02:2b:62:44:34:2c:4d:
3f:52:4b:49:c8:c2:e2:c6:da:48:6a:b1:05:ea:a3:
95:7b:dc:fa:3f:28:14:e3:48:32:15:17:3f:11:96:
9d:a3:f9:3a:a3:90:cd:f8:be:b3:da:ae:72:0b:2a:
64:05:0f:14:0b:59:77:92:80:62:b0:dc:54:29:48:
1b:59:53:e8:88:d4:a6:75:87:98:55:23:02:89:cc:
64:71:7a:36:93:2d:6b:ea:b1:46:b3:f7:70:e1:e1:
fc:31:58:98:bb:2e:18:06:d1:18:62:c7:48:d6:3a:
be:68:24:70:0a:85:bd:72:7d:b9:e7:58:2c:73:35:
1d:9e:b0:ec:68:63:2f:5b:8f:1a:98:d1:e3:a4:b2:
e2:ca:7f:9f:98:4b:4b:a5:44:df:4a:57:ca:c6:7d:
4a:e2:ff:6d:27:e2:27:72:46:f6:ef:15:8e:53:b6:
59:59:23:f4:f9:b5:37:d0:99:0a:a1:7c:dc:aa:d7:
91:97:75:89:70:cc:e6:1b:a0:79:5c:64:0f:52:c1:
a0:77:de:68:82:e9:eb:10:f7:b1:2b:77:07:8c:80:
e1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:10:AC:3E:CC:6B:5F:F1:E9:53:74:31:7A:32:E8:70:AF:22:1F:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9acf128-8e6a-3ad9-9ac2-b677883e8c01.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:1ca1:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:79:f0:63:71:4c:92:e2:42:83:c9:91:c3:d7:ec:9f:d6:6b:
f3:19:f9:b1:df:f4:30:31:a1:77:a1:da:11:ca:ab:e1:f1:23:
74:80:93:61:9e:c8:b7:98:3f:b4:e9:88:1e:af:a2:4c:83:ba:
37:a0:65:a4:39:d6:9c:c7:72:f5:9d:91:f7:2f:c3:9f:1f:82:
33:10:1f:77:ec:35:02:c3:00:12:36:62:77:2d:0c:ef:1a:e1:
bd:cc:24:08:a4:92:74:29:00:28:64:a4:20:77:49:56:af:48:
3a:db:f3:1a:e1:c1:6e:5d:3d:44:2c:0d:32:a0:a8:62:12:e3:
0f:b8:cd:41:13:5b:0c:ab:de:77:15:cc:b8:43:b7:28:a7:39:
9c:aa:98:63:ce:73:3e:58:b5:35:a8:86:28:79:1e:8d:84:eb:
00:cd:b6:52:89:ed:03:0e:e5:be:54:56:8c:8f:e5:0f:ce:8a:
3d:6a:c2:09:5b:9d:0a:49:26:05:64:00:05:27:b0:e3:96:79:
f5:b6:74:e5:e8:66:5d:de:12:b6:3e:e2:c4:6c:3d:1f:4b:de:
23:89:7e:40:31:87:36:28:ec:aa:2b:00:6a:32:7a:a8:9e:d1:
91:99:08:4c:c3:f3:ef:76:65:54:ad:b7:21:d5:db:af:57:6f:
e4:36:bf:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:11:37 2025 by rpki-client