Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af006414-146d-3168-ada3-80b1763f02fa.roa
File: af006414-146d-3168-ada3-80b1763f02fa.roa (raw, json)
Hash identifier: 6tKzCvmJ4BtHRgLfzh48p3e7qzNa76XrVf4ugRMZGcI=
Subject key identifier: 2B:53:81:38:0E:57:39:AE:C0:CF:62:C0:A5:AD:43:BB:15:34:D3:CB
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489BA0BD1C04F3351CEAD91710
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af006414-146d-3168-ada3-80b1763f02fa.roa
Signing time: Mon 20 Jan 2025 14:00:51 +0000
ROA not before: Mon 20 Jan 2025 14:00:51 +0000
ROA not after: Sun 20 Apr 2025 13:00:51 +0000
asID: 396547
IP address blocks: 2001:500:30ff::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9b:a0:bd:1c:04:f3:35:1c:ea:d9:17:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 14:00:51 2025 GMT
Not After : Apr 20 13:00:51 2025 GMT
Subject: CN=2b790c9e-ac27-4d39-a760-2face6536719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6f:a1:45:62:d9:85:41:e7:ec:3f:64:3c:57:
b5:64:59:be:16:d8:59:8b:82:b4:16:32:bc:1a:90:
99:d8:82:88:17:d6:95:48:e0:53:00:5f:1b:8f:b3:
31:75:1c:79:90:2d:b5:ad:7c:60:ec:8f:37:61:81:
eb:88:cf:fd:ab:d4:57:0c:66:8f:af:68:1b:f7:bc:
2e:f0:e9:55:98:53:00:e9:16:df:74:7e:3f:fc:b8:
f0:01:a1:52:0e:3b:7d:80:04:1b:81:a0:16:b7:90:
f7:65:7b:d2:86:fd:16:50:75:6e:e1:05:27:a3:6a:
62:ce:1e:7e:51:6e:16:2b:cb:ed:f4:ad:52:26:71:
d6:9a:2b:53:29:4b:5b:88:e2:6d:f3:b0:5b:ea:76:
ae:3b:eb:ad:31:60:ba:05:bb:b7:7c:f9:7b:9c:56:
c4:bb:1d:a4:9c:c6:0c:55:9c:c3:5d:3c:3d:52:1f:
85:de:5c:e5:71:d6:e2:96:4b:80:28:92:35:c8:18:
c9:23:dd:06:68:42:31:e8:98:5d:ac:67:5f:92:ab:
68:a3:94:ed:a6:1e:9a:61:52:8a:cf:c3:f4:1f:e8:
4e:49:6e:bc:12:35:33:08:65:a1:40:e3:85:fd:a6:
83:a1:d9:a6:2f:ce:04:4e:bd:92:dd:b4:b7:83:17:
d4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:53:81:38:0E:57:39:AE:C0:CF:62:C0:A5:AD:43:BB:15:34:D3:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af006414-146d-3168-ada3-80b1763f02fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:30ff:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:48:22:48:fc:13:ca:0c:9f:86:85:4c:0d:13:fb:ee:f4:6c:
78:63:cc:3c:72:b0:0c:95:b7:5e:53:87:9f:10:81:bd:9a:35:
30:73:f3:c5:b3:01:97:6e:90:22:1c:78:ef:a7:03:f4:0f:37:
49:5e:71:2d:6d:b4:d2:b0:06:da:96:b5:b2:42:ea:a2:6c:80:
fd:8b:9c:5a:80:7a:13:4f:76:4a:6d:7f:2a:8a:5b:ac:4d:ca:
f7:be:d2:18:2d:7b:ba:28:52:fe:7a:86:dc:9e:3d:10:95:d5:
9b:2a:02:c6:42:a4:b8:e6:a7:ef:ec:ce:b9:46:e7:45:9f:2f:
1f:f8:72:de:2a:47:73:b7:1a:b3:b0:9a:cd:7e:23:2a:fa:d8:
d3:74:a8:cf:b6:d7:bf:38:a7:e8:04:36:94:36:2f:e8:0d:d1:
52:e0:2f:41:63:9e:14:08:8f:93:e0:2d:d1:8d:1e:b5:46:ba:
38:91:e8:e2:4e:0f:96:17:66:22:b2:62:ea:5c:68:53:7f:89:
0f:c8:80:32:5a:28:cf:61:60:ff:b2:bc:73:05:68:35:e5:82:
0d:69:53:64:ac:19:7a:07:75:3c:0d:77:2c:87:33:82:66:9d:
0e:6c:19:71:49:7c:ab:57:f8:8a:2d:8d:6b:31:71:aa:b3:7c:
20:56:80:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:57:44 2025 by rpki-client