Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b7e61e99-5a3d-3a97-9cf5-26c54e86d5fd.roa
File: b7e61e99-5a3d-3a97-9cf5-26c54e86d5fd.roa (raw, json)
Hash identifier: qeqCt7Ay98P06dnMEPuSJuoRib52Kxfl5GkdI925bLY=
Subject key identifier: 25:F0:72:3A:C8:89:28:F9:14:B2:0B:30:1D:AD:E3:48:5D:7C:90:BA
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848A3F58D57B64258434C42BB00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b7e61e99-5a3d-3a97-9cf5-26c54e86d5fd.roa
Signing time: Thu 23 Jan 2025 13:38:24 +0000
ROA not before: Thu 23 Jan 2025 13:38:24 +0000
ROA not after: Wed 23 Apr 2025 12:38:24 +0000
asID: 36632
IP address blocks: 2001:501:b1f9::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a3:f5:8d:57:b6:42:58:43:4c:42:bb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 23 13:38:24 2025 GMT
Not After : Apr 23 12:38:24 2025 GMT
Subject: CN=1323ab81-f629-4a80-b9d7-d6c3a1a4771d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b5:7d:34:06:b3:f0:34:ed:9e:61:f8:43:5b:
7b:86:25:8f:8b:93:54:cf:4e:c8:6e:e9:f8:eb:1e:
e7:c5:97:79:ab:9c:70:fc:b7:aa:60:e4:a8:fb:9d:
66:54:c1:c6:7c:67:09:73:7a:8d:33:65:62:04:89:
14:99:73:98:5a:6f:42:ca:49:fc:bd:82:97:80:4c:
fb:75:51:e6:65:22:25:87:b1:94:3b:e9:ff:a5:bd:
ab:b3:f3:cd:b6:ee:0a:b6:c2:61:fb:1c:62:27:9c:
97:ef:69:a7:aa:1b:c9:ea:e0:7e:9c:70:fc:8b:71:
75:9f:6f:3f:74:03:c7:cf:ac:5a:ae:c7:75:1b:a8:
80:ca:69:e3:51:5b:38:5d:33:42:e7:fb:35:4f:c4:
a1:d4:74:06:4d:17:5b:a2:eb:fb:a2:8d:91:65:54:
d4:ac:43:a2:c7:03:e8:90:62:61:ba:fa:6c:b9:50:
76:aa:49:8e:52:ba:67:4d:eb:74:70:14:ee:d7:02:
dc:3e:81:9d:9f:f6:e1:1b:d1:b0:e1:50:eb:e6:3c:
f4:54:a0:42:9f:1a:67:e1:7a:c8:ca:2d:aa:25:12:
a6:e8:1b:51:ba:d8:e3:e9:0b:89:cd:65:4b:f9:58:
0b:d6:2b:77:02:c7:a9:db:5e:ad:05:f4:5e:80:1f:
d2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F0:72:3A:C8:89:28:F9:14:B2:0B:30:1D:AD:E3:48:5D:7C:90:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b7e61e99-5a3d-3a97-9cf5-26c54e86d5fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:501:b1f9:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:73:10:ea:f9:9d:9b:db:72:ba:5a:3d:5f:7b:25:49:b9:4e:
51:d9:db:26:dd:3d:42:f0:3b:ae:65:df:dc:d1:c6:8b:01:fb:
9c:35:61:a4:28:68:e7:58:b8:01:b6:ba:ee:a9:ad:82:4a:da:
b0:12:df:e3:e7:19:10:d4:75:2c:13:7c:6f:78:75:4c:60:8c:
2e:d6:f6:60:89:6d:c3:d8:a8:f8:14:91:59:5d:b9:f3:6b:eb:
37:49:56:a3:f7:23:ff:c1:41:a2:b9:88:bd:13:42:0d:d9:31:
c7:8b:09:ed:b6:e5:6d:a8:77:89:90:c7:37:21:26:62:0e:10:
f2:28:ba:91:2c:48:2c:ec:e6:29:58:a6:49:05:32:6f:8c:48:
3b:5f:95:f6:70:14:74:1c:70:aa:cc:95:d0:b7:28:75:57:9a:
bc:a4:cc:e3:6d:9e:f9:ed:8e:fc:78:51:d8:10:22:43:a1:48:
09:78:1b:42:f3:fd:bc:26:d7:15:aa:fb:1e:f6:5c:cd:f2:c9:
4a:2d:83:9e:15:8b:da:69:ee:1a:6b:2f:b2:3e:7d:18:e7:1b:
85:80:9d:61:33:b9:25:99:7f:af:74:33:e1:bc:8f:8b:e0:b5:
24:2a:14:ac:c6:63:9f:55:d9:42:95:21:04:eb:03:09:11:df:
0e:9e:16:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:15:39 2025 by rpki-client