Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bc0deb5f-a458-34a0-86f5-270b2e8cef6e.roa
File: bc0deb5f-a458-34a0-86f5-270b2e8cef6e.roa (raw, json)
Hash identifier: mypPx8BW3z1UipUE37lHstrMdaSv/K/jmVqF/XuErv0=
Subject key identifier: 84:40:77:36:6A:C5:F5:A4:B8:13:66:57:3F:18:53:6C:8C:14:13:07
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489BA0BDB2C36EAB6E36C9A480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bc0deb5f-a458-34a0-86f5-270b2e8cef6e.roa
Signing time: Mon 20 Jan 2025 14:00:51 +0000
ROA not before: Mon 20 Jan 2025 14:00:51 +0000
ROA not after: Sun 20 Apr 2025 13:00:51 +0000
asID: 10515
IP address blocks: 2001:500:30ff::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9b:a0:bd:b2:c3:6e:ab:6e:36:c9:a4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 14:00:51 2025 GMT
Not After : Apr 20 13:00:51 2025 GMT
Subject: CN=80e0c030-bacf-497d-8cd4-d865017af674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:77:1e:66:a2:af:8a:ef:bf:a0:ed:86:d9:3c:
39:51:17:8c:39:56:5b:7f:6b:67:a2:14:d4:41:1e:
7e:38:8c:08:4a:37:2c:e7:1c:11:e6:bc:9c:7d:f5:
d4:b9:f0:60:e9:2e:0a:a0:a7:a7:b8:5e:23:f5:f1:
07:48:94:86:c6:0e:5d:42:be:a9:bf:31:2d:3e:cb:
85:14:68:06:b8:a0:fc:e3:da:32:fd:7b:60:d0:7a:
41:9a:1b:0c:18:49:bd:44:a3:f4:08:92:9d:15:14:
77:6b:36:c1:fb:dd:a0:31:b7:7a:e7:57:e9:06:2c:
79:01:c8:a5:f9:5b:29:bc:73:cd:c2:07:9d:48:0a:
b3:c3:ba:76:9b:39:6b:d2:6e:89:ca:1f:25:32:e8:
80:7d:a1:54:e8:33:db:d8:f0:84:1d:83:42:2c:45:
8d:97:2c:c4:99:87:84:32:5e:4b:61:e5:59:7e:97:
58:3d:2b:34:b5:d6:3d:24:c4:08:82:cf:db:6a:ae:
a4:24:b6:aa:3c:b5:50:7c:af:2b:a8:d1:c6:38:c6:
cb:f5:0e:c0:74:36:d1:80:62:30:6d:be:e0:43:d3:
f0:f3:9d:8f:6f:f7:9a:29:aa:cf:8b:41:08:a7:f5:
a0:c2:35:e8:31:02:8e:c6:33:59:08:1a:65:d7:0e:
1c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:40:77:36:6A:C5:F5:A4:B8:13:66:57:3F:18:53:6C:8C:14:13:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bc0deb5f-a458-34a0-86f5-270b2e8cef6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:30ff:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:4b:29:a0:4e:95:b5:ea:3f:c8:d9:47:b3:1d:08:39:59:d1:
5a:6e:48:bf:70:7c:28:21:37:08:cd:7d:41:fe:4d:5b:ca:60:
a3:26:42:f8:6d:55:8a:55:31:13:54:cb:f2:2f:36:26:aa:8b:
9c:28:18:fd:aa:62:d6:25:f1:ba:b7:c3:3b:43:82:75:9a:73:
42:20:a8:88:b3:10:59:8b:62:bf:23:7a:60:5c:61:f8:c1:f7:
ff:db:ba:5e:e5:67:12:3a:81:cc:5d:24:6d:13:eb:a8:19:96:
a3:80:8f:c7:6d:77:14:0b:05:ed:1a:c2:b0:4c:34:31:00:7d:
f2:fe:3b:d2:67:0c:75:67:1f:d6:10:d9:92:f2:ea:9f:9c:e4:
5f:50:9c:94:60:8f:88:b3:51:f2:8c:80:87:25:ba:bf:e6:84:
4f:22:ab:fd:18:19:11:35:27:66:3c:74:c3:72:6c:7f:f3:84:
09:42:39:b0:1b:85:30:1a:0b:5a:78:6d:e9:f6:a1:a4:a8:07:
26:60:57:76:3f:50:90:50:73:e1:1c:e1:a3:b8:b3:9d:2d:e3:
6a:ea:3f:cb:b0:0a:6c:e0:51:bf:a7:d4:bc:d8:74:f6:00:db:
ed:cf:a6:a7:a4:96:2b:f2:9c:39:01:ac:c4:62:14:6c:ae:43:
7f:0b:d7:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:59:12 2025 by rpki-client