Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf623a09-779c-32c5-8994-71da847453c8.roa
File: bf623a09-779c-32c5-8994-71da847453c8.roa (raw, json)
Hash identifier: 9rAiusTaQD/+acZ5YRobZd3A9zqZ8xfAJidhtTnzzG0=
Subject key identifier: CA:69:33:08:D2:3E:4C:4E:B2:A9:8C:14:C4:23:E2:22:95:CB:CB:D8
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584917DC16B220CBF128E0C6EE80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf623a09-779c-32c5-8994-71da847453c8.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 396568
IP address blocks: 2001:500:123::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:16:b2:20:cb:f1:28:e0:c6:ee:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=5cc23e15-a100-4d26-a78b-e266a8b98881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e3:5b:0c:28:fc:1a:5d:5e:37:cf:d7:6e:fb:
86:08:33:0c:1a:fa:03:d8:5c:f5:ff:4b:d0:d5:30:
7b:f3:bf:1e:b3:38:79:7b:36:0d:32:e0:81:5a:72:
86:da:0c:04:12:29:81:05:b5:65:ed:49:d5:a5:60:
a8:e4:1c:75:e3:74:c8:d8:e8:e7:51:72:c5:1e:60:
6b:7e:24:ba:6c:97:c1:61:b5:bb:3b:5a:86:e6:1e:
27:20:73:d7:91:3c:fd:d4:9e:a1:68:84:8e:1d:91:
00:e8:26:49:e4:5b:73:1f:f0:63:13:ee:20:13:8a:
98:48:bf:13:ad:7d:d2:d3:5e:73:02:4f:4a:80:95:
89:2b:2c:43:2a:43:d5:d4:fe:f9:9c:fe:5f:c3:0c:
3f:5c:75:58:40:51:0c:a4:d9:c5:96:17:f5:30:9f:
14:dc:49:1f:03:30:1e:f6:45:f3:8a:cd:1f:69:6c:
e3:ff:d7:70:98:5f:64:aa:c9:01:a3:8b:16:e0:41:
3b:fd:07:85:44:65:6e:25:90:22:e5:03:1d:bc:8b:
50:ed:2b:85:ed:09:c7:03:23:f0:82:8f:41:42:4f:
40:d1:88:ca:25:d9:70:dd:36:63:79:b2:02:61:3b:
09:04:25:ea:09:bd:db:72:de:2b:90:74:db:c0:b5:
be:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:69:33:08:D2:3E:4C:4E:B2:A9:8C:14:C4:23:E2:22:95:CB:CB:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf623a09-779c-32c5-8994-71da847453c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:123:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:68:66:e8:51:c1:39:3c:7b:e7:b1:8d:d9:54:29:e6:c1:1c:
ff:26:31:df:67:5e:72:1c:ac:f9:da:09:39:87:71:0d:88:23:
92:1f:bf:58:c4:f6:63:8d:fd:9c:b6:93:11:26:0a:23:6d:ec:
a6:3f:a5:69:59:4b:9b:86:03:79:5b:da:01:56:9b:ba:3a:cf:
1d:e9:ae:6b:45:a0:30:7c:f3:6b:48:61:57:7b:93:ed:ac:2c:
ed:af:c5:4f:b1:75:24:39:ed:6c:c0:c9:4b:c8:a0:5d:02:fe:
40:a1:97:58:f4:ee:13:97:6c:3c:2f:ce:22:29:05:b1:2a:da:
fd:eb:40:df:a7:02:10:94:f0:1d:ca:e3:82:cf:c4:0a:d4:86:
32:c6:56:37:d0:73:e7:ca:32:ed:7e:5b:05:04:e6:52:d8:89:
98:0c:31:c8:45:b3:d2:1a:fe:a0:a1:ea:98:1e:62:aa:e8:ab:
38:69:9e:fa:c8:44:44:75:13:d6:9c:8f:e4:bd:45:1c:30:e8:
0f:15:ed:df:da:61:29:06:f9:45:66:96:94:e5:3b:cd:62:02:
9f:76:53:ce:63:e4:6e:7b:40:fd:d9:a5:4b:d8:b1:35:34:06:
fa:e2:34:2d:67:cd:0f:47:50:cc:fb:98:08:33:a0:be:e4:d6:
4a:2c:ce:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:21:26 2025 by rpki-client