Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1662ecb-d323-304d-82e6-0bc4c082d5d6.roa
File: c1662ecb-d323-304d-82e6-0bc4c082d5d6.roa (raw, json)
Hash identifier: IEo4lDB8OZU1zLn+7sPh/Pa/F8q5OCaFM+fZ74PBd9k=
Subject key identifier: B7:A1:85:22:82:75:8F:42:31:14:68:6B:A0:14:AB:E5:36:E8:60:0F
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584917DC145404CE38EBEE53D860
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1662ecb-d323-304d-82e6-0bc4c082d5d6.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 396614
IP address blocks: 2001:500:123::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:14:54:04:ce:38:eb:ee:53:d8:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=5bf9b0df-1d30-4461-b43f-675ef31c6408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:34:14:79:a3:67:ea:94:a4:03:85:e8:4d:db:
87:81:f2:72:aa:c0:d9:a3:a7:2d:b5:cc:fa:ec:0f:
98:78:02:41:9e:62:cc:80:3e:62:06:25:f5:f0:d0:
33:f6:f0:73:aa:86:d7:5d:ac:50:f7:e4:1b:4b:81:
15:e3:9f:da:3d:4b:ae:b8:c7:07:bb:17:15:36:2d:
5c:8d:d7:5d:54:8e:d4:15:4d:8d:89:41:00:76:c8:
37:ae:5e:c0:08:70:88:44:85:e4:f0:7d:9d:84:bf:
3e:6c:15:c9:d6:5c:ac:93:87:47:57:22:61:48:ea:
24:4b:2a:4c:55:86:f8:ae:f2:95:54:4e:20:f9:9c:
e3:10:5d:57:8f:01:3f:35:95:34:70:ca:c4:03:67:
cc:c3:8b:77:56:fb:73:bb:42:f8:43:f7:b8:30:ce:
d6:46:72:e5:1b:4e:e9:4c:3a:82:1d:23:c9:4c:2e:
bf:64:23:b2:21:44:7e:1a:fd:45:4a:60:e3:ae:10:
f2:ea:cb:f7:b6:77:c5:b1:8b:03:0c:bf:ee:57:4d:
10:e7:62:a9:8a:11:44:2b:dd:f1:c9:8a:5f:d2:ba:
9e:a5:59:dc:fa:32:c9:6f:81:26:03:09:37:36:46:
55:c3:9e:78:02:f9:6f:3d:89:35:e7:3f:54:e8:1a:
93:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A1:85:22:82:75:8F:42:31:14:68:6B:A0:14:AB:E5:36:E8:60:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1662ecb-d323-304d-82e6-0bc4c082d5d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:123:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:fe:12:26:9e:f9:14:a8:17:40:2d:23:19:ee:11:5c:66:7a:
cd:cd:39:2f:34:85:12:71:51:e2:ff:69:48:aa:aa:5c:51:5c:
bd:fb:8e:de:33:1c:c5:e0:f0:8f:80:54:65:21:21:30:79:f7:
e9:ce:2c:20:58:8e:a5:f3:81:25:d7:e6:f6:fb:41:83:43:2c:
83:c8:03:2f:fb:98:67:e6:e2:f0:11:8d:ca:e5:9f:fa:38:56:
cc:67:c6:a9:34:2c:95:a9:ae:66:08:67:6b:32:36:a3:7f:44:
c0:69:1a:d1:4b:79:78:ac:2d:8b:01:c9:50:c1:ac:a9:99:b3:
a0:05:0e:e2:13:df:bd:6f:15:d9:b0:65:6b:2e:e8:d5:50:4a:
e6:9a:50:5b:0e:c2:22:a7:4e:61:44:06:2b:63:c9:2c:33:5e:
01:9e:46:a8:22:d0:42:d4:de:42:b6:03:cd:c8:7d:8c:58:f0:
54:16:99:96:4c:c8:46:70:fb:f3:5a:05:84:f1:26:4c:57:a4:
25:69:d6:03:cf:9d:0a:92:cb:50:3f:5d:30:5f:b3:30:41:d2:
5d:4f:c2:d9:72:77:4b:49:f5:f6:fa:27:57:9e:2e:e6:8f:49:
3f:5b:b1:64:fc:c5:f2:cf:6d:c1:17:32:80:af:a7:8c:7a:4a:
5f:43:53:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:38:15 2025 by rpki-client