Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d5360fff-48be-3460-9a84-c47cc4fdf154.roa
File: d5360fff-48be-3460-9a84-c47cc4fdf154.roa (raw, json)
Hash identifier: Pd8WFdSpNBc0+CbnYcGzMtPWXyKyOaG5+NIxXIe4FIE=
Subject key identifier: 1F:3D:0C:CE:E7:0C:18:C5:E8:A4:7B:CB:B3:B8:85:F5:49:D0:AC:1F
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489E5E450A16324D19840E0A00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d5360fff-48be-3460-9a84-c47cc4fdf154.roa
Signing time: Tue 21 Jan 2025 13:34:33 +0000
ROA not before: Tue 21 Jan 2025 13:34:33 +0000
ROA not after: Mon 21 Apr 2025 12:34:33 +0000
asID: 397193
IP address blocks: 2001:503:39c1::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:5e:45:0a:16:32:4d:19:84:0e:0a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 21 13:34:33 2025 GMT
Not After : Apr 21 12:34:33 2025 GMT
Subject: CN=065ae558-67b1-4aaf-b480-e3da5ff5b73e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e3:f6:e6:63:47:be:cc:9d:b6:ae:13:d4:a1:
b4:ad:5c:8b:8d:f5:96:0b:ed:42:83:1b:5c:d6:49:
5a:25:54:03:fd:f5:d3:8f:b4:b7:4f:45:a8:bf:09:
d3:79:36:05:26:87:59:a8:3f:97:04:d8:2d:6f:34:
17:27:d0:e9:61:8d:3f:ff:19:a1:b6:b7:94:f9:99:
34:5e:c9:ad:e3:e5:58:48:3f:20:b5:f2:3d:76:31:
cc:c8:69:2b:00:47:99:39:cc:4f:74:64:23:23:e2:
17:f1:24:03:fc:9b:d6:7c:6b:1f:b9:02:9b:2b:35:
dd:0a:6e:8f:85:22:a0:26:e3:b4:8a:7d:4b:a8:55:
46:28:f6:54:e3:57:3a:b6:db:be:7d:38:bf:56:01:
21:2b:02:b6:23:14:7a:0d:fa:04:ef:c5:cf:5b:eb:
b1:bc:19:37:d1:f2:49:f7:59:c1:71:20:7a:d7:91:
d7:7e:c8:b2:b5:86:de:28:47:3e:62:3e:f0:ad:9a:
7d:62:ff:d2:3a:4c:7c:86:a3:25:28:29:78:92:6b:
5a:68:92:7d:de:84:0c:b6:11:9b:13:93:5e:70:9d:
cb:e1:0d:a9:84:b5:33:3b:6f:e7:f5:d0:d2:0f:f9:
52:82:ed:9e:11:0f:8f:13:b1:e5:6d:6d:a7:b9:e2:
83:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:3D:0C:CE:E7:0C:18:C5:E8:A4:7B:CB:B3:B8:85:F5:49:D0:AC:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d5360fff-48be-3460-9a84-c47cc4fdf154.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:39c1:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:4e:78:1f:fe:8c:13:7b:40:5a:ae:cb:5f:90:fc:fd:d9:0f:
67:59:12:35:1e:d9:48:a1:29:41:9a:62:c9:cf:70:48:c2:04:
29:b4:cf:7f:f3:6e:86:ec:60:a6:76:1e:e3:41:5f:e9:c7:63:
b5:91:e0:05:8f:02:c9:b5:11:9b:f9:59:06:b1:ee:7d:7f:46:
17:5a:55:13:34:64:10:0a:ae:87:db:5e:e5:67:4f:2e:7d:ab:
b8:d0:5b:0f:23:b9:27:18:a3:aa:84:b4:be:29:7d:5e:09:39:
66:9b:4d:23:05:8d:b6:39:55:9c:10:12:81:51:2b:c8:6c:75:
57:0c:ce:c7:9b:16:a3:93:86:8f:f0:3c:6f:61:d1:63:fe:74:
e6:3c:1e:61:ba:dd:0f:f5:e9:76:d2:5c:60:31:74:c3:87:eb:
da:1d:7c:64:7b:12:49:9c:57:28:ba:4f:63:d8:c1:d5:0c:d8:
c5:8c:04:0f:b5:0e:ae:45:4b:d2:50:85:a0:be:d2:a2:52:4f:
2b:07:5f:ac:44:67:71:e7:85:e8:84:ff:6d:72:fc:9a:4f:2f:
37:f1:08:7c:ab:21:77:00:47:19:81:63:26:c2:d3:b9:b0:dc:
77:7a:7b:01:d1:9a:9c:bc:8c:45:a7:37:45:09:3c:84:03:e7:
03:35:87:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:55:37 2025 by rpki-client