Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd369fdf-eb78-34ff-ad5c-ae43fa655874.roa
File: dd369fdf-eb78-34ff-ad5c-ae43fa655874.roa (raw, json)
Hash identifier: YpqPlJ3VXDC4ruZACVZOUqa8npjLC0RfzOGimee9k3g=
Subject key identifier: 39:79:4E:FA:65:43:C9:09:07:93:38:B8:08:5A:D9:14:22:AE:85:4F
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489BA0BC91D2C1BAD9819DCC80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd369fdf-eb78-34ff-ad5c-ae43fa655874.roa
Signing time: Mon 20 Jan 2025 14:00:51 +0000
ROA not before: Mon 20 Jan 2025 14:00:51 +0000
ROA not after: Sun 20 Apr 2025 13:00:51 +0000
asID: 36630
IP address blocks: 2001:500:30ff::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9b:a0:bc:91:d2:c1:ba:d9:81:9d:cc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 14:00:51 2025 GMT
Not After : Apr 20 13:00:51 2025 GMT
Subject: CN=20aa261b-ad6f-437f-aa40-cdb6d4a2f72e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b8:d2:ac:f5:01:cf:88:e6:9c:bb:29:25:5c:
e1:9f:10:f3:37:62:da:9c:9b:18:a6:3b:fd:39:f2:
c0:24:38:1c:30:ed:9a:fc:6d:b8:44:1b:f3:e2:4e:
79:00:f1:7f:ce:55:07:8e:40:e5:8e:02:20:34:1b:
ea:da:5a:21:2e:f2:cc:27:cf:df:1b:2b:72:bc:ce:
01:d3:e8:54:8e:e3:53:5a:63:48:89:32:45:40:1a:
a7:f9:bb:bf:64:27:ac:9b:b5:85:f0:34:da:d4:3c:
c0:16:0b:c3:0b:bb:86:18:9d:bd:3c:a9:db:cc:1c:
94:f6:76:cb:43:1e:ed:f8:9e:c4:ad:e4:86:ce:8e:
61:d3:ed:86:92:e7:83:b1:21:0f:c6:18:ab:34:4f:
62:85:92:78:83:d4:be:96:ad:79:49:97:b2:1d:77:
76:0e:2a:99:57:cd:ed:c3:8a:de:2d:9c:3e:10:b4:
b4:56:cc:e8:7e:96:ba:10:50:38:79:5f:d8:db:97:
9b:0b:19:1b:13:ce:94:14:ce:f9:df:bc:c1:73:e6:
a5:ca:fe:27:7d:4e:88:45:8c:4f:1e:0d:23:9d:c0:
a9:01:2d:63:20:4c:2e:f6:2d:1b:34:64:c3:25:8c:
18:6f:ad:88:b8:3b:45:0a:80:96:75:ee:bd:59:79:
06:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:79:4E:FA:65:43:C9:09:07:93:38:B8:08:5A:D9:14:22:AE:85:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd369fdf-eb78-34ff-ad5c-ae43fa655874.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:30ff:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:27:6d:e9:c3:eb:69:ba:e6:d3:7f:14:bf:41:de:76:bd:20:
dd:0f:5f:0f:10:fc:44:c7:90:e9:02:eb:8b:67:52:b6:32:65:
d1:fb:a5:76:b2:69:46:d1:e8:c5:ba:7c:ac:f8:26:f7:c2:ee:
97:5e:0a:96:89:e8:45:8c:84:ce:0f:21:27:db:a5:e1:45:cf:
3e:c1:0a:dc:a9:b7:84:d0:33:95:d3:79:4e:f7:24:37:45:f2:
e1:91:0d:13:c1:44:7f:0e:16:1f:42:b0:2c:6c:39:fc:d1:74:
29:91:99:24:d0:52:a3:6c:57:46:dd:c3:d8:39:a1:b1:ab:a5:
57:8b:61:93:56:91:10:40:9f:88:a9:bf:f0:3d:2a:40:34:4b:
6f:f1:c0:be:c4:a7:9b:12:03:ca:23:12:2a:27:4b:c6:ec:27:
17:42:ba:c4:2b:90:90:98:f8:54:ca:73:11:05:27:e6:47:cd:
63:89:40:7a:c1:ae:7d:95:06:70:54:86:f5:f9:24:5c:a1:e2:
0f:8b:ec:62:19:ac:a6:98:1e:5a:7e:1e:0c:fb:1c:db:6b:21:
d1:fa:4c:b4:fd:e2:8d:9d:35:60:b2:a3:3e:1e:4b:37:bb:02:
90:ca:bd:8a:bf:e8:f3:28:e7:4c:11:ac:86:01:14:cd:4a:89:
67:3d:30:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:59:20 2025 by rpki-client