Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dea1de8d-d931-3cd8-8e3e-e5e902d26f3d.roa
File: dea1de8d-d931-3cd8-8e3e-e5e902d26f3d.roa (raw, json)
Hash identifier: ccn0cbGUXpufYxpy/qT+op4KtS1Mhej/tJGocpwey6s=
Subject key identifier: 3A:C5:95:24:3A:D1:40:62:D1:4C:07:EE:84:91:22:0D:F9:93:5C:BD
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848A3F587CAD7623BAF47ECCC40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dea1de8d-d931-3cd8-8e3e-e5e902d26f3d.roa
Signing time: Thu 23 Jan 2025 13:38:22 +0000
ROA not before: Thu 23 Jan 2025 13:38:22 +0000
ROA not after: Wed 23 Apr 2025 12:38:22 +0000
asID: 397198
IP address blocks: 2001:501:b1f9::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a3:f5:87:ca:d7:62:3b:af:47:ec:cc:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 23 13:38:22 2025 GMT
Not After : Apr 23 12:38:22 2025 GMT
Subject: CN=2dec5548-7e11-40eb-997e-a986eecb2389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:46:e4:bf:65:4d:f0:8b:ef:80:48:36:fc:67:
e7:57:a4:66:92:3d:81:0d:30:14:e7:2c:ef:40:f4:
ae:95:c1:63:d5:13:8c:69:75:32:a1:db:52:af:cb:
36:71:64:5f:14:4f:20:9e:71:39:13:cf:46:09:d0:
98:c3:e8:8a:cc:30:ac:d0:4f:f0:3e:0f:5f:b7:d7:
ef:4c:3c:f8:08:54:10:4d:be:c8:4a:5f:8e:fb:48:
23:ae:00:a6:44:bf:4b:01:f4:3b:47:27:06:6d:21:
45:6e:da:d8:6e:12:bb:07:63:d9:b9:01:74:72:ef:
ab:94:1a:32:68:62:07:d6:13:a2:40:55:71:4c:ab:
f1:e5:05:cb:37:24:1d:d0:a6:20:7e:99:1c:7f:02:
70:f3:fd:6f:37:ba:e1:be:40:fc:bb:49:3e:47:10:
ac:cf:d3:86:ae:ba:da:79:9a:05:7a:01:bf:b3:27:
95:d2:3b:d6:b5:fd:c8:cd:66:82:e2:19:90:3b:db:
a8:01:cb:eb:e8:9c:cc:69:eb:e0:cb:19:33:cc:3c:
8b:85:ac:f7:e6:3b:bc:14:78:c3:76:82:9b:69:cf:
4d:4b:c0:19:47:a2:c0:44:76:c5:65:2f:e5:d3:c5:
12:c0:82:1c:84:77:16:69:4c:43:34:c5:de:41:79:
db:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C5:95:24:3A:D1:40:62:D1:4C:07:EE:84:91:22:0D:F9:93:5C:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dea1de8d-d931-3cd8-8e3e-e5e902d26f3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:501:b1f9:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:85:7d:b1:b6:a1:58:f9:25:ed:2f:9d:77:ab:cd:4e:26:11:
df:5b:45:55:ff:4b:5b:f8:ba:33:da:43:bb:c4:28:9f:e0:26:
f0:7c:7b:8d:ca:61:95:8c:0d:95:fd:c4:b4:b6:42:6e:ca:42:
55:5f:91:e9:2d:3f:f8:df:fc:fc:57:9e:ed:8a:33:74:09:6a:
23:7f:31:ce:6a:54:2f:ae:2d:57:7c:39:18:58:30:f0:48:a3:
d9:5b:73:77:be:d8:56:5c:11:26:2e:d7:8e:1e:10:7a:e1:50:
a4:45:17:94:ee:79:2c:53:3a:f9:32:9a:38:ae:15:0f:ef:33:
21:33:3d:41:15:05:6e:a8:f3:cc:35:2a:e1:b1:80:a4:ab:cf:
d3:90:cc:72:ca:98:1c:c9:bc:c3:5c:86:a7:90:20:42:66:5e:
fb:36:e0:93:44:ef:16:d0:db:fa:db:88:c7:02:af:08:56:23:
f1:b5:59:a7:22:cf:c1:79:32:24:87:66:68:a3:48:74:f0:79:
3d:2b:94:b7:e1:7d:0a:6e:4f:5f:44:b1:ea:f4:db:69:4a:e2:
ad:5a:81:e9:55:65:63:40:5f:0f:a7:36:a2:fb:17:1a:99:af:
18:95:bc:29:47:c2:b5:2e:bb:11:bd:e2:38:5c:1a:30:9f:c0:
32:2d:33:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:59:03 2025 by rpki-client