Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f178653e-2429-3dfe-ae09-4d2e9a5215f2.roa
File: f178653e-2429-3dfe-ae09-4d2e9a5215f2.roa (raw, json)
Hash identifier: pzRoqfMJ3naIZQsU/n76MbvZSPbqz9ESE/LhbpazrV4=
Subject key identifier: DD:4A:87:D4:FF:A1:E2:06:0B:B3:F6:82:55:17:4B:3F:FC:C4:06:6B
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848906AB29CFED9A69B86047180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f178653e-2429-3dfe-ae09-4d2e9a5215f2.roa
Signing time: Thu 16 Jan 2025 13:38:16 +0000
ROA not before: Thu 16 Jan 2025 13:38:16 +0000
ROA not after: Wed 16 Apr 2025 12:38:16 +0000
asID: 19836
IP address blocks: 2001:502:1ca1::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:6a:b2:9c:fe:d9:a6:9b:86:04:71:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 16 13:38:16 2025 GMT
Not After : Apr 16 12:38:16 2025 GMT
Subject: CN=d59ba63c-2c86-4ed0-bad5-e178aab6e220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c3:4d:5b:a5:f9:2d:88:c7:c7:b8:01:54:b8:
d5:12:bf:88:71:4c:72:af:64:0b:2e:2b:55:82:56:
3a:88:fe:52:b2:f9:ad:dd:10:3f:81:c5:18:c8:3d:
ac:c8:46:4d:1d:9c:92:72:ea:3b:1b:cd:bb:69:5a:
09:12:ec:b1:c4:92:c2:b9:18:10:aa:f0:05:19:de:
83:b7:4e:1b:e9:32:6b:fe:7a:59:43:2e:e0:e4:f9:
d7:4e:b4:3a:68:c1:ae:26:fe:27:e7:47:50:67:4e:
eb:39:08:d0:8c:fa:aa:b0:eb:f8:5f:7b:cc:0f:c3:
ad:37:67:4f:23:e4:eb:b6:69:a7:20:04:37:da:2f:
f5:0e:72:39:c5:92:82:67:d1:a6:bd:68:41:74:39:
09:19:7d:c4:63:18:70:42:41:7a:c1:d8:0e:20:ad:
2c:7f:4b:56:e8:c0:67:02:b7:e9:28:7d:c0:c7:91:
1a:dc:bc:47:27:48:89:59:5d:14:ce:89:41:dc:8a:
ee:d1:db:02:57:e7:03:58:3a:0c:e5:db:90:9d:0b:
da:61:7b:87:d6:54:dc:5e:ad:91:d4:72:7f:4b:a8:
04:29:2d:e8:52:3e:d3:20:5e:91:03:6d:e6:d5:51:
3d:ac:ff:14:4a:f0:86:1d:72:eb:c2:67:90:b9:e5:
cc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:4A:87:D4:FF:A1:E2:06:0B:B3:F6:82:55:17:4B:3F:FC:C4:06:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f178653e-2429-3dfe-ae09-4d2e9a5215f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:1ca1:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:ba:52:aa:fa:59:7c:ab:12:a6:4a:0a:0f:d5:98:bd:e8:b7:
03:94:90:6d:4b:cf:f8:3c:61:e3:8c:d7:bc:f5:31:58:14:4c:
29:9b:35:42:4b:88:b0:65:08:6e:57:23:38:47:80:9f:67:4d:
9d:39:ca:39:0b:75:e2:5a:09:dc:21:ea:a4:0d:62:10:b6:e6:
de:6b:82:9a:21:6b:77:2f:1a:50:60:34:3c:7c:db:56:99:09:
d6:08:03:6c:8c:bf:cf:9f:b7:b6:0c:ed:9e:fd:0c:fb:63:95:
4c:da:dd:c8:5d:30:f8:86:74:f7:f2:62:67:87:79:aa:e1:78:
2f:2e:22:23:96:fe:4b:08:13:8b:e3:cf:10:14:47:4c:88:3d:
b9:e6:0c:97:e4:f2:4c:dd:49:a1:11:b1:b5:cd:ec:28:48:e4:
e4:4c:ac:59:9e:75:fe:83:cc:6f:4b:3f:bf:85:cc:0a:a6:50:
cc:4a:58:a0:41:8c:7c:10:6a:cf:a6:d1:7e:cd:fd:76:ac:bb:
4a:3f:35:6a:7b:00:79:50:10:d0:b5:5e:ca:65:50:8c:b6:48:
3b:36:5c:e5:86:bb:71:f8:e0:bf:8a:86:23:20:a4:2e:94:5c:
90:d3:56:6c:61:a1:8b:0e:7f:92:8a:96:aa:0b:e1:6b:b1:16:
89:7f:4f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:27:40 2025 by rpki-client