Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fb532d96-f791-30e7-8706-c4199185763a.roa
File: fb532d96-f791-30e7-8706-c4199185763a.roa (raw, json)
Hash identifier: qL4H5BjnyyJ8/YWKnx//LcXhDS9mwc2IWmmLVi0nWiM=
Subject key identifier: 88:EB:E7:73:B4:62:36:5C:52:7E:B7:B2:45:E4:6A:08:F6:33:DC:A9
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489BA0BA26311ED032D08EEB40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fb532d96-f791-30e7-8706-c4199185763a.roa
Signing time: Mon 20 Jan 2025 14:00:51 +0000
ROA not before: Mon 20 Jan 2025 14:00:51 +0000
ROA not after: Sun 20 Apr 2025 13:00:51 +0000
asID: 396566
IP address blocks: 2001:500:30ff::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9b:a0:ba:26:31:1e:d0:32:d0:8e:eb:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 14:00:51 2025 GMT
Not After : Apr 20 13:00:51 2025 GMT
Subject: CN=849bd7b4-ce12-4990-9ef3-d1dadd70d7c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6d:de:ca:ca:b4:1c:6c:2d:0a:f5:9b:d3:b2:
09:bb:e4:ea:b8:b7:f4:a2:33:df:49:37:3b:4e:dc:
85:08:34:3f:30:8b:16:57:23:ba:48:d1:05:58:e4:
9f:05:86:37:66:fb:fc:16:90:10:de:5f:6a:82:64:
72:2d:c7:ce:df:9e:c7:e9:7c:78:cd:ae:ba:42:98:
ec:5f:96:5a:d2:4c:62:a8:fa:06:c3:0f:dd:c6:02:
52:6e:88:0b:4d:31:ca:e9:32:88:4c:4a:23:ff:5c:
48:67:00:86:83:1d:32:04:41:a4:e8:98:f1:70:a2:
63:83:af:34:27:c9:a5:db:f2:bd:26:8a:58:f5:7a:
2e:f8:54:29:55:5c:49:5e:df:83:9b:b0:b3:31:1a:
0d:6e:06:37:7f:12:20:bb:9b:6b:ff:0d:2b:ba:79:
e0:0d:92:d8:d9:c7:52:1b:27:c6:0c:9c:10:64:34:
1d:2c:0a:c6:b3:b2:6e:92:fe:2c:b1:7b:df:ad:8e:
93:79:ac:59:2e:b6:49:05:79:ca:7e:0a:26:c7:02:
04:47:d5:f8:ba:8e:94:17:18:93:3d:8f:0e:dd:42:
1e:3c:e4:a0:da:84:f4:d9:e6:9a:08:c6:92:b0:18:
5d:8a:02:02:69:46:d8:a6:1f:51:86:ff:77:b2:71:
c3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:EB:E7:73:B4:62:36:5C:52:7E:B7:B2:45:E4:6A:08:F6:33:DC:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fb532d96-f791-30e7-8706-c4199185763a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:30ff:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:08:2c:7e:10:fd:44:ac:81:08:56:7e:61:bc:b4:55:17:d6:
6e:f8:40:94:72:dd:34:bd:0d:c1:32:c2:86:cf:bf:d0:27:68:
03:94:98:db:4d:01:36:ca:69:d4:bf:5e:f1:34:fe:9a:61:1c:
13:b5:61:ca:ac:c8:db:b5:22:3e:f9:c3:d4:ea:98:7d:c0:fe:
5e:b9:85:1f:4c:47:ad:08:96:ab:8d:09:35:1a:4a:06:09:91:
4a:31:45:39:08:1d:b2:87:63:da:40:e5:1a:de:dd:8a:b4:57:
4f:9e:db:90:7b:05:a6:57:fa:b9:15:1a:e4:6b:68:ae:d2:2d:
dc:e7:36:98:a7:02:27:5f:7e:66:fa:9f:d6:b9:c0:5c:eb:ee:
fc:ee:a1:e1:b8:8f:08:49:e1:6b:a2:04:e4:e0:b5:2f:80:a5:
3e:f6:fb:06:ae:52:56:66:82:b2:0c:c7:bc:5d:d4:0b:fd:ef:
be:c3:3b:a3:b9:34:ec:ee:89:01:f9:f1:cc:fb:0a:8b:c3:df:
30:f8:a2:f5:e1:c5:8a:72:7a:29:88:07:7b:56:c6:75:f3:4a:
9f:f7:23:7c:cf:5f:a7:33:d0:b7:dd:81:fa:4b:d9:c1:08:14:
0c:e3:8b:42:0c:00:c6:23:bf:0e:ad:c2:1e:d5:3f:4d:39:3b:
fb:53:c7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:58:43 2025 by rpki-client