Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/09941b86-8859-3be5-bd99-4ebd81ec999d.roa
File: 09941b86-8859-3be5-bd99-4ebd81ec999d.roa (raw, json)
Hash identifier: CTfDtIVbzOSD3cQ7J7cVRhBod8g0XpTK/ApAuBWIx2w=
Subject key identifier: CA:F2:82:5F:D4:AF:C2:A0:C4:A6:1B:72:72:1B:14:9B:12:4C:2C:45
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584929E3D770D0047CD9BA51DBA0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/09941b86-8859-3be5-bd99-4ebd81ec999d.roa
Signing time: Wed 12 Mar 2025 13:00:53 +0000
ROA not before: Wed 12 Mar 2025 13:00:53 +0000
ROA not after: Tue 10 Jun 2025 13:00:53 +0000
asID: 21313
IP address blocks: 2001:500:121::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:29:e3:d7:70:d0:04:7c:d9:ba:51:db:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 12 13:00:53 2025 GMT
Not After : Jun 10 13:00:53 2025 GMT
Subject: CN=463790fb-cf11-4443-88e5-79ff3dfc9822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c6:44:9f:65:8a:1f:d9:df:19:4d:94:99:35:
a4:13:94:d9:58:3f:64:60:91:e2:21:cc:7a:14:21:
81:aa:a0:37:10:c3:af:06:34:57:cd:1b:ff:42:0e:
db:c4:b5:57:fa:15:8f:d1:55:a5:66:69:4a:5e:45:
9d:c4:06:79:12:5e:16:9a:ad:4e:e6:3a:b1:3f:36:
80:d9:22:6f:ba:0d:58:e7:a9:b3:7f:a5:fc:f2:ac:
bd:32:6b:7f:ec:10:fb:ec:4e:98:04:0b:61:bc:5e:
67:39:5d:ec:c7:24:fd:66:a5:c6:c3:aa:49:6e:6d:
3c:a8:ee:df:56:4f:18:ed:b1:cb:51:70:8d:b9:ad:
6d:37:5f:37:4f:d6:bf:ca:dc:89:ac:42:39:c6:bf:
04:ee:e1:c2:a2:68:9b:69:bc:8f:16:ad:a3:ec:70:
9c:90:95:7b:e1:aa:4c:91:87:06:35:fc:f1:bd:c8:
1f:48:83:e0:c8:27:84:d4:15:82:4c:5e:ff:d4:44:
d2:23:6f:59:03:71:67:d5:a0:9f:9d:9d:18:5e:dc:
85:a2:c7:ce:c8:cd:de:06:33:0b:a5:88:54:f8:be:
17:4e:a6:56:9d:92:a1:ca:c0:b7:28:38:d8:d2:5f:
d0:50:d2:24:d9:61:e6:00:d3:1b:f9:21:70:51:c4:
00:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F2:82:5F:D4:AF:C2:A0:C4:A6:1B:72:72:1B:14:9B:12:4C:2C:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/09941b86-8859-3be5-bd99-4ebd81ec999d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:121:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:04:2f:db:d3:6f:31:27:2d:ec:d6:9a:ce:a0:2c:6a:9b:a7:
82:90:3f:f4:d5:a4:1f:67:bd:1f:05:6c:f8:2d:5e:c6:a0:11:
cf:16:e8:78:23:1a:f2:29:52:f3:64:31:0d:50:94:f7:b4:df:
34:1d:b3:1d:21:3d:24:10:2e:f9:f8:9f:df:bd:53:0a:7d:a7:
11:f3:63:78:49:6b:07:f2:ca:83:e9:db:f0:1d:ce:5e:21:0e:
3b:ed:43:11:a3:44:7b:ed:62:ea:33:6d:38:24:05:23:fa:8b:
ab:a7:3f:57:e2:4c:01:05:dc:45:fa:7c:fc:05:75:4b:9e:5c:
b4:db:be:10:ba:ce:e6:28:c4:e8:af:74:00:36:fa:c0:8b:ce:
e0:bd:3e:66:be:cc:cb:10:35:5c:09:56:18:b5:59:91:63:36:
be:8a:db:92:46:22:7c:10:0b:b8:26:9e:67:67:8b:54:87:cc:
eb:8c:c0:bf:09:c7:2a:af:07:08:05:6f:c1:4a:34:96:49:1f:
f4:6c:d9:dc:98:91:ea:6a:08:d5:ed:52:9c:64:3c:46:4d:2d:
e8:48:6d:6b:67:90:ee:07:42:51:87:f4:b6:66:ee:d3:e2:10:
ce:65:b5:71:6d:e6:ee:7b:4f:8a:6a:9d:60:ee:7c:df:43:3e:
47:76:60:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:35:14 2025 by rpki-client