Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0a3769c7-d835-3126-a9c1-a9e36395ebd3.roa
File: 0a3769c7-d835-3126-a9c1-a9e36395ebd3.roa (raw, json)
Hash identifier: gwwxWxrVJXdGl98L+5EmyluYHNu7/Zg597DRk3rz0gA=
Subject key identifier: 93:AF:9C:1A:3B:85:54:74:1A:DE:F6:7B:87:C1:CA:B8:59:FE:C4:AD
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285849393E9398A02DFACAFAA92880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0a3769c7-d835-3126-a9c1-a9e36395ebd3.roa
Signing time: Tue 18 Mar 2025 01:00:38 +0000
ROA not before: Tue 18 Mar 2025 01:00:38 +0000
ROA not after: Mon 16 Jun 2025 01:00:38 +0000
asID: 396576
IP address blocks: 2001:500:120::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:39:3e:93:98:a0:2d:fa:ca:fa:a9:28:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 18 01:00:38 2025 GMT
Not After : Jun 16 01:00:38 2025 GMT
Subject: CN=9a324dd9-c72e-4287-9ec5-a4cc7a24b4bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ed:8f:58:dd:77:86:17:89:b7:9e:3e:22:f4:
2a:d2:ed:69:d4:e9:26:fc:25:13:f4:d2:a8:0a:79:
20:f0:88:5c:47:9e:13:bc:03:15:20:b2:89:71:65:
e3:cf:81:81:f3:19:85:ba:d1:e4:92:58:27:6a:c9:
a9:ea:b6:0d:12:f5:92:b6:10:a0:01:7b:c0:3d:07:
5b:cf:da:d1:23:fb:bf:6e:b9:1c:dd:e5:b9:03:8b:
01:8f:65:a8:96:b5:e2:59:d9:b9:32:1b:d9:fa:68:
9e:a5:3a:18:e2:2e:d0:ad:55:5a:20:53:cf:d7:eb:
4a:5d:9f:e9:73:9d:13:d9:6f:a5:93:a3:c9:aa:48:
1b:bd:92:30:e0:81:81:b1:0f:44:7a:da:a9:8d:0b:
67:5d:31:15:f4:07:56:fe:98:64:70:6a:bc:6a:e2:
64:3d:ba:99:c1:a5:92:13:e4:27:da:7b:71:f9:03:
6d:bb:cd:55:ad:ab:69:e5:dd:5f:60:5a:17:21:aa:
0d:bb:9a:0d:54:d9:c4:c7:e9:76:12:ee:58:96:bb:
c0:3c:fd:27:0a:a6:98:c9:57:e0:30:2e:2f:51:90:
1f:1b:d3:02:cc:c7:32:14:02:15:f0:90:b6:ff:0a:
9f:56:fc:cc:4b:5e:3c:11:e2:5a:cf:6e:0e:39:07:
19:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:AF:9C:1A:3B:85:54:74:1A:DE:F6:7B:87:C1:CA:B8:59:FE:C4:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0a3769c7-d835-3126-a9c1-a9e36395ebd3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:120:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:b3:0e:02:b1:d7:25:fe:9c:07:bb:c4:ba:ed:84:99:c7:b8:
10:73:b4:d1:97:12:f3:50:6d:b5:b0:c4:11:9e:0a:ce:6f:08:
3e:32:ea:83:ef:7e:f1:7f:e7:21:80:17:d6:b5:de:6c:8f:90:
af:04:7f:6a:a4:99:68:f6:d2:d8:32:b9:98:63:a4:ad:77:90:
d7:7d:23:92:b7:a1:85:65:80:25:eb:2b:54:65:ab:fa:36:8e:
81:77:2d:e1:07:d2:1b:b8:0c:91:c9:a5:a9:ac:99:e0:47:94:
c8:a2:fd:2e:76:47:34:fb:e0:e3:06:63:7f:81:c1:b8:9f:af:
63:0a:7c:9f:7d:2f:29:f7:1b:0f:53:ec:4d:4a:75:7d:17:b8:
56:54:33:11:24:f9:ba:01:11:6f:bb:1d:f4:86:be:18:70:f6:
f4:1b:e2:1b:30:41:f6:af:b1:f9:cf:68:6b:56:9b:ac:d3:fb:
22:7e:86:0f:7a:44:0b:a7:0a:5d:93:45:60:50:16:8e:dd:83:
23:20:69:66:d5:43:f8:8f:f4:fe:b8:82:40:ee:97:fe:03:19:
34:10:f1:05:26:3e:37:1c:ed:a2:fb:60:70:53:55:d0:33:11:
31:c6:32:bf:b6:60:b9:ea:40:6a:0b:28:f1:11:31:3f:67:d3:
b8:19:39:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:55:05 2025 by rpki-client