Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/209757fa-1357-3de0-bfd1-85051af898c5.roa
File: 209757fa-1357-3de0-bfd1-85051af898c5.roa (raw, json)
Hash identifier: ZLvP9U/22EoUnaZWjSCZOirFPQhBBSUx5nAGVeJPzFs=
Subject key identifier: 0B:71:1F:ED:4C:DD:58:7C:12:84:AD:BB:A4:F3:61:D3:D1:DE:FF:5A
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584929E3D3C785260A4629AB2420
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/209757fa-1357-3de0-bfd1-85051af898c5.roa
Signing time: Wed 12 Mar 2025 13:00:53 +0000
ROA not before: Wed 12 Mar 2025 13:00:53 +0000
ROA not after: Tue 10 Jun 2025 13:00:53 +0000
asID: 396560
IP address blocks: 2001:500:121::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:29:e3:d3:c7:85:26:0a:46:29:ab:24:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 12 13:00:53 2025 GMT
Not After : Jun 10 13:00:53 2025 GMT
Subject: CN=d3f5c9d2-ec86-4592-b59c-e5e4f88d2af3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:04:4e:3d:9a:47:9e:59:f9:1e:36:32:c8:c7:
d5:90:90:b1:91:e3:35:e7:5f:fb:9e:f3:69:f2:89:
94:7b:0e:0d:6e:33:11:82:64:ce:da:53:1b:93:e2:
86:02:48:2d:24:7b:a3:70:a5:ea:93:3e:1e:a6:8e:
03:90:cf:f5:de:c8:80:f5:a7:1d:5a:6a:cc:e9:f9:
ba:30:8b:f0:f2:ef:08:b9:7a:24:21:ae:21:12:91:
7b:e6:57:04:f0:62:75:b1:34:6f:dd:78:c3:07:76:
45:91:a8:c1:b0:00:9c:90:79:e7:eb:55:a4:ec:02:
cd:8b:df:c6:7c:2a:39:f3:ad:f8:1b:60:93:03:8b:
99:87:b1:3b:90:e7:14:fd:0b:74:5c:ba:57:38:b5:
ea:e9:6c:cb:76:4f:42:a7:03:62:2c:b1:9a:2e:0e:
05:ea:72:60:c5:e6:62:69:78:ae:7f:9c:bd:7f:e7:
57:ca:26:7a:ca:3b:99:da:f8:5e:a9:cc:a9:8a:5d:
57:be:5d:30:59:f7:9f:50:6b:94:46:29:48:4e:1d:
63:63:66:35:ae:07:5d:87:c8:fa:1c:b5:bc:9a:18:
84:e0:c5:ea:f4:43:86:e9:89:ff:97:13:06:90:f4:
7a:77:e6:5c:22:1b:df:eb:b3:38:cc:f3:18:b3:96:
7f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:71:1F:ED:4C:DD:58:7C:12:84:AD:BB:A4:F3:61:D3:D1:DE:FF:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/209757fa-1357-3de0-bfd1-85051af898c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:121:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:4b:1f:82:a3:1b:c1:ce:d3:1a:ae:ce:74:91:62:4d:fd:b6:
3b:9e:25:33:0f:2c:ed:0a:9f:2d:ce:2f:d5:33:96:b4:1d:80:
10:ef:3b:5f:0c:49:1a:db:38:37:4b:3d:51:c5:e3:11:64:32:
80:ed:0a:c0:fa:21:e9:0e:12:8f:c8:c1:3f:71:48:b8:dc:70:
ee:1d:7f:95:f9:ef:4e:92:60:60:00:8a:86:fa:90:37:68:10:
33:53:0f:93:74:f4:72:56:66:2d:5b:7e:d0:68:76:05:b5:ef:
42:0a:43:55:9a:4f:60:f7:f3:a5:69:3d:c7:f9:be:0e:ca:b1:
64:1f:fb:09:4b:5a:20:cb:1e:1b:d2:83:66:30:b0:66:bf:bc:
26:ec:8c:b0:87:a8:52:f2:6b:c4:d3:99:51:1e:ab:7d:67:9a:
a9:3c:8b:c4:b8:38:37:13:c0:fe:f8:02:fc:23:78:e6:60:a4:
a6:d8:93:26:a6:81:d6:09:f3:b8:b7:2f:31:92:96:97:86:f9:
7e:08:ea:db:8c:7f:3c:c0:d2:41:1d:60:c7:26:93:77:c5:03:
61:de:29:ae:45:17:8e:36:4d:6d:36:17:1b:a5:d3:d6:c6:2a:
c1:46:57:52:10:96:f6:45:b9:27:1a:10:ec:6b:0b:39:34:5f:
e6:c8:22:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:05:59 2025 by rpki-client