Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/344c50bb-3dc4-3822-86f7-50e1888e6588.roa
File: 344c50bb-3dc4-3822-86f7-50e1888e6588.roa (raw, json)
Hash identifier: V1i7r7I977Nhxyr9/oqgFdnLdgqiTo0Q3B1sOCd1dbg=
Subject key identifier: 28:DF:F5:47:45:7D:10:72:5B:24:D6:60:74:CC:F1:AB:43:33:66:6A
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489BA0B6EB7A63654C794A9200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/344c50bb-3dc4-3822-86f7-50e1888e6588.roa
Signing time: Mon 20 Jan 2025 14:00:51 +0000
ROA not before: Mon 20 Jan 2025 14:00:51 +0000
ROA not after: Sun 20 Apr 2025 13:00:51 +0000
asID: 40647
IP address blocks: 2001:500:30ff::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9b:a0:b6:eb:7a:63:65:4c:79:4a:92:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 14:00:51 2025 GMT
Not After : Apr 20 13:00:51 2025 GMT
Subject: CN=14966ed2-d49f-4c52-a7a7-a05f9e13f562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:30:65:ef:a6:34:c7:88:bd:83:9f:44:8a:5e:
75:42:63:9d:08:86:8a:1b:79:e6:ff:04:6a:33:6e:
33:89:90:53:7d:dc:da:2a:67:54:77:b7:ca:27:3a:
06:ac:67:bf:fa:74:18:12:c6:62:ff:a4:a8:86:05:
af:27:f5:1d:01:b6:fe:c2:78:ea:89:04:e3:7f:a6:
af:5e:fd:cf:99:02:46:23:1b:02:42:b5:f2:ae:3e:
62:b9:79:64:e4:df:fd:6a:f9:19:70:e7:20:78:1f:
4a:3e:e4:0e:9f:aa:ff:5c:cb:b1:74:46:d6:6a:78:
48:25:e5:58:cc:88:20:37:37:f1:87:74:34:3c:dd:
87:95:5a:8e:f7:90:3f:ec:bb:22:51:7e:28:e3:dc:
00:17:5d:94:53:db:9e:4b:8e:fe:a5:d2:98:f4:8b:
82:b2:5d:6e:1a:35:a5:27:20:86:a0:bf:fd:67:2f:
6b:c6:bc:84:34:44:85:23:86:ec:1c:6f:aa:b3:1a:
80:70:ea:85:93:6b:a6:a6:0b:04:98:5f:65:0a:2d:
f1:ec:e9:fd:35:20:34:71:a5:d5:c7:53:61:33:bf:
9e:49:a6:0e:0e:07:16:13:35:b9:de:64:71:91:cb:
d5:9c:29:c5:90:26:db:9d:7b:be:13:e5:15:bf:18:
c3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:DF:F5:47:45:7D:10:72:5B:24:D6:60:74:CC:F1:AB:43:33:66:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/344c50bb-3dc4-3822-86f7-50e1888e6588.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:30ff:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:a4:56:db:75:20:a7:ec:ee:8c:20:cc:e9:9a:31:ae:b8:05:
f2:68:d6:d5:c5:f7:d4:87:7a:a3:76:bb:5e:13:1e:d1:19:b3:
f0:0f:3c:a7:2b:0e:4e:fb:61:5b:1e:c0:7f:14:3e:c9:3f:14:
a6:69:20:ec:a4:e2:f2:59:73:e8:a2:13:36:eb:92:de:f3:ff:
a5:bd:65:ac:08:73:0b:e7:ae:7e:6b:7f:99:ea:eb:dc:96:83:
b7:09:ff:e5:0a:31:f3:67:e5:32:5a:37:23:0f:e6:c3:b8:15:
1c:83:97:f4:18:0e:29:d5:b5:24:a0:7d:33:0c:d7:08:8f:d6:
c2:a3:ea:cd:a9:d1:9f:f3:41:59:54:12:4a:60:69:63:6f:7d:
86:49:c1:9a:cd:e9:05:ca:16:93:b5:11:ad:1e:0c:59:c1:a5:
2e:b5:ba:38:aa:db:74:17:8f:68:a0:6a:15:6d:f1:0e:3e:d3:
b5:a3:7d:ee:a8:ba:f7:a0:27:4f:04:61:c2:2e:e4:78:bd:27:
01:5c:8a:95:ed:fd:51:86:db:22:ec:91:f9:86:ba:25:7f:0e:
01:bb:40:af:d3:0d:4a:b4:a9:a2:95:83:a1:d1:36:c9:25:7a:
e8:8f:8f:e7:d1:fe:40:cb:6b:80:7d:45:23:b2:94:50:ad:e9:
c5:49:8a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:02:37 2025 by rpki-client