Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/39efb20d-56f6-339b-aa82-adfd66c2994c.roa
File: 39efb20d-56f6-339b-aa82-adfd66c2994c.roa (raw, json)
Hash identifier: NqBKg3jofOFrsqhKNh7ukVkycXHCrp55ErvFP2pFN5Q=
Subject key identifier: 35:A0:81:2D:91:BD:1E:B4:90:DF:DF:34:E7:04:CE:CC:1A:35:0A:4F
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858493243F5D393516D90A57735C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/39efb20d-56f6-339b-aa82-adfd66c2994c.roa
Signing time: Sat 15 Mar 2025 13:00:52 +0000
ROA not before: Sat 15 Mar 2025 13:00:52 +0000
ROA not after: Fri 13 Jun 2025 13:00:52 +0000
asID: 396567
IP address blocks: 2001:502:cbe4::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:32:43:f5:d3:93:51:6d:90:a5:77:35:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 15 13:00:52 2025 GMT
Not After : Jun 13 13:00:52 2025 GMT
Subject: CN=32efd906-4a4e-4596-8ff3-e0888d8e8db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fa:c2:61:5f:a6:08:78:b7:f6:4d:30:5b:e6:
0e:f2:07:2a:0b:dc:8a:56:fa:11:f4:fc:d3:05:41:
2a:3f:8d:9f:19:a3:f5:c5:3f:93:25:e8:e2:04:76:
50:cc:9b:6b:56:51:bc:f1:1f:e2:5c:0e:c3:d8:a1:
12:5f:eb:d3:bf:63:03:bc:54:cf:a8:7f:09:3f:15:
4b:ae:d8:7c:16:3e:44:0b:68:56:6c:7f:25:b3:04:
1c:01:aa:8b:4b:4e:b7:50:8e:72:bd:4f:25:bd:15:
f5:21:d9:39:a0:6e:b5:78:bf:60:cb:25:41:9a:44:
36:f8:59:0d:64:aa:0a:a0:36:fd:e5:ca:01:01:62:
a3:54:22:4a:1f:0a:21:42:53:66:a1:09:93:4b:d9:
60:81:1a:c7:5b:60:b5:4f:c1:ef:b7:6b:f0:8c:de:
9e:33:95:56:43:04:11:42:94:99:d2:d4:69:34:34:
85:17:21:42:92:c8:4a:93:c4:a6:90:2b:f3:e3:7f:
c2:f5:b3:5e:8d:99:e1:19:73:b3:56:82:94:cd:4a:
55:9d:cf:c2:0a:8b:26:2e:9f:d7:46:08:2c:51:e3:
5d:fe:de:01:04:99:b1:1e:af:fa:6d:d8:2c:be:57:
4f:d2:0d:da:25:b2:d3:cc:05:aa:52:91:d5:ce:51:
e1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A0:81:2D:91:BD:1E:B4:90:DF:DF:34:E7:04:CE:CC:1A:35:0A:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/39efb20d-56f6-339b-aa82-adfd66c2994c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:cbe4:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:4b:90:7a:79:a3:33:e5:09:ef:9e:10:c1:b7:05:48:d5:a3:
12:58:d5:e8:d3:16:0e:75:93:17:01:79:6f:2b:53:b8:17:83:
79:c5:c4:b2:aa:bb:cc:8c:4d:3a:e5:74:1e:61:1c:f3:2e:9e:
2f:46:0d:ee:9e:2f:54:d8:9d:ba:eb:09:fa:46:83:0e:dd:b3:
3e:46:ce:82:16:0d:b5:c3:49:db:0a:34:cf:ea:f0:1d:45:f1:
e0:24:7b:b1:0e:d4:38:60:ea:3c:20:ae:36:b1:d9:d6:9d:05:
64:e0:d2:3b:89:67:32:4f:d4:54:d8:ad:8d:3d:f9:e6:f9:b5:
eb:8b:e2:1a:57:29:8c:cb:93:50:f3:6b:35:81:d1:f4:4f:3f:
75:e4:75:df:f2:12:d0:a0:84:b9:ab:c9:01:78:d1:01:2a:e6:
f6:d8:b0:61:59:ea:a8:2a:d1:6c:3c:f3:89:d7:b5:14:90:1e:
89:13:7a:45:c1:a0:1a:8a:67:68:39:2a:bc:52:24:ce:4b:16:
39:d6:fd:da:8f:61:3c:f6:06:70:90:a4:eb:18:f2:bc:3c:72:
59:94:b8:e8:e8:ac:13:54:19:6c:c7:ac:a5:bf:28:7e:c7:71:
08:b7:42:4e:26:7f:75:96:66:7a:62:68:cf:5f:b5:e5:fe:27:
35:b2:c6:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:33:04 2025 by rpki-client