Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c383d79-0bba-3042-a2c6-1f2051c49407.roa
File: 3c383d79-0bba-3042-a2c6-1f2051c49407.roa (raw, json)
Hash identifier: O5ZWX5/Kp71QZkD97WxwPjysiWp2MhHyxfcdnRD5Omk=
Subject key identifier: 6E:27:52:8C:C5:CE:2A:A8:DF:89:0D:EC:24:E3:81:8A:45:E6:19:EF
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183E9778FFB0ADB58CDC300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c383d79-0bba-3042-a2c6-1f2051c49407.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 396560
IP address blocks: 2001:500:124::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:e9:77:8f:fb:0a:db:58:cd:c3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=e44f231e-ff28-450a-91db-7b075df95ebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:90:21:73:3b:51:7d:ca:4b:ac:89:e0:96:b2:
3a:a4:f5:f0:45:70:17:43:b3:c6:ed:b0:95:02:71:
dd:56:85:f7:df:dc:a6:81:0c:e6:b5:4d:57:ae:61:
eb:1a:58:1f:aa:27:9f:9c:46:65:91:48:be:0c:51:
a8:16:7c:2a:f0:47:11:d1:88:7f:0b:f7:59:37:52:
ba:ad:7f:ed:bc:42:16:60:ee:a2:0f:0c:42:e2:7d:
32:a6:c1:17:b2:c3:7c:a7:f8:5f:6e:7a:38:3d:77:
02:13:9d:ae:7d:da:a4:a7:45:cb:56:17:b9:ea:3a:
35:18:68:ea:e5:92:82:e7:a3:40:20:8e:6b:e4:aa:
32:c9:e7:42:3a:bf:ff:4c:c5:0d:ac:6f:db:33:e7:
2e:da:14:7c:f9:42:a0:cd:f5:71:f1:59:3b:66:72:
a2:4a:51:b1:9d:c0:d2:cc:31:e0:8d:4b:29:da:1a:
3f:9d:8b:86:d1:64:37:1a:ac:3d:7e:e8:fc:75:f2:
92:a6:33:29:33:4a:e0:c6:7d:82:02:b3:85:2c:19:
d1:8c:85:44:2b:cf:07:e8:40:f2:b1:eb:85:ef:2a:
d3:91:9b:2f:3b:b0:9e:a3:42:f7:0b:9b:83:ca:c8:
2a:e1:43:5a:43:73:a4:b0:02:46:40:df:94:25:c4:
b1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:27:52:8C:C5:CE:2A:A8:DF:89:0D:EC:24:E3:81:8A:45:E6:19:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c383d79-0bba-3042-a2c6-1f2051c49407.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:124:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b7:ab:cc:36:83:c5:7b:e2:0d:ee:82:d3:f7:12:57:70:5d:ea:
88:df:3d:cf:45:60:98:cb:e4:b9:95:e3:a8:d0:22:29:a2:e6:
72:00:68:39:70:f9:57:fb:d4:b2:30:23:97:f2:09:80:d3:da:
b5:21:08:52:b4:8e:0d:ab:a8:38:94:38:3d:36:cd:ba:5f:e1:
bc:36:5f:ff:ac:44:a8:6f:6a:a5:24:47:57:28:99:f4:93:bc:
c9:6e:25:b6:f3:cc:fa:a9:8d:71:c9:03:fc:62:8a:e9:0b:e8:
04:ef:a3:f0:99:f9:4d:dd:15:45:7f:59:49:a0:12:42:70:83:
f5:5c:fd:36:34:84:4c:82:65:32:2e:3d:9a:79:3e:ac:96:d0:
4c:1b:2f:58:0d:10:a0:30:70:24:41:de:a7:ab:d3:c4:75:79:
d3:5f:96:87:45:dd:ca:7b:54:7f:93:50:f0:3b:ce:a7:9b:4a:
7b:11:12:d3:f8:78:a5:6b:b3:1a:79:d3:33:13:47:3f:5a:59:
38:bd:7c:52:88:90:6c:34:47:54:df:fa:46:2a:36:6b:ff:47:
36:e6:92:e5:94:ee:ce:72:ff:26:94:15:c4:9d:b4:d5:cd:22:
5b:58:9b:07:88:7b:71:9f:3d:cf:7c:97:b8:b8:83:54:c3:55:
07:e6:31:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:36:10 2025 by rpki-client