Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/407bf5f1-b7b5-3a6b-85fb-1bd641fe077b.roa
File: 407bf5f1-b7b5-3a6b-85fb-1bd641fe077b.roa (raw, json)
Hash identifier: mUCzkWa70tzOw7XpfayIyOyyrnaPCUxZtHQOeelhTjI=
Subject key identifier: BF:BD:80:AB:C1:85:0F:17:FB:51:86:FD:93:BE:6F:19:0A:63:4B:A5
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285849244E9595424E7D2EC51C3930
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/407bf5f1-b7b5-3a6b-85fb-1bd641fe077b.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 396600
IP address blocks: 2001:500:122::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:95:95:42:4e:7d:2e:c5:1c:39:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=42a55525-c191-497f-b3d7-6dffebde0b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:14:ef:31:ff:c0:34:6e:7f:3f:dc:c5:58:43:
cb:dc:ee:54:36:2f:a0:98:e4:f3:44:0b:d0:7d:91:
a7:e0:c3:39:02:cb:f3:c0:09:25:09:6e:25:72:a6:
e1:7e:43:6c:01:df:15:93:41:2c:d5:85:58:61:46:
31:bc:d2:13:d9:6c:31:02:27:27:57:25:de:7a:30:
de:65:0d:a4:26:26:de:f8:4c:3f:20:4e:99:6a:ad:
b2:1d:b3:e7:49:21:ac:67:6c:4e:de:bc:36:cf:b7:
7e:0a:96:65:35:2b:f4:6a:7d:fd:c2:02:ac:fc:d7:
c5:79:7c:b6:d4:16:10:0c:2b:b6:87:b0:04:65:39:
56:91:44:91:a1:45:ad:f9:78:b4:e5:fa:da:39:a7:
74:58:f6:01:61:56:92:25:9c:c2:3d:ed:55:62:79:
ec:a2:55:af:76:5c:6c:9c:e9:dc:0e:17:dd:45:b4:
9b:46:21:95:95:98:d6:76:2f:b9:16:2c:8c:4c:f9:
d4:22:49:22:2d:22:3c:5f:e2:f1:52:af:94:f5:86:
48:a5:b8:ee:2a:2c:84:79:01:80:db:6a:1f:0c:7c:
2d:3c:8d:5c:87:f5:1d:62:b6:03:27:5f:28:2a:73:
05:66:fa:eb:bb:10:db:b0:85:32:8e:9b:95:e3:f3:
d4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:BD:80:AB:C1:85:0F:17:FB:51:86:FD:93:BE:6F:19:0A:63:4B:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/407bf5f1-b7b5-3a6b-85fb-1bd641fe077b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:122:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:da:a4:74:f0:74:bc:06:a3:ae:2b:e5:0e:5d:78:bb:12:22:
cc:d7:70:08:f3:f5:29:6c:31:f7:9f:e5:e7:6c:4b:a1:e3:59:
1c:92:a6:af:f7:48:b1:eb:43:57:17:4a:d2:43:60:f2:e9:f6:
06:02:4a:89:46:5f:bb:34:a0:b8:bb:09:d3:7f:2c:97:15:70:
20:1e:79:8f:44:4d:d5:a9:5d:01:bd:d1:e8:93:99:07:ca:c8:
31:73:83:be:dc:37:a0:05:fd:71:f3:02:c2:66:f4:09:a7:bf:
e9:c6:4e:e3:df:3e:93:f5:3a:61:62:20:f5:9c:8f:1a:f1:cb:
d6:27:6d:fa:06:c1:68:6a:ff:fe:11:91:0a:1e:51:1d:33:e7:
af:ca:1c:71:6a:c0:b9:a0:a9:a3:fb:9c:6a:99:31:9f:12:93:
23:2f:63:47:66:f2:a7:44:66:bf:3e:6d:e5:5a:c6:ca:a7:d2:
f4:bf:61:8c:e7:5b:ec:5a:a3:fc:3d:6a:69:6d:2e:27:bc:13:
b5:33:86:b7:6a:a3:af:5d:23:16:ce:69:d1:f3:c6:9a:3f:c2:
f5:5f:aa:a2:5e:f7:8f:dc:b6:3c:c0:a2:67:b6:c6:5a:fb:63:
f1:ea:bf:2d:db:4d:40:e1:d4:f7:5d:93:0d:90:6b:f2:cf:96:
09:80:33:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:43:23 2025 by rpki-client