Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/46443bbe-dfe0-3b0c-9815-060f74077972.roa
File: 46443bbe-dfe0-3b0c-9815-060f74077972.roa (raw, json)
Hash identifier: 6S/ERods17mKlsemdkEyLOTUsoBTCNi2YILfODWhw7g=
Subject key identifier: 41:5A:06:E5:A9:D1:88:0B:18:62:AA:3A:D3:3A:B5:90:DB:72:3E:A1
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489BA0BD6D5A5361194815B980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/46443bbe-dfe0-3b0c-9815-060f74077972.roa
Signing time: Mon 20 Jan 2025 14:00:51 +0000
ROA not before: Mon 20 Jan 2025 14:00:51 +0000
ROA not after: Sun 20 Apr 2025 13:00:51 +0000
asID: 396549
IP address blocks: 2001:500:30ff::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9b:a0:bd:6d:5a:53:61:19:48:15:b9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 14:00:51 2025 GMT
Not After : Apr 20 13:00:51 2025 GMT
Subject: CN=70d231ea-5bf5-47d7-a12d-fe0a42a35f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ba:fc:c4:90:36:a5:a2:e5:70:e9:45:83:dc:
22:b8:db:b4:72:91:e0:de:aa:6a:73:bb:9d:a7:e1:
86:97:39:45:fd:72:1f:64:55:61:ea:8e:52:17:23:
21:d2:79:9b:a9:86:9e:98:15:b8:99:35:d6:ff:93:
22:62:62:1a:c4:ef:17:04:c7:1e:0f:fd:d5:94:29:
9e:c5:85:39:76:4f:81:d8:df:49:82:0d:7d:5c:e4:
8b:81:fd:38:41:9f:19:eb:bb:1f:7c:67:09:7f:32:
f5:ce:b3:6a:3e:b4:b0:70:91:e4:29:08:24:13:71:
1d:2c:10:14:83:8a:b3:de:75:84:36:df:2a:6a:c5:
3b:9d:e6:45:c7:5d:88:68:4b:f7:02:d5:86:b5:28:
58:e3:70:a2:7d:33:74:a4:54:47:41:13:83:7e:d8:
96:4a:61:cd:ce:b7:37:48:87:e2:0e:d2:9e:bc:ec:
bc:a7:69:59:99:b8:96:9c:7d:d4:11:67:95:33:4b:
d9:d5:e3:7a:95:07:8f:9a:2f:43:ab:f2:0d:37:05:
b7:05:a3:3d:52:8c:99:15:c3:c9:c4:c9:05:79:f9:
f6:bb:56:89:fa:01:c7:3c:4a:6f:8b:64:26:ae:2b:
99:93:fd:bb:6c:c7:2b:97:2e:21:6f:34:d1:0f:fe:
ae:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:5A:06:E5:A9:D1:88:0B:18:62:AA:3A:D3:3A:B5:90:DB:72:3E:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/46443bbe-dfe0-3b0c-9815-060f74077972.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:30ff:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:99:a9:fd:8f:be:17:3e:3c:d5:39:13:ea:6d:77:13:bf:86:
59:b1:fe:df:8d:15:62:da:1e:0c:44:08:14:aa:cb:b1:e4:66:
5c:30:79:bd:d2:47:b5:1a:44:1d:7c:19:da:e5:9f:6a:4f:55:
4b:db:d9:4b:72:76:94:4d:ae:3a:e5:6b:7f:8e:23:70:db:6b:
f5:5b:5b:2f:07:63:c5:35:f5:b8:73:8d:70:d7:5d:70:e2:93:
a0:22:48:74:62:5a:a0:33:29:95:4d:93:6a:d7:aa:76:77:95:
46:05:e4:ba:9a:31:36:0d:55:66:9f:0d:9d:f7:26:7a:d4:bf:
75:e6:d8:98:44:4e:af:52:61:1a:e2:fa:15:e7:06:d1:08:b1:
5e:fb:01:ad:fd:9d:c7:f0:b4:ba:91:ac:e5:6b:f7:aa:5f:7e:
b9:fb:59:bc:fe:3f:2e:93:c3:20:d3:0b:27:4c:f6:de:ba:3d:
47:e6:70:6c:55:22:43:16:e9:9a:5b:c7:c0:87:33:43:b1:b8:
52:1a:8b:86:47:66:02:11:b3:56:b1:14:6a:9e:a0:67:06:78:
4a:d3:f7:6f:f7:53:49:d7:a3:a0:8c:6f:8d:b7:a6:80:9f:fd:
8e:27:e6:89:94:b7:c9:5d:45:2b:8c:38:26:ff:cf:e1:91:42:
7c:29:ed:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:10 2025 by rpki-client