Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6497c9e3-fb84-3e55-9be2-7cb7517a94c5.roa
File: 6497c9e3-fb84-3e55-9be2-7cb7517a94c5.roa (raw, json)
Hash identifier: u40YpwHoR5KTcY84l0So6JsUO/I/5YidJ9/r80R2nWw=
Subject key identifier: 95:4F:FF:2D:D1:B6:5F:25:F8:15:0F:B7:92:FD:9F:5F:EE:04:7E:90
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848906AB43BB1E5DD36D96F4A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6497c9e3-fb84-3e55-9be2-7cb7517a94c5.roa
Signing time: Thu 16 Jan 2025 13:38:17 +0000
ROA not before: Thu 16 Jan 2025 13:38:17 +0000
ROA not after: Wed 16 Apr 2025 12:38:17 +0000
asID: 397210
IP address blocks: 2001:502:1ca1::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:6a:b4:3b:b1:e5:dd:36:d9:6f:4a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 16 13:38:17 2025 GMT
Not After : Apr 16 12:38:17 2025 GMT
Subject: CN=fbfb4f71-edec-4c70-b739-aadb294cb17e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ca:94:ba:bc:4f:46:79:d9:58:a6:d3:2b:5f:
d9:5c:01:37:eb:5e:8b:b0:ec:23:51:dc:44:63:18:
01:ce:8e:f8:ea:a4:78:9a:7b:1a:97:04:19:aa:7c:
24:52:29:e4:11:37:08:05:db:f7:43:09:9f:d1:24:
c5:72:c6:d8:7c:1b:06:30:1c:a9:3f:f4:20:38:42:
8b:aa:ef:e2:d4:32:33:aa:e7:62:c2:ae:62:ef:57:
b6:81:6d:84:b8:d6:70:cd:61:2d:cf:ba:9e:5b:12:
96:2a:ee:6b:8b:7c:95:23:15:c8:fe:89:15:37:8d:
36:13:b8:2c:61:39:08:fc:7f:e9:54:78:f5:a2:80:
54:59:8e:4c:0c:ef:c2:c0:38:ec:47:be:04:48:75:
4b:33:09:11:4a:f2:1c:08:29:3f:38:c9:36:ef:c3:
7c:21:eb:1f:a3:aa:6d:be:c4:89:f5:48:22:01:06:
b2:d1:25:37:4d:42:92:95:41:38:d8:4c:1d:f2:a9:
38:c9:55:ce:a6:58:9e:4c:b7:dc:58:92:4b:c4:c3:
dd:83:4b:df:38:e5:16:09:f3:0a:c9:c1:41:00:15:
92:95:53:dd:8a:9e:fc:2f:86:aa:6d:b5:23:14:b0:
ba:50:31:6a:6f:85:d3:d1:4a:e7:64:65:17:11:fd:
0b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:4F:FF:2D:D1:B6:5F:25:F8:15:0F:B7:92:FD:9F:5F:EE:04:7E:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6497c9e3-fb84-3e55-9be2-7cb7517a94c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:1ca1:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:da:8d:f3:51:5c:6b:aa:17:92:f7:5f:85:7f:30:fb:95:df:
a4:db:44:6e:7b:6f:27:99:cc:7f:29:5c:25:62:50:39:f9:f4:
b4:68:f8:57:2c:76:6c:f7:0b:9c:b7:42:a5:70:e5:fa:15:88:
b7:0f:b2:2a:12:1d:90:e2:d5:01:87:36:26:05:44:81:1c:c7:
4c:6e:fd:cd:b9:40:82:f1:d5:31:bf:9d:af:01:73:16:f9:a1:
72:7e:a3:58:a4:3d:45:ee:64:c9:79:0d:b7:7b:10:ca:a3:3a:
eb:1a:cc:6f:fa:7d:48:9f:12:5e:dc:cf:91:34:32:3d:95:06:
75:ca:7f:c7:01:f3:ee:09:7c:2c:51:22:97:4d:61:88:39:7d:
08:73:99:fc:48:60:63:fb:75:fd:0e:e0:84:e5:7d:4b:83:cc:
42:e5:76:7a:3a:00:88:89:10:94:30:a0:fc:40:b2:8f:67:35:
1e:21:cb:db:30:09:18:ae:10:dd:48:50:fa:31:c4:dd:b9:a4:
38:31:8c:2d:46:fb:10:9b:d3:15:16:a9:8f:3e:cd:b0:3e:f0:
6d:a4:0c:e3:31:10:2e:a3:94:a8:56:8a:14:9f:7a:72:a7:24:
70:8a:59:d4:5b:29:c6:47:f7:f7:52:85:c5:35:7f:fb:bc:a0:
94:48:2f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:19:37 2025 by rpki-client