Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/66ae8f4f-03bc-3648-a4b5-4664e369c0bb.roa
File: 66ae8f4f-03bc-3648-a4b5-4664e369c0bb.roa (raw, json)
Hash identifier: wEziJIfIpFwurQQiI+yDVi/iooiE98aTosEnOnhJCNw=
Subject key identifier: BB:5A:3E:F9:4A:2C:4C:D0:A9:94:8D:0D:83:01:6A:68:07:3D:04:69
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584940398509AFA85A8606A25BC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/66ae8f4f-03bc-3648-a4b5-4664e369c0bb.roa
Signing time: Thu 20 Mar 2025 13:00:53 +0000
ROA not before: Thu 20 Mar 2025 13:00:53 +0000
ROA not after: Wed 18 Jun 2025 13:00:53 +0000
asID: 396614
IP address blocks: 2001:501:8a29::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:40:39:85:09:af:a8:5a:86:06:a2:5b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 20 13:00:53 2025 GMT
Not After : Jun 18 13:00:53 2025 GMT
Subject: CN=285bd02e-d771-45de-b2e2-850e2f211c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a3:0d:17:d9:f8:c5:04:94:8c:1e:82:68:02:
83:96:27:76:09:dc:22:73:4d:3a:dc:12:cc:45:83:
90:fd:da:4f:aa:f7:f4:87:fc:88:31:69:08:ac:4f:
61:c7:e8:2e:e7:65:01:0a:4e:32:88:31:82:ce:dd:
94:0b:14:3e:1c:58:85:34:ff:53:f6:33:74:cc:ad:
a4:13:08:b8:78:ec:20:4f:fa:0e:da:18:40:48:cd:
22:0a:45:26:f8:7c:d2:ee:d5:dd:b9:43:21:47:16:
8d:b1:5f:04:f1:69:f5:ea:5b:45:03:df:54:80:3f:
77:49:6f:b3:1a:f5:62:8f:ab:63:22:1b:00:72:75:
1e:61:e6:30:fb:39:f1:3b:be:1b:25:1c:a4:41:56:
9a:ba:ee:1f:aa:6d:07:56:14:2d:c8:5c:5f:8d:a8:
2d:05:7c:b1:ae:30:db:c5:cc:a3:f9:8c:2b:66:1a:
44:e2:af:ec:3e:be:8b:d8:9f:2d:33:0d:90:f0:e1:
d4:6f:d3:74:98:6f:00:c6:17:42:c3:af:0a:0b:75:
48:bc:64:e7:6d:95:78:0a:17:3a:dc:e6:69:7a:3d:
e6:82:4d:64:d3:27:91:7d:24:af:82:9c:46:65:82:
c3:23:7b:f2:c9:0f:bb:01:1e:df:e5:51:4c:82:a1:
c6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:5A:3E:F9:4A:2C:4C:D0:A9:94:8D:0D:83:01:6A:68:07:3D:04:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/66ae8f4f-03bc-3648-a4b5-4664e369c0bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:501:8a29:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:a5:52:2e:a6:db:dc:af:0b:8b:18:3d:ec:40:db:83:e0:f2:
39:1f:5c:fb:b5:5a:f8:92:ff:d3:3f:65:a4:88:4e:97:0f:b9:
fd:a8:f6:d8:28:ae:41:e3:d4:56:a2:60:f0:3c:7d:c7:2e:fd:
26:39:1a:8b:e7:3c:96:8e:e3:d3:c1:94:1c:57:32:e4:f2:6e:
8e:cf:da:5a:51:e0:9d:67:0e:39:18:76:b6:54:46:0f:b7:bd:
1f:25:cb:6d:2e:10:f3:da:3f:7c:b7:b8:b1:de:66:f6:ea:3f:
b6:87:3f:ee:a2:4f:e3:3c:19:e1:0d:f2:20:0a:0a:ce:90:3e:
20:0c:19:2e:9c:1a:d9:e8:a6:e8:ab:cb:7b:72:94:49:4c:52:
bf:89:e3:b5:41:83:0d:e1:8c:4f:86:e6:49:ae:b4:b7:90:d1:
11:23:c0:a2:e7:2d:37:88:8a:01:c1:12:21:3a:35:e4:48:15:
d3:a9:53:9a:d2:64:b6:52:cc:b7:42:ce:cf:b7:e6:1e:e7:c8:
37:66:80:3c:17:07:62:bc:38:39:3c:d6:67:84:e5:59:33:44:
75:83:a9:cd:ea:7c:19:51:f6:15:40:79:b9:aa:72:79:c6:7a:
3e:4e:f4:0e:30:31:11:d9:6e:b8:78:aa:76:65:83:80:27:b6:
27:be:04:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:00:49 2025 by rpki-client