Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6a017884-59b8-3adc-a3b9-ab9379fd829b.roa
File: 6a017884-59b8-3adc-a3b9-ab9379fd829b.roa (raw, json)
Hash identifier: tZeDJxlb3kf4T7IAqLNaEJKfs76C2hWhBWn82JYDswU=
Subject key identifier: 59:CC:C8:88:76:FC:D9:B6:34:C6:FB:DB:12:99:CA:56:CE:A7:95:49
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285849244E96E080DC3948A99B37C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6a017884-59b8-3adc-a3b9-ab9379fd829b.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 397204
IP address blocks: 2001:500:122::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:96:e0:80:dc:39:48:a9:9b:37:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=09eb1d10-944d-42ee-a27d-ebb3a107c5a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:21:2d:27:44:6a:c2:0f:ea:1c:8b:42:1b:a6:
00:c5:85:5e:70:da:b7:5b:ca:c0:db:c8:23:bd:1c:
5a:fb:44:c8:81:81:01:8c:0c:6a:33:9b:c0:b6:4e:
a2:c2:e3:92:e2:9a:60:a3:2f:f8:d1:d5:f7:7e:a1:
d8:6e:f8:1b:18:ea:5a:4e:50:93:58:8e:27:12:81:
7e:a5:89:24:8d:1f:a7:ab:1d:47:a5:a5:9f:a7:a7:
be:cb:16:10:22:56:62:fa:a2:37:4a:55:1a:67:53:
55:2c:13:57:46:28:b3:86:69:de:d4:ba:73:a1:82:
76:9c:9b:6d:26:37:43:f3:9e:f0:47:f9:d2:a5:7b:
59:f1:59:36:1f:f1:f9:9b:ae:08:b3:41:30:be:3b:
bf:52:25:78:38:15:aa:7c:35:e1:f6:8b:47:27:74:
d7:83:f3:d3:4b:b6:c3:23:48:9f:81:88:35:74:bd:
79:a0:61:24:e5:57:0e:b7:ab:67:f2:9f:28:8f:d8:
ae:0c:b9:78:ea:8a:a9:20:f1:41:fa:dc:e6:0e:24:
c1:20:04:66:fc:65:f9:63:84:9b:92:90:b8:86:84:
48:06:aa:34:04:62:32:0b:ed:52:4a:30:fd:56:56:
08:5c:c7:c4:0d:5e:b0:17:b3:32:57:d7:06:b2:c9:
0c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CC:C8:88:76:FC:D9:B6:34:C6:FB:DB:12:99:CA:56:CE:A7:95:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6a017884-59b8-3adc-a3b9-ab9379fd829b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:122:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:2d:68:f6:9b:2b:68:d2:83:b2:7a:69:15:43:26:bf:48:a8:
a1:1f:c6:7d:5d:23:60:aa:e1:7e:8b:c6:cd:b4:78:66:a4:93:
c8:5d:ac:bb:93:d4:06:80:d5:cf:d7:f4:fc:e0:8e:1a:5d:83:
cf:c0:2b:c6:88:55:d9:7a:7c:75:b5:cc:97:c6:72:89:65:86:
10:62:a1:82:5e:77:48:36:5b:78:9b:c6:0a:dc:34:95:75:26:
91:a3:12:5f:4e:41:95:5d:dc:c6:21:da:85:ef:3a:3e:ca:30:
97:6e:39:b9:e8:24:98:f9:e2:4c:f9:05:91:49:b0:4e:a2:6a:
aa:6a:b5:a7:6c:64:25:2a:80:7e:8b:ba:3b:b4:bd:78:94:4d:
c7:56:1d:8c:39:90:d1:f7:b2:c3:48:4c:a3:4b:f0:bd:f8:7f:
fa:38:60:0c:66:53:ca:7c:99:9f:b2:57:78:4a:2b:44:b0:ed:
9f:02:6c:05:51:81:04:af:28:1a:48:b2:dd:de:19:2b:04:df:
6c:8b:d5:64:5c:d3:68:36:27:9d:58:40:f4:b2:80:70:19:b1:
54:aa:31:2c:77:39:eb:17:f3:1e:79:bf:76:e3:8a:a3:07:c0:
f1:1b:24:37:73:f9:fc:e9:8d:90:33:47:91:4b:ea:4d:d5:c6:
34:37:f0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:50:15 2025 by rpki-client