Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/71824ada-8f3c-305d-a720-6fb730cd6356.roa
File: 71824ada-8f3c-305d-a720-6fb730cd6356.roa (raw, json)
Hash identifier: iq4hghxAbTwVe182qoq73TjJShd3T5GOPZ4/XxOXVEY=
Subject key identifier: 79:9D:C2:E9:05:12:1E:0D:27:48:0E:43:85:12:87:73:6B:F6:1A:CB
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858494039832629715ECAC9DC2880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/71824ada-8f3c-305d-a720-6fb730cd6356.roa
Signing time: Thu 20 Mar 2025 13:00:53 +0000
ROA not before: Thu 20 Mar 2025 13:00:53 +0000
ROA not after: Wed 18 Jun 2025 13:00:53 +0000
asID: 36623
IP address blocks: 2001:501:8a29::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:40:39:83:26:29:71:5e:ca:c9:dc:28:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 20 13:00:53 2025 GMT
Not After : Jun 18 13:00:53 2025 GMT
Subject: CN=55727e2d-1c77-4753-af0b-87c002ea0128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9f:17:10:58:11:e2:5f:5f:5f:97:26:af:4a:
73:ba:16:32:e4:57:5f:2d:f0:97:98:44:b3:2d:5e:
b0:dc:6f:4d:46:bc:d5:ab:75:f9:ab:92:8f:c7:0a:
e0:fb:7c:23:bc:58:33:7c:b7:dc:98:ed:08:9b:37:
39:38:fc:19:e8:92:52:8a:26:58:d0:91:2d:a2:70:
b7:e7:f8:72:29:10:2e:11:3f:63:12:fe:f0:cc:f0:
af:5b:d9:d6:7d:da:f2:6e:e7:3a:c4:b2:0c:a9:59:
f9:63:ad:d5:f6:c9:f2:5b:41:4d:91:19:63:3f:52:
e9:58:8a:c5:30:f1:7b:02:ad:20:6e:c3:34:0b:4e:
ca:7e:0a:69:fd:39:13:a5:5e:fe:46:53:66:37:28:
5c:a1:dc:7a:3a:2b:78:77:7b:18:f5:30:b8:5f:ca:
bd:6f:c3:51:31:10:da:4a:5e:38:0c:c1:39:a6:fa:
9c:bd:1d:e0:0c:bb:61:f9:98:3e:ef:3f:4c:be:ef:
5a:2f:9f:82:68:91:ce:e7:ff:b6:0d:50:53:55:fc:
c7:02:d5:64:aa:71:7b:77:17:e9:57:98:45:9b:30:
6a:90:d9:3b:c9:22:29:a3:f8:1d:73:db:e1:fb:07:
c1:a9:77:94:d8:a0:2a:d1:67:27:a3:c2:78:71:6d:
76:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:9D:C2:E9:05:12:1E:0D:27:48:0E:43:85:12:87:73:6B:F6:1A:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/71824ada-8f3c-305d-a720-6fb730cd6356.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:501:8a29:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bc:8b:00:27:78:bd:39:db:c6:f0:cd:b3:e0:44:1d:26:be:ac:
19:0e:bf:eb:2a:25:e9:3e:3e:45:c0:08:f4:8d:5c:37:65:ac:
5d:69:4c:b8:15:0f:b8:72:12:cc:5f:b7:f6:2b:c2:0a:8d:f4:
e2:01:28:fa:08:28:ba:20:de:85:2f:f2:3e:10:55:70:c4:ef:
f0:05:92:2e:bc:ee:7d:3a:71:01:91:c1:0f:36:a3:e3:f4:91:
a0:9d:fe:bc:4b:51:4e:aa:50:0c:ac:00:a6:df:c4:0a:91:e3:
86:21:5c:bb:65:e2:ac:43:a2:24:b0:2d:43:2f:87:71:4b:c9:
47:d8:7a:43:23:49:15:6a:7d:5a:85:7b:ae:e2:a6:b6:8c:b2:
ea:1f:64:9f:12:62:77:2c:25:06:9c:7a:7e:99:9c:8b:8d:5a:
1f:77:01:58:c6:b0:9b:f8:50:1f:b8:31:2f:1c:bb:64:84:9f:
84:c0:7b:df:8a:62:a4:75:57:d4:70:42:fe:4e:13:9c:19:ca:
e5:1c:ba:2d:31:e5:63:0c:c0:6c:7d:5b:50:f2:09:55:16:aa:
31:33:58:e3:a3:b4:0e:67:f0:70:1c:d4:be:57:2c:32:4f:00:
a6:80:f8:18:bd:96:5b:64:6c:f9:98:ab:8d:7d:bc:cd:98:83:
fc:5f:68:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:20:21 2025 by rpki-client