Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/76a30a39-5d2e-3cfd-98f3-cd40b6121ead.roa
File: 76a30a39-5d2e-3cfd-98f3-cd40b6121ead.roa (raw, json)
Hash identifier: KQLa0ZR8NlU7nsLmf0yXlGSSol1bHTAT4OHYmB5upd4=
Subject key identifier: 68:43:20:0A:D5:B3:D1:31:CA:48:49:72:80:6C:5D:9B:82:B4:AB:FE
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848A3F587B7E52CD59303D8C980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/76a30a39-5d2e-3cfd-98f3-cd40b6121ead.roa
Signing time: Thu 23 Jan 2025 13:38:22 +0000
ROA not before: Thu 23 Jan 2025 13:38:22 +0000
ROA not after: Wed 23 Apr 2025 12:38:22 +0000
asID: 396613
IP address blocks: 2001:501:b1f9::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a3:f5:87:b7:e5:2c:d5:93:03:d8:c9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 23 13:38:22 2025 GMT
Not After : Apr 23 12:38:22 2025 GMT
Subject: CN=47457945-2fb1-4982-a3fb-6bfad380dc2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:19:64:c9:89:8a:41:6e:3b:92:b5:93:a1:df:
8f:02:26:bd:be:6e:fb:2e:3d:50:c2:9e:e0:4b:6e:
8a:da:0b:e5:59:19:98:0d:73:9b:bc:70:2d:ca:0b:
dc:a3:dc:ff:35:49:19:dc:74:f4:1a:87:9a:a4:b5:
7b:0e:fd:ac:64:ce:93:c4:17:ab:fa:6b:33:bf:5b:
14:0b:69:32:79:5b:4c:b3:b4:95:b9:5d:a1:2e:98:
25:17:7a:e7:04:a0:13:6e:96:cc:94:13:6f:7c:40:
4b:45:cc:9c:f5:91:67:7e:3a:c7:74:32:f0:40:2e:
91:61:f2:a0:67:61:8b:dd:4a:b6:b3:aa:0c:1b:bc:
4f:8b:b1:8b:df:53:81:1f:e8:f2:a9:38:12:67:87:
5c:95:23:e7:c5:e9:fa:44:1c:f2:c9:a1:08:c1:6a:
bc:3d:cf:c8:d6:d7:34:5e:14:42:a7:ae:23:23:16:
96:97:fa:be:cf:96:57:1c:fc:b5:fc:64:65:44:0b:
35:42:af:e6:eb:cd:ad:a1:47:e0:d7:cd:ea:8b:a6:
90:ad:7a:a8:9b:00:bd:14:47:95:0e:7c:a2:ec:96:
15:aa:1c:dc:3c:f9:ad:d9:2a:00:f4:25:04:07:7b:
5a:43:e7:ca:e8:af:fd:45:01:72:02:03:51:d7:aa:
68:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:43:20:0A:D5:B3:D1:31:CA:48:49:72:80:6C:5D:9B:82:B4:AB:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/76a30a39-5d2e-3cfd-98f3-cd40b6121ead.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:501:b1f9:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:59:e3:b6:1f:7f:38:4f:9e:28:30:e0:36:7e:40:2a:0f:dd:
b4:40:78:6a:06:8f:6d:7e:a8:d5:5e:61:26:62:61:6a:f4:40:
a1:d5:ae:79:fc:cf:03:4d:ed:45:d4:6f:01:48:3e:19:26:f3:
fe:1b:8a:52:5a:dc:86:11:eb:d4:e7:0d:eb:19:d3:67:c4:ff:
e1:cf:bb:27:0c:70:4a:98:2b:a5:19:b2:31:f6:ed:43:9e:76:
17:5b:53:46:0a:f2:07:51:fb:a2:51:b6:6a:ad:a0:ad:16:3b:
34:b7:5e:f2:98:97:b2:62:5d:61:df:cb:5f:3e:e6:67:bd:b8:
f5:d8:2d:1f:86:5d:1d:f9:b8:f4:6c:3c:57:bd:61:ce:e8:0f:
06:4c:27:e6:00:c0:28:ed:e7:3f:7c:f0:b5:b7:e6:1a:df:ff:
be:41:89:ed:11:25:80:db:01:96:76:90:e6:f7:ec:84:ce:81:
e4:8b:52:7a:55:b5:1b:af:bf:43:85:07:e7:63:45:0c:97:c0:
69:c0:af:eb:db:63:2d:61:15:cf:45:c7:b5:a3:c1:02:72:a3:
5c:20:38:63:a0:ae:7d:23:ef:7f:db:5d:65:ca:a3:ed:02:77:
d1:24:26:f1:b6:52:c5:5b:1d:35:cc:46:03:6f:12:ed:3a:6f:
b0:e4:a7:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:54:19 2025 by rpki-client