Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/79976fb1-0a9d-31da-b184-3a5c009adb21.roa
File: 79976fb1-0a9d-31da-b184-3a5c009adb21.roa (raw, json)
Hash identifier: BzHHRtMhD1N2KZOyzLCRKIrwM51XgWA+7kiTl2k28a0=
Subject key identifier: B4:48:71:81:0F:1E:64:CF:A9:81:9A:2C:94:17:FA:1D:E9:7E:F9:46
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858494039837F0E4EDDF64596F280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/79976fb1-0a9d-31da-b184-3a5c009adb21.roa
Signing time: Thu 20 Mar 2025 13:00:53 +0000
ROA not before: Thu 20 Mar 2025 13:00:53 +0000
ROA not after: Wed 18 Jun 2025 13:00:53 +0000
asID: 396573
IP address blocks: 2001:501:8a29::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:40:39:83:7f:0e:4e:dd:f6:45:96:f2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 20 13:00:53 2025 GMT
Not After : Jun 18 13:00:53 2025 GMT
Subject: CN=bcd23d93-8193-4da9-bdd6-ebbac57cd678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a3:2d:c9:c0:83:2f:ad:b8:f8:f4:55:46:f3:
81:b3:b9:37:64:90:44:67:59:f6:c8:ec:ad:c6:c6:
bf:c2:cb:1a:80:4a:d7:20:1b:86:03:04:70:de:c8:
86:66:8d:aa:a0:eb:f5:4c:e3:08:85:50:04:e7:05:
9d:3e:46:c2:41:8c:15:ca:b3:5e:61:da:a5:8b:8d:
61:d3:33:5e:36:25:71:4c:3b:70:e8:06:2c:db:50:
cb:51:d1:00:a1:f9:65:09:7b:7c:8c:3a:9d:94:0d:
af:84:b0:81:f1:7b:09:ba:5b:4e:e1:8f:1a:9e:fc:
7c:be:9e:7c:85:9b:18:b0:3b:3b:45:05:76:93:17:
2e:ea:3e:05:3d:3c:ab:22:17:2d:cf:81:48:af:44:
90:75:da:55:84:8c:c1:88:bd:f7:a8:f5:db:f0:35:
d8:9a:82:30:01:23:06:37:1e:48:b3:c4:0d:66:13:
f9:7a:ed:bc:93:0d:88:8c:ba:b8:90:32:e7:b2:91:
ae:21:b9:55:16:4e:46:11:4f:f8:32:94:15:80:3c:
d5:a3:91:d1:da:2b:32:b4:aa:36:ca:26:7b:a9:92:
47:90:34:60:1c:75:86:40:5d:40:ee:68:1b:ca:9d:
a0:1b:d2:8e:7e:37:7e:5e:c8:29:57:cf:7b:1c:fb:
1b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:48:71:81:0F:1E:64:CF:A9:81:9A:2C:94:17:FA:1D:E9:7E:F9:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/79976fb1-0a9d-31da-b184-3a5c009adb21.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:501:8a29:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:d7:d4:ad:0c:c4:e5:84:cf:24:5d:83:74:1b:7b:22:03:fd:
a2:cb:bf:3e:0e:e0:c7:a9:0b:37:88:7a:49:23:85:d0:ef:bb:
91:de:35:1c:16:09:10:2e:a0:0e:f7:42:9b:de:b1:84:56:0d:
22:34:3f:d8:94:e2:10:2a:3d:b3:20:4c:38:38:3d:55:d0:82:
39:d8:27:6d:f7:46:8d:d4:4d:95:91:3d:69:fc:37:58:8d:e3:
c4:b6:09:d0:56:13:43:e6:b0:6a:b0:27:d9:e7:60:13:17:cf:
1f:95:ac:71:09:d9:47:74:b5:33:2c:ef:f4:dc:57:8d:14:db:
d7:ae:ad:55:f2:94:ae:ae:9d:fd:1e:c5:c8:da:5c:5e:cf:f9:
57:a2:b8:07:8c:f0:10:7d:1e:9f:17:82:00:d0:d8:17:99:ef:
40:6a:d1:dc:ea:d8:08:a9:87:3c:f9:79:e6:8d:08:77:38:08:
20:d9:b6:81:32:26:3e:0b:86:be:17:5c:80:d6:15:d4:d1:3e:
f3:d5:5d:f7:69:77:5d:67:35:d8:5d:4a:5e:f7:28:d8:19:cc:
cf:26:99:ab:35:2e:1f:06:be:0d:89:09:37:86:ff:bd:72:65:
1f:f2:db:20:5e:f0:85:cc:f5:31:17:7e:e2:af:cd:0b:b2:2c:
37:63:a3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:40:12 2025 by rpki-client