Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7e7d6c5f-4b57-36aa-8e96-8e347b0a383a.roa
File: 7e7d6c5f-4b57-36aa-8e96-8e347b0a383a.roa (raw, json)
Hash identifier: uR71CbIvF+Z18Lbu55OSdBUESNN4tXprBc3ci+8SseM=
Subject key identifier: CC:62:69:BA:D8:63:25:AA:04:DA:80:FD:07:86:2E:5A:9A:D0:E8:F5
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858488DAB71526FAA379B47725D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7e7d6c5f-4b57-36aa-8e96-8e347b0a383a.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 396568
IP address blocks: 2001:500:7967::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:71:52:6f:aa:37:9b:47:72:5d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=167cada4-6d0f-42c1-90f0-0bb4d2ba2ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:1b:62:e3:be:74:d4:5c:96:d1:51:8a:19:10:
6d:ca:4b:06:cf:44:14:13:6b:9c:70:45:6d:09:a4:
f0:3f:7b:7c:18:26:1d:0e:cf:02:fc:21:87:03:4d:
25:69:d6:a3:e9:d2:8a:36:99:fb:1f:9a:f1:41:3c:
4b:9c:c6:26:8d:29:63:84:92:34:0b:0c:31:0b:a6:
39:4c:bc:99:eb:dd:34:62:79:87:0c:f3:af:a1:82:
bb:6e:d0:56:af:9c:63:93:e6:07:7d:b4:9a:c4:60:
96:92:04:bd:65:14:ab:78:d0:ce:08:9c:0b:00:01:
91:93:39:64:42:cb:f2:40:de:92:18:7e:51:21:d0:
64:db:6b:31:87:d7:50:dc:da:a9:4b:aa:d5:59:5c:
62:12:71:f4:75:5b:3e:a1:3d:7c:8b:24:dd:b7:67:
e2:0a:71:4b:b4:5a:72:e1:c2:79:9a:84:67:75:a2:
f5:14:1a:fd:12:f7:7a:17:7b:e6:92:58:c9:83:b6:
96:d4:dc:5b:a7:91:ae:07:a1:ab:3e:ec:1d:b1:9e:
3d:9e:d9:ae:dd:ea:f6:eb:57:5f:0f:b5:43:1c:a1:
00:c6:0d:87:b6:d3:ac:00:79:19:14:f2:86:9e:28:
2d:2c:d7:5b:2e:88:0b:95:70:a2:44:d2:a3:bd:d1:
e6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:62:69:BA:D8:63:25:AA:04:DA:80:FD:07:86:2E:5A:9A:D0:E8:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7e7d6c5f-4b57-36aa-8e96-8e347b0a383a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:7967:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:69:98:a1:96:36:63:25:ca:45:60:72:2e:cf:b0:f8:3b:96:
7f:41:02:9c:d8:fc:b9:41:d5:9a:f8:1e:87:d3:90:e7:d1:42:
3f:fe:38:8e:c1:45:81:c4:29:57:66:a0:99:80:90:f5:ab:55:
91:38:6b:22:12:04:0e:d8:8a:4f:05:bd:81:20:8b:1e:e7:cf:
af:0b:8e:39:28:ef:55:27:2d:b1:3e:00:c2:d7:a8:89:f5:cf:
d6:c2:30:82:c5:3a:17:de:35:3c:51:6b:f9:c0:a3:1f:3f:e6:
1f:ca:76:35:64:00:63:01:d9:04:6f:2f:29:02:c5:ae:a1:bf:
d4:ce:86:a4:6c:4e:71:cb:fd:57:10:2d:e8:80:d7:04:1c:33:
8c:90:c7:b9:c7:c0:dc:61:bd:47:6f:2b:4d:d1:03:86:34:e8:
a9:cf:19:16:ef:00:01:7d:46:eb:8b:f2:5e:17:c9:5b:66:9e:
b4:1e:8b:b0:fd:49:13:72:35:1c:03:18:ca:98:b6:3e:51:9f:
74:e4:bf:d7:07:d2:08:d0:d1:4d:94:f3:f1:46:97:43:2c:d9:
7c:24:5d:34:7c:00:64:df:d0:7d:b1:a2:3b:d0:d7:fa:06:a6:
17:f9:f6:5e:82:a7:c6:bc:05:55:fe:59:9a:d6:6b:8f:38:fe:
86:3e:92:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:17:17 2025 by rpki-client