Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/863eada0-b3d2-3e28-a751-b7e0ca5674d9.roa
File: 863eada0-b3d2-3e28-a751-b7e0ca5674d9.roa (raw, json)
Hash identifier: 5peDe5fDhPuCyGTlJVflsZye+RLV9Hw/z4VlliDHLMc=
Subject key identifier: B9:E2:ED:16:16:2D:38:14:D2:D3:E7:69:E0:25:B1:03:24:A0:2C:91
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285849403982D89AC04E3EF17AD960
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/863eada0-b3d2-3e28-a751-b7e0ca5674d9.roa
Signing time: Thu 20 Mar 2025 13:00:53 +0000
ROA not before: Thu 20 Mar 2025 13:00:53 +0000
ROA not after: Wed 18 Jun 2025 13:00:53 +0000
asID: 36619
IP address blocks: 2001:501:8a29::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:40:39:82:d8:9a:c0:4e:3e:f1:7a:d9:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 20 13:00:53 2025 GMT
Not After : Jun 18 13:00:53 2025 GMT
Subject: CN=904a48f0-cfd8-49d4-9346-023ed30552b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9f:89:df:2d:b3:90:cd:1f:0a:53:e5:b0:c0:
80:75:0d:f1:07:49:b3:52:c7:fa:fa:68:7f:59:8c:
19:00:0a:f5:36:2e:f0:83:28:25:60:60:76:ee:1e:
ed:cb:1e:9e:c5:1c:cb:f0:03:00:c2:b8:70:af:67:
9d:91:36:8d:b1:39:f3:d3:a5:f6:26:c0:3b:1a:30:
4e:a4:33:30:8c:08:c0:b8:49:e7:b9:9d:b1:a2:12:
4e:7e:a9:82:89:26:41:94:5d:68:f7:a5:d1:0c:e0:
81:6b:79:3d:1d:b3:91:9f:0c:95:66:c9:d2:fa:fa:
b9:d1:4c:e8:5b:45:42:6c:cb:8e:f3:3b:63:0d:ba:
95:0a:39:5c:92:b3:bd:1b:e7:59:f7:3c:9c:7d:b6:
92:96:02:3a:eb:3e:be:ff:94:c6:93:80:63:13:ad:
ef:ca:55:8e:68:4d:2b:dc:4f:64:c5:6f:86:51:70:
a6:83:30:38:36:be:ed:3b:82:31:51:6b:b7:11:87:
8a:51:66:6b:a5:58:24:92:05:c6:a4:99:6c:3f:0d:
82:d7:78:1a:2c:4f:37:ab:73:73:73:8d:26:82:0f:
e3:3a:af:ba:ee:2d:bd:e6:20:4d:f4:37:37:c2:de:
2c:a9:b8:9f:44:e0:5e:51:e1:0c:67:b0:3c:ba:3d:
bc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E2:ED:16:16:2D:38:14:D2:D3:E7:69:E0:25:B1:03:24:A0:2C:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/863eada0-b3d2-3e28-a751-b7e0ca5674d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:501:8a29:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:62:b9:7f:b9:fe:b2:19:87:8a:67:5b:fe:27:21:a3:6d:47:
0f:b9:fe:a5:7e:4d:9d:2e:0a:a5:d9:f2:31:52:77:ec:f1:4b:
39:f1:6b:df:fb:17:3b:25:3d:2a:50:cd:1b:d5:f5:b4:3a:2a:
68:1e:b3:91:90:46:6a:dc:a7:97:93:6a:0d:fc:6b:db:d1:f0:
23:50:85:63:ae:35:93:6c:d5:36:02:f6:c2:40:85:49:01:9e:
d4:a7:65:80:61:4f:9d:61:6b:13:8c:f1:64:00:27:f0:7d:97:
0f:7c:18:78:af:cc:25:f6:44:06:75:37:42:02:f5:0e:76:99:
24:a5:65:73:95:f9:d3:9a:ee:89:ea:de:6f:e3:0b:b1:31:12:
7f:d0:5d:ab:23:b3:55:fa:ab:cf:b8:93:58:13:f9:c1:38:fc:
80:82:56:dd:07:e7:dd:e7:f8:95:03:cf:4d:7b:73:b7:4c:1a:
fd:43:be:6a:7e:55:81:dd:9a:9f:15:91:79:da:5c:1c:21:2f:
06:f9:95:ba:60:1c:fe:d0:44:77:89:02:10:b1:f7:9e:f7:32:
e8:0b:0c:c2:32:50:ef:24:58:d4:4e:8b:af:9c:69:02:2e:73:
3d:2b:f7:0b:e6:b1:7c:27:d6:8f:6d:1f:cf:da:7b:22:f9:4e:
95:27:6d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:16:25 2025 by rpki-client