Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8ee7cdc1-ca4e-39be-afc1-7371254d0dd7.roa
File: 8ee7cdc1-ca4e-39be-afc1-7371254d0dd7.roa (raw, json)
Hash identifier: 5VHAaJGjzSopbbmSIeI8NIOVDET7q4nAuryMoMOQ1Y4=
Subject key identifier: 1F:74:16:E5:B1:56:0D:96:17:96:31:0E:03:5E:1E:0A:23:4A:D9:57
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848A3F58AA8DBEB14F8F5369F80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8ee7cdc1-ca4e-39be-afc1-7371254d0dd7.roa
Signing time: Thu 23 Jan 2025 13:38:23 +0000
ROA not before: Thu 23 Jan 2025 13:38:23 +0000
ROA not after: Wed 23 Apr 2025 12:38:23 +0000
asID: 396597
IP address blocks: 2001:501:b1f9::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a3:f5:8a:a8:db:eb:14:f8:f5:36:9f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 23 13:38:23 2025 GMT
Not After : Apr 23 12:38:23 2025 GMT
Subject: CN=af4e0c69-d87b-4343-8ca7-1c94c65caa32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:79:35:4b:41:fa:3e:78:70:35:86:d1:11:d7:
2d:db:3e:18:0d:49:11:11:65:a6:64:56:99:ab:f5:
ee:22:26:f7:69:6b:d1:f0:b1:a3:37:55:b1:7c:7a:
ad:93:af:8e:62:83:4b:29:3f:8d:be:00:52:6a:a0:
c6:df:09:01:d2:dc:2e:51:2d:23:49:bb:ee:d8:12:
59:f8:7f:d9:ec:6b:78:35:f4:d1:d4:7a:14:90:63:
fb:f4:2c:d2:a6:80:2c:43:23:c3:a7:70:b7:bb:cf:
d4:28:1f:ef:f6:00:2f:a7:02:06:33:60:8c:32:1a:
95:19:36:c8:b0:be:be:17:e4:ee:fc:34:c1:6e:d8:
9c:1a:3a:eb:f1:43:d2:bd:83:6d:61:c2:d9:f2:77:
f6:6b:8d:4d:c0:15:ca:60:58:70:40:f4:de:12:ea:
09:fc:76:74:88:e9:b9:96:ba:66:97:93:33:a6:b0:
20:6d:31:88:c0:9d:33:cf:70:62:ac:91:b1:06:bd:
e4:eb:51:8c:dc:e6:6f:d4:df:b2:a0:54:f6:d8:85:
33:5b:83:19:25:ff:c5:34:45:7d:a9:ee:e2:c8:ef:
71:69:85:be:50:66:d8:ac:1c:fd:3b:61:72:ba:26:
38:42:ae:3e:d4:0c:54:04:6b:78:b7:81:7f:62:36:
5a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:74:16:E5:B1:56:0D:96:17:96:31:0E:03:5E:1E:0A:23:4A:D9:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8ee7cdc1-ca4e-39be-afc1-7371254d0dd7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:501:b1f9:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:9b:2a:e4:ae:e0:3d:3e:f3:85:6d:49:24:74:db:3e:87:33:
f8:a3:b1:f8:7f:b3:32:80:3e:95:03:b0:ce:8d:24:09:0c:90:
bd:60:b0:fb:22:e4:62:ad:04:c7:a9:0e:51:1c:35:8c:c4:9c:
08:42:6a:a5:3c:58:97:e0:3a:e4:8b:5b:c3:0a:ed:69:eb:f5:
39:dd:12:30:32:4b:b5:e7:a3:e7:96:89:f3:a1:1b:34:d1:d8:
95:b6:0b:02:8d:56:81:f0:ee:41:b5:42:c3:8f:44:d1:8e:28:
48:da:af:0e:51:aa:54:31:dd:62:37:c1:38:7e:23:24:e9:2b:
a1:80:e2:98:c6:40:45:43:82:44:7c:e8:bf:61:b0:1f:36:00:
9e:23:19:84:7a:62:88:fe:60:91:58:a4:9c:ac:3e:b2:84:d3:
09:d0:1e:28:10:1f:8e:15:fb:f7:ca:a1:12:77:ef:1f:f4:ee:
dd:3c:b2:bc:7b:66:69:3b:d4:98:31:6c:8b:8f:46:91:cc:5e:
f3:1e:d5:30:1e:d1:85:37:6a:7e:67:71:3c:c2:d5:74:fd:1c:
85:9d:bc:0c:80:6e:b9:70:c0:5b:58:5a:ab:38:09:2b:eb:91:
a6:ef:29:90:eb:57:2b:4d:11:05:8c:d7:f2:cf:48:a2:98:27:
6e:b0:3f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:02:47 2025 by rpki-client